last executing test programs: 1m23.021196057s ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 1m11.802602305s ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 1m8.555563812s ago: executing program 3 (id=2704): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) syz_genetlink_get_family_id$smc(&(0x7f00000003c0), 0xffffffffffffffff) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0), 0x4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000300)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="fcf965858a37e968d013a5c646587768e91e6c0f046574e35c80837dbdc2c23dcaf4ba04998c209cbf3c34f396154be22fd4fdf3ec95fd15bd03550d8a4e1cc201fd2112e3bb27e04f1d0a474e5b5d7c8660febfc1fe82b5285ceafa9278aba9e797ad09e36893a930ed91dd506b35e5c6a13516cb94364da289aec980225969f0023231a8a3c02044f2033e73758df7f1edf401547eb88465462de9c6dfbc31bf2ca507ca6edb1d0c68b96c5ca8d1b0e3334b0979b61c6b3c6d81ff69f093c6a5aaf425796b3568ed9cde1540324719e578aad3304ab4875e70616b", 0xdc}, {&(0x7f0000000180)}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000000780)="c57ab2dfa29c047e589db96167dbb0bb45f09035b1f70bb085fc414af2132e06ea4e1f9de66948294b543f064bdd19f3f1a00d49285aae710009e8abf4d4233528b677eedaa654519b9c44b63969d4e2c416fd683827f957e00c0136442911e5888a0a3fd6a7a4c06285e3e7da73a671b311a1b8fc54e2830b8bdbf200e6150083c44fce76c545198efb03762797690b9cfefff4758541a4e5306671347c383950bff966de183e84454e3d87d6d925cd06e9654aea15bc156772938fa3e10776e242aa2de139abe07a83058af8bb0b97bc13a2a51b0b7b0c308f7eeda5b89323c9ff70", 0xe3}, {&(0x7f0000000240)="187f85783f231b5e02c7829b61298a9f1fd084816a9c16a76090ea5991b383dd", 0x20}, {&(0x7f0000000280)="676b9f1c48c00cb2a29b153724f70b4039dd3061f80d8ba955bd7836cdb096c1fa8ae9", 0x23}], 0x6, &(0x7f0000001a40)=[@iv={0x60, 0x117, 0x2, 0x47, "02ab47e6e3570a07556b15b703608c0ad5e92750886f9a815dec3ba737a394ad1513c40c3de96a88e3659759924614efb28ad23715d2b5aa058908011b73bcd39c15a2afe9a068"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xff}, @iv={0xc0, 0x117, 0x2, 0xa9, "e62b552d5cf5f557df1100b39864bd651ae5634678a614f3fd5e5df5e704dfa1853d0c1427e09849ad4b7483ed2239c3b8b4f8da2931352369151012711b66fa366681d8421b8e88cc07ed20352800871e3d4030c12d742fc65fbb765bf3f534acc8f182e3d038369a219500e673d505389f782b2aa602bee62159c1f361fa8491cc4e803893579d0092b649f6d7a51545bd455dfbba3dfc164264cbc20ecfa9206e9a00ca0deafd6f"}], 0x150, 0x240004c0}], 0x1, 0x40) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$llc_int(r3, 0x10c, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$int_in(r4, 0x5421, &(0x7f0000000100)=0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0003801400010063616966300000000000000000000000140001006d6163766c616e3100000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001007465616d30000000000000000000"], 0x110}}, 0x800) sendmsg$NFT_BATCH(r4, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = socket$kcm(0x10, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd", 0x21) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r8, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) shutdown(r1, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1m8.330026795s ago: executing program 3 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000c9e88b0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000"], 0xf0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000000000000d"], 0xd0060) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x101, 0x10000}) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 55.684020348s ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 50.185016005s ago: executing program 3 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000c9e88b0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000"], 0xf0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000000000000d"], 0xd0060) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x101, 0x10000}) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 35.360234884s ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 33.26111758s ago: executing program 3 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000c9e88b0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000"], 0xf0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000000000000d"], 0xd0060) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x101, 0x10000}) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 15.347756569s ago: executing program 3 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000c9e88b0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000"], 0xf0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000000000000d"], 0xd0060) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x101, 0x10000}) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 14.506972012s ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 3.969092711s ago: executing program 4 (id=3055): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@multicast2, @multicast1, 0x2, "4f6fb4d1af0f724e6118ecd4ac1100843af297baebb0efcdf5a284da144a011a"}, 0x3c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="180000000000000000020000000000629799964050414f96b5bee4e0e89ae139e954996030943097733d9b6c54443132bb6982b235b486aeaca10e75d51b4828729e2ddaff9b09026f3b7eb9ebda36f689b303786f9b4d501650f11caaae1e38a50877a50dcdbfbc07bac8155e66341b5786946d2e37ea7718d6da3f8d6b6f26ab913c81b64b03fbebeed4e41bb590d34b035a723796b6f4991d1886244794517ae15d92d277386fa6963595ede2bb7cf991ea2f1d613e4363dbc9d53389c4b21026d80584a50f873229fbd19b5b8afee7a46f98a22046c400"/228, @ANYRES32=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYBLOB="06"], 0x9) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=r4, 0x34) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x206, @private1, 0x6}], 0x1c) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000400)=""/4, &(0x7f0000000680)=0x4) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtaction={0x48, 0x32, 0x1, 0x80, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3}, {0x4}, {0x4}, {0x47}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000000540)={&(0x7f00000007c0)=@pptp, 0x80, &(0x7f0000002f40)=[{&(0x7f0000000840)=""/239, 0xef}, {&(0x7f0000000940)=""/203, 0xcb}, {&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000b40)=""/43, 0x2b}, {&(0x7f0000000b80)=""/28, 0x1c}, {&(0x7f00000006c0)=""/70, 0x46}, {&(0x7f0000000c00)=""/108, 0x6c}, {&(0x7f0000000c80)=""/71, 0x47}, {&(0x7f0000003000)=""/145, 0x91}, {&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/4089, 0xff9}], 0xb, &(0x7f0000000d80)=""/126, 0x7e}, 0x11163) r8 = accept4(r6, 0x0, 0x0, 0x800) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x2, 0xffffffffffffff42, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) setsockopt$inet6_opts(r9, 0x29, 0x39, &(0x7f00000002c0)=ANY=[@ANYBLOB="ea0e04"], 0x78) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$alg(r11, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="1fe1bc7f", 0x4) sendmmsg$unix(r8, &(0x7f0000003dc0)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffd7e, 0x840}}, {{&(0x7f0000000280)=@file={0x1, './file1\x00'}, 0x6e, 0x0}}], 0x2, 0x2004) accept$unix(r8, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) 3.070624s ago: executing program 4 (id=3063): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x20031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r3}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000c00), &(0x7f0000002000)=0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000800e22b0fe214a7ab2678caba62239ebf535cd42f0ea795465692d21650b53508f67eb2d74ceae90c34801b8d00ec29cc45d6dba3f9a5fa28c6296ce2f6d5a22d08a5", @ANYRES16=r6, @ANYBLOB="495300000000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900070000000000000010001d800c00008005000a0009000000"], 0x38}}, 0x40050) 2.717039076s ago: executing program 0 (id=3064): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40480c4}, 0x20004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r8, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="9a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x802) (async) sendmsg$NL80211_CMD_CONNECT(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x28, r8, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="9a"}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000810}, 0x802) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xc0, r5, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3, 0x3a}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x205}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x10}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x25e}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xe, 0xa, "bc4b438a207405bb5301"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "771387d08877f310db4cbff943"}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @random="a419226ec640"}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @key_params=[@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}], @chandef_params]}, 0xc0}, 0x1, 0x0, 0x0, 0x44000000}, 0x90) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'hmac(sha256-avx2)\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) (async) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x5e04, 0x3, 0x90, [0x0, 0x0, 0x400000000400], 0x2, 0x0, &(0x7f0000000400)=[{}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x1}]}, 0x108) r12 = accept4(r11, 0x0, 0x0, 0x0) recvfrom$packet(r12, 0x0, 0x0, 0x40000000, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x100, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) getsockname$packet(r3, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x30, 0x0]}}, &(0x7f0000000200)=""/42, 0x1c, 0x2a, 0x1, 0xc7, 0x10000, @value}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x30, 0x0]}}, &(0x7f0000000200)=""/42, 0x1c, 0x2a, 0x1, 0xc7, 0x10000, @value}, 0x28) 2.675747983s ago: executing program 4 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20008444}, 0x44484) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b04000000000000000002000004380004803400018009000100686173680000000024000280080007400000000108000440fdfffff70800024000000010080006402f0000080900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001380)=@filter={'filter\x00', 0x42, 0x4, 0x378, 0xffffffff, 0x120, 0x1f8, 0x0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xe0, 0x120, 0x0, {0x100000000000000}, [@common=@set={{0x40}, {{0x4, [0x2, 0x5, 0x0, 0x3, 0x5, 0x2], 0x4, 0x2}}}, @common=@addrtype={{0x30}, {0x80, 0x0, 0x1, 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x1, 0x4, 0x4, 0x0, 0x1, 0x5]}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'pim6reg1\x00', {0xff}}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x1, 0x1}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_extract_tcp_res(&(0x7f0000000380), 0x0, 0x10000) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0xc, 0x0, 0x0) sendmmsg$inet(r6, 0x0, 0x0, 0x2000c000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bind$inet(r6, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0xc, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r7) 2.261085542s ago: executing program 4 (id=3067): unshare(0x6a040000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000040, 0x0, 0x0) listen(0xffffffffffffffff, 0x2d0634a4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) r3 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r3, 0x0, 0xcb, &(0x7f0000000080)={0x0, 0x4, 0x6, 0x1, @vifc_lcl_addr=@multicast2, @remote}, 0x10) close(r2) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4ea7, 0x4, @remote, 0x1}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) r4 = socket$qrtr(0x2a, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r5, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000003100)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000028c0)=""/191, 0xfc29}], 0x1}}], 0x3, 0x400122a0, 0x0) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYRES64], 0xfdef) 2.260585229s ago: executing program 0 (id=3068): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x480}], 0x2, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x8000000000000003}, 0x18) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000080)) sendmsg$SMC_PNETID_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x206c}, 0x1, 0x0, 0x0, 0x24048890}, 0x4019054) r5 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r5, &(0x7f0000003140)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000140)="a18027", 0x3}], 0x1, 0x0, 0x0, 0x404c080}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4008001}], 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0xc, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2700, 0xfffffffd}}) sendmsg$kcm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="8b8d46b73c7ee6a1989a210b8e02f5258183a85bf47705d628d05f9bede3ea3b5731647d1a7b5dec1e8d379059fc390e3129e6efe588f07874a41ce9384a6fae05fb6f042ce813023d86b2a6213b27d8779a8ea826b1a9e7a61e9fceb672757a7be408e1d20587e8baf9e8", 0x6b}, {&(0x7f0000000140)="e8d06ead1cc434b090c2a89b584ef8452c0f303e6e058d67d064e381285839270c646e2bb39cd09d8422f8192b1a07a237e2fa0fd5c007d17faf8af342ea6b37b66e37f10c602b94c59260afad82ac2e151ff06f793c20849b411de50161276a8f6ecd11a5b75867ce2660134ded3264864c1d8ce36a8046b839582997fc258a8e641bb32646d89087d6a217e3bacffa1e767f95e2ddb92f03f6ee583f7f6ee200ca80e4382e3545f5a6db8aca436f65349cda7fc10424d1c469fdf731c26378479644c3626fce0da1453daa5f6734b13d8fbc58af", 0xd5}, {&(0x7f0000000240)="024acb7f64d977920aaadced9485ff8bee4dbb1fc1c59e8a2ca10cde2404ff07e41819212330b21213ffa9", 0x2b}, {&(0x7f0000000280)="42cb1b4150f06deec3d5d2f12534e3033f975b2a88af51729e38c7c3abeac018bbf1ff5433f636c7916b81e34fa4aa803fe755a8f99694529cde0b18cfc7cdec471aee514b1221cdeecbe0a8d5cba35def01fe47623da63c3bd6d02455c428e7ad4ccb88d42c120443ac8f5f595bd9f0e84582208e2d8f524513b4116c8dd6f931c3d8aab22a2ca3014e2790ea01bd8f85f61aa79ca1", 0x96}], 0x4, &(0x7f0000000380)=[{0x28, 0x109, 0xd8, "d49c293ff48b1c5f880f04dfe6cd089ffe"}, {0xc8, 0x101, 0x0, "92b49fc062beebc951efebe012d2c16851438949fae8f53eab0acc44dcedd536cd21ead1b7381a17fe953723a4d103e62d86e8dc2b50c793afad24b439187c04de0ce878bd11149c4d6b300dbf3711a0b73ace8881c6eafce3031a0b23c98c2f10cfcfa59989bd0de7ccbe1aeeec01cff33cdae59d5803b843f97edd4cd132e9cffcc799644ac4125986fdd7a99ff2cf03a94b34c9aca2d69b4e55f290d70d7fc4a6e2bb8b9e8168e50063c4c9b64e7db0af09fd85"}, {0xa0, 0x10a, 0x2, "6c677a3aba4797f47df6ae20414edecbb173629df41597dbb7bc5e82f661e8234a897b5649234acc3a1a1cb2cae0d3266c49e7e81235c493ce63582d0440676bae0c2e1becec6df51ed214774c42e43ce8eeeade37bc8749792d6da21227eb62483ef35b6c04cae214b52b9faf21951dd92cbb792950251b1ae27e7a7051da16f98c0811b2209ab5fb308a2de6b8"}, {0xa0, 0x10a, 0x8, "5c33912e927d8e44b2e5f4e52eefb577278ca05cca641df48f79db4f337f101cc7b7c4b9529fee78ef1daf5c9baa3be2305a50d7a2e24bd81601e91eebca165dd81102c8196eeb6b0e105499b8228c8175c8c18339f5d06e69aa4c56332d29d7492c90eb24dd85a74ed1e3a63fc416b7ad3360a1368e3791e4156111cf0ce476ff96c676ed2e96f9b902"}, {0x68, 0x6, 0x7f, "50e92292ebb8fd855f209d5f70e0dbb28d20f2f41d13fa177870222ebdb306f529adeece9b5caa3f3181a92f3ea24e4574a81492a1140adbbdd5710a186e5fa2ade27cf0da95f80a29c50e5806ce5351f29de7dc"}, {0x88, 0x1, 0x400, "31c0e4012b074c43b820ade7986291dce8137cf60d9b66d826eadc4b1f7240653ef695f66e3edf16e4f4233259e438b73a53c1b063ad066c99281a5deee75e23a3d4a676058c87eb72ce91dd7f0410ba5f50b622e961dbfcdeb3aa43421088517f8b2248dedc1a7f0c896478e3cda70281ff7f387a"}, {0xf0, 0x6, 0x40, "559b8aacc94398c7cffaa6b23eee07c02061e0ddfb7519d1f6cf85939d1f8d2165fc624ef23e6b65dafe0bb584bbfc62d0aec874a6439b07c8069dc234aa91010bd0a2fd1a994642c88120bacaabb0839615690955a34233af78585080f12c10261b772f9529a2b67592d08d0ed047c6f86bf84724b843d764df2b0bd0af26785ee6cec451c4dbe65e7dfe644647f2e0e0cd121d18f3ba39d7f3c25fe4a57518d00266d44457ee22a01849ed329a2cc787358951db42a9f9f8a94ed20906ced513807d2a8dfe2b87b40b99d85f39383a9d61af87b8ad22a16efe1b0b65bd"}, {0x98, 0x109, 0x1, "3be73c71d58d16953271172d0dcbcff6341605d5ad31c4f611795a88ad7101dab2ef83cf3d4ac889ce724be747747e7af7294a7e542139e0d6224afec8c58c77a907d24ead0c0af82f7650fb0614cbeddaa2c08eef7a8b6bcb7afb1fa8d46d7350f49788e61230394fddb4483ddfaffef0fce2c2f058e24167ab777ad86188b833453ece3dae"}, {0x18, 0xff, 0x1, "72d525fbb3"}], 0x4c0}, 0x40880) listen(r1, 0x0) shutdown(r1, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x6, 0x2, 0x2, 0x1, 0x0, [@local]}}}, @tclass={{0x14}}], 0x40}, 0x0) 1.859094768s ago: executing program 2 (id=3070): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) unshare(0x400) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long}, 0x8) 1.73661942s ago: executing program 3 (id=2706): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000c9e88b0e000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r2, 0x0, 0xffffffff000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2000"], 0xf0}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a000000000000000000000000000000000000000000000000000d"], 0xd0060) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r2, 0x0, 0x0}, 0x10) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r5, 0x913e0000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r7, 0x3000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r9, 0x9d471000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000004, 0x28011, r9, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x101, 0x10000}) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 1.695793427s ago: executing program 0 (id=3071): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r0, @ANYRESDEC=r0, @ANYBLOB="ee00350001d41a3a168dcbfdc327ab40c734805bfc2e489f1695290eefd455c8b7fc7b921a7157726fce2a8249df7f2145afd272f7903c5d4e94292cf154520cb5648856416aff3276f851663706055c27b7bc6a573190d1eb533244739b3d948ba2380dbf284134"], 0x4c}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000040) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 1.598977717s ago: executing program 2 (id=3072): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdc02, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6gre0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc890}, 0x20000000) 701.007017ms ago: executing program 0 (id=3073): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000500], 0x2, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000000000000000000000fffff90000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcfffff900000000"]}, 0x108) 699.870791ms ago: executing program 2 (id=3074): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x9}}, 0xdbfe, 0xffff, 0xfffffff8, 0x5, 0x10, 0x4, 0x8d}, &(0x7f0000000280)=0x9c) (async) r1 = socket$kcm(0x29, 0x2, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r3 = accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e21, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7f}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x18}, 0xd0) bpf$BPF_PROG_QUERY(0x9, &(0x7f00000005c0)={@ifindex, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000000c0)) (async) pwritev(r5, &(0x7f0000000540)=[{&(0x7f00000003c0)='\x00!G', 0x3}], 0x14, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="ac27ebc1538556afe458cfc2c7f250b4e7f6f991bc99fff9640b76f72641095e5ae1bc0c0172ec0867e97cc35bfd9864b2", 0x31}, {&(0x7f0000000340)="ca235c2a83157464a3f0a0d5f5351d0c2764122f2c2ae88efc421b294319b63ccb9189fb144ad9ebb8a70cdd986df587e97c2827544b6035d4db1f4dbac019", 0x3f}, {&(0x7f0000000380)="68742fabdc15819ad216ebd37df3151fa374cb0c43af1bc63c3a169663684fa64d01291e801954cd9c0758740997722783a7ac339d5a7ff597b09c7448a539d6d9793dceb31d28fac27844c82effe33ea8a427619af9c671afc4571f8f91d4d1276cd65fc7bf9489e9434f509450d38b5725290de7017c0d20003231d936dc4d389a9bd8bcd9e125dfe0be905c5e751158db54a81f836797d2e9e3bb1c9757523442daecefe81e00", 0xa8}, {&(0x7f0000000440)="e2634bc3882f6c02195646d3936cc1ce09f1c83d115a24d28422dd1f5e37bcadc2db7108a82c90dc18a8ee9c4d02c9db", 0x30}], 0x4, &(0x7f00000004c0)=[@assoc={0x18, 0x117, 0x4, 0x40}], 0x18, 0x8004}, {0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="ac", 0x1}, {&(0x7f0000000540)="7b483aa14285f1347a3e4e6cc157f455325462907c54c23a7f7b35360f4a2d03de12950a79d2229e891acedcc520052a", 0x30}, {&(0x7f0000000580)="5645d1f632e33701669165f91dff11658ba14f928aae5b65", 0x18}, {&(0x7f00000005c0)="2b24539feacc8304be1cd747b90ebcd1143dadfdf7fba32d3126358a55c58ead6544878cbc6d3250", 0x28}, {&(0x7f0000000600)="77e7eb0d727e5bde0a761ad8c2a7f7890e89eae6bafe0b5f3f65fb25ee861463013e1398cea0946f59fdc9e792c4b82a85dec7b4f46f4d43e712d6f15e3b5c1baba3794039a61b5e63155cf3413f912c552dffe0d729104bf222260502b8c619871daa1929cbf0995c9d42a067aaa0015fd8d8aa7dd8f4777faef1c601f011ebef0e3475ee", 0x85}, {&(0x7f00000006c0)="63d219a07515f332b8857377a3d35639daa31b5e4e86642083a538e985b2", 0x1e}], 0x6, &(0x7f0000000780)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x24000800}], 0x2, 0x80c0) (async) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) (async) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r6, r2}) (async) shutdown(r6, 0x1) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000030400000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="7fff0000000000003c0012800b000100697036746e6c00002c00028014000300000081000000000000000000000000011400020000000000000000000000ffff"], 0x5c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) listen(0xffffffffffffffff, 0x8001) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r8) 605.024944ms ago: executing program 0 (id=3075): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000a40)={0xa, 0x4e22, 0x7fff, @remote, 0x9}, 0x1c) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="032481205d077f86fa744de94b000000a391acb981b5d1b707d437b08697f979d2db74b55c94112f9bae455f011a9203b73ce55132ae7ebe0c8054fc66104b57dbbed30b720f4ccc8883110bf6eeb5f3b694a2778ea7", @ANYRES16=r3, @ANYBLOB="0100feffffff0000000005000000180001801400020073797a5f74756e000000000000000000240003801c0003800c000180080001000000000081ff0180080001000000000004000100"], 0x50}}, 0x0) 576.705917ms ago: executing program 4 (id=3076): r0 = socket(0x840000000002, 0x3, 0xfa) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r1) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b00)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x8081}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000003780)={0xa, 0x4e20, 0x2, @mcast1, 0x3}, 0x1c) connect$inet6(r6, &(0x7f00000037c0)={0xa, 0x4e22, 0x3, @mcast1, 0x401}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x12, 0x60a, 0x138, 0x202, 0x220, 0x2e8, 0x2e8, 0x220, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00', {}, {}, 0x6, 0x0, 0x0, 0x4c}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "0b0500dd2f808bcbf5a552fd64a72ee561b24c479377004898fbe1cefa63"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x41d9, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) recvmmsg(r4, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b0400000000000000000200fffe2c0004802800018007000100637400001c0002800800014000000002080002400000001405000304000000000900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x24004800) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) 437.223775ms ago: executing program 2 (id=3077): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a", 0x13}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001c"], 0x30}}, 0x0) 427.516625ms ago: executing program 0 (id=3078): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6, 0x2, 0xff, 0x8, 0x10}, 0x20) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) connect$pptp(r2, &(0x7f00000001c0)={0x18, 0x2, {0x1, @multicast1}}, 0x1e) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x400, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x6}]}, 0x1c}}, 0x40008081) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000080)={r1, 0xbc}, 0x8) 200.426945ms ago: executing program 2 (id=3079): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1b, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20048041}, 0x40) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x2000c010) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000980)={0x1}, 0x8) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r4) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd29, 0xa5dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040054) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x840) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f00000000c0)='pids.events\x00', 0x275a, 0x0) preadv(r9, 0x0, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r9}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@generic={0xff, 0x0, 0x8, 0x7fff, 0x7b1}]}, &(0x7f0000000240)='syzkaller\x00', 0xd, 0x0, 0x0, 0xc1000, 0x5c, '\x00', 0x0, 0x0, r3, 0xc, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000000070101000000000000000007010002040007800900010073797a30000000000c00064000000000000000040c00034000000000000000020800054000000002"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4) r11 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r11, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) 87.511485ms ago: executing program 1 (id=1768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000040)=0x8, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {0x9}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000003080)=""/4096, 0x1000}, {&(0x7f0000000940)=""/223, 0xdf}], 0x3}, 0x3}], 0x1, 0x0, 0x0) 44.612711ms ago: executing program 4 (id=3080): connect$netrom(0xffffffffffffffff, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="1400000025f4010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, 0xffffffffffffffff, 0x0, 0x10000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0xc8, 0x138, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2c8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{0x1}, 0x0, &(0x7f00000006c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r6, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) 0s ago: executing program 2 (id=3081): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000004c0)='contention_end\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"3dd7ec3f9960f811fec4cf97c26def71", 0x0, 0x0, {0x9, 0x200}, {0x7, 0x5}, 0xffffffffffbffffe, [0xf7d, 0x0, 0x7fffffffffffffff, 0x7, 0x3, 0x2, 0x3, 0x4, 0x5657, 0x80000000, 0x800, 0x2, 0x200, 0x735, 0x6, 0x6]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"287cad954c8e05cb28fe982e654fd0d1", r4, r5, {0xffffffffffffffff, 0x6}, {0x7, 0x378102c2}, 0x0, [0xaae, 0x8, 0x3, 0x6, 0x310, 0x5ba, 0x5, 0x25, 0x1, 0x7, 0x1, 0x7f, 0x0, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000240)={"3dd7ec3f9960f811fec4cf97c26def71", 0x0, 0x0, {0x9, 0x200}, {0x7, 0x5}, 0xffffffffffbffffe, [0xf7d, 0x0, 0x7fffffffffffffff, 0x7, 0x3, 0x2, 0x3, 0x4, 0x5657, 0x80000000, 0x800, 0x2, 0x200, 0x735, 0x6, 0x6]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000000)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000580)={"287cad954c8e05cb28fe982e654fd0d1", r6, r7, {0xffffffffffffffff, 0x6}, {0x7, 0x378102c2}, 0x0, [0xaae, 0x8, 0x3, 0x6, 0x310, 0x5ba, 0x5, 0x25, 0x1, 0x7, 0x1, 0x7f, 0x0, 0x4]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000380)={"d86dadddce6d75204933a263eb189fbe", r5, r7, {0x4, 0x3ff}, {0x6, 0x1}, 0xe1, [0x3, 0x101, 0x7, 0x5, 0x7fffffff, 0x7f, 0x8, 0x7fffffffffffffff, 0x100000000, 0x2, 0xbaa1, 0xead, 0x3, 0x7, 0x6, 0xc3]}) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "408b7c"}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000080)="e349ad", 0x3}], 0x2}, 0x4048841) kernel console output (not intermixed with test programs): rt 8472 - 0 [ 368.344702][T14757] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.354248][T14757] vxlan0: left promiscuous mode [ 368.360152][T14757] vxlan0: left allmulticast mode [ 368.368590][T14757] bridge3: left allmulticast mode [ 368.407940][T14757] bond0: left promiscuous mode [ 368.412918][T14757] bond0: left allmulticast mode [ 368.443267][T14757] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.462885][T14757] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.476391][T14757] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.485050][T14757] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.494052][T14757] geneve2: left promiscuous mode [ 368.512185][T14752] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 368.524744][T14752] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 368.535186][T14752] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 368.750820][T14644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.819314][T14644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.883380][ T30] audit: type=1800 audit(1747194328.629:9): pid=14781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2371" name="memory.events" dev="tmpfs" ino=2742 res=0 errno=0 [ 368.940128][T14644] team0: Port device team_slave_0 added [ 368.956907][ T30] audit: type=1804 audit(1747194328.659:10): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2371" name="/newroot/528/memory.events" dev="tmpfs" ino=2742 res=1 errno=0 [ 368.983263][T14787] x_tables: duplicate underflow at hook 2 [ 369.015183][T14779] vlan2: entered allmulticast mode [ 369.045320][T14779] veth1: entered allmulticast mode [ 369.110679][T14644] team0: Port device team_slave_1 added [ 369.245615][T14644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.267284][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.327283][T14644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.351734][T14644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.359952][T14644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.414882][T14644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.653009][T14644] hsr_slave_0: entered promiscuous mode [ 369.671377][T14644] hsr_slave_1: entered promiscuous mode [ 369.688576][T14644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.706277][T14644] Cannot create hsr debugfs directory [ 369.906366][T14822] netlink: 'syz.3.2383': attribute type 3 has an invalid length. [ 369.934083][T14822] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 369.956161][T14822] __nla_validate_parse: 3 callbacks suppressed [ 369.956183][T14822] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.2383'. [ 370.000326][T14823] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input57 [ 370.045414][T14824] tipc: Enabled bearer , priority 10 [ 370.263018][T14831] IPVS: length: 78 != 8 [ 370.340879][ T5836] Bluetooth: hci0: command tx timeout [ 370.627409][T14839] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.823368][T14843] netlink: 'syz.2.2388': attribute type 4 has an invalid length. [ 370.932109][T14644] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 370.948196][T14844] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.020183][T14644] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 371.077396][T14644] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 371.117273][T14644] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 371.529820][T14644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.595180][T14644] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.624093][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.631309][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.682036][T14861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2391'. [ 371.703091][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.710345][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.417106][ T5836] Bluetooth: hci0: command tx timeout [ 372.497489][T14644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.576384][T14644] veth0_vlan: entered promiscuous mode [ 372.648273][T14644] veth1_vlan: entered promiscuous mode [ 372.764482][T14644] veth0_macvtap: entered promiscuous mode [ 372.791623][T14644] veth1_macvtap: entered promiscuous mode [ 372.875248][T14644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 372.935681][T14644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.968694][T14644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.034505][T14644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.127645][T14895] netlink: 'syz.0.2400': attribute type 9 has an invalid length. [ 373.135475][T14895] netlink: 204732 bytes leftover after parsing attributes in process `syz.0.2400'. [ 373.236263][T14644] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.255800][T14644] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.277668][T14644] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.286394][T14644] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.548786][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.588702][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.696435][T14427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.705071][T14427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.463203][ T7771] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.866304][ T7771] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.150950][ T7771] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.257195][ T7771] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.360783][ T7771] bridge_slave_1: left allmulticast mode [ 375.366909][ T7771] bridge_slave_1: left promiscuous mode [ 375.373269][ T7771] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.383715][ T7771] bridge_slave_0: left allmulticast mode [ 375.390069][ T7771] bridge_slave_0: left promiscuous mode [ 375.395828][ T7771] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.709910][T14930] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2409'. [ 375.990283][ T7771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.038863][ T7771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.062962][ T7771] bond0 (unregistering): Released all slaves [ 376.254486][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.268160][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 376.268763][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.293316][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.311795][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 376.313006][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.341880][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.438340][T14951] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2413'. [ 376.943076][T14959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2417'. [ 377.010652][T14960] tc_dump_action: action bad kind [ 377.179494][T14962] ieee802154 phy1 wpan1: encryption failed: -22 [ 377.196844][T14962] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2418'. [ 377.205850][T14962] netlink: 'syz.2.2418': attribute type 32 has an invalid length. [ 377.283254][T14962] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 377.472452][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 377.522473][T14966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2419'. [ 377.562043][ T7771] hsr_slave_0: left promiscuous mode [ 377.571369][ T7771] hsr_slave_1: left promiscuous mode [ 377.579537][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.587910][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.599574][ T7771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.607511][ T7771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.647745][ T7771] veth1_macvtap: left promiscuous mode [ 377.653303][ T7771] veth0_macvtap: left promiscuous mode [ 377.659340][ T7771] veth1_vlan: left promiscuous mode [ 377.664719][ T7771] veth0_vlan: left promiscuous mode [ 378.130274][ T7771] team0 (unregistering): Port device team_slave_1 removed [ 378.170558][ T7771] team0 (unregistering): Port device team_slave_0 removed [ 378.418712][ T5846] Bluetooth: hci0: command tx timeout [ 378.583303][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.904648][T14971] vlan0: entered promiscuous mode [ 378.915171][T14971] ip6gretap0: entered promiscuous mode [ 379.143846][T14979] netlink: 'syz.4.2423': attribute type 10 has an invalid length. [ 379.319201][T14983] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.711187][T14946] chnl_net:caif_netlink_parms(): no params data found [ 379.944827][T15006] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2428'. [ 379.958461][T15006] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input58 [ 380.026013][T15016] openvswitch: netlink: Flow key attr not present in new flow. [ 380.049036][T14946] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.062953][T14946] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.070444][T14946] bridge_slave_0: entered allmulticast mode [ 380.108318][T14946] bridge_slave_0: entered promiscuous mode [ 380.133936][T15019] netlink: 'syz.3.2432': attribute type 3 has an invalid length. [ 380.164552][T15019] netlink: 666 bytes leftover after parsing attributes in process `syz.3.2432'. [ 380.202068][T14946] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.210863][T14946] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.218462][T14946] bridge_slave_1: entered allmulticast mode [ 380.226730][T14946] bridge_slave_1: entered promiscuous mode [ 380.387431][T14946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.410792][T14946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.484226][T15035] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 380.498377][ T5836] Bluetooth: hci0: command tx timeout [ 380.805167][T14946] team0: Port device team_slave_0 added [ 380.841340][T15045] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2440'. [ 380.850780][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2440'. [ 380.976062][T14946] team0: Port device team_slave_1 added [ 381.040844][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2442'. [ 381.054673][T15054] netlink: 'syz.4.2442': attribute type 3 has an invalid length. [ 381.056103][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2440'. [ 381.085325][T14946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.101033][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.137135][T14946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.178794][T14946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.198685][T14946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.257877][T14946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.282930][T15048] tipc: Enabled bearer , priority 0 [ 381.375598][T15050] syzkaller0: entered promiscuous mode [ 381.384251][T15050] syzkaller0: entered allmulticast mode [ 381.395504][T15050] tipc: Resetting bearer [ 382.579144][ T5846] Bluetooth: hci0: command 0x0419 tx timeout [ 382.797625][T15046] tipc: Resetting bearer [ 382.909315][T15074] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2446'. [ 384.231160][T15046] tipc: Disabling bearer [ 384.361676][T15077] netlink: 'syz.3.2447': attribute type 23 has an invalid length. [ 384.423517][T14946] hsr_slave_0: entered promiscuous mode [ 384.433391][T15083] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2447'. [ 384.451924][T14946] hsr_slave_1: entered promiscuous mode [ 384.471262][T14946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.489814][T14946] Cannot create hsr debugfs directory [ 384.617040][T15093] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2451'. [ 384.656801][ T5846] Bluetooth: hci0: command 0x0419 tx timeout [ 384.965067][T15109] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2454'. [ 384.986156][T15108] netlink: 'syz.2.2455': attribute type 10 has an invalid length. [ 385.023605][T15108] netlink: 'syz.2.2455': attribute type 11 has an invalid length. [ 385.040331][T15108] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2455'. [ 385.420171][T15133] bond0: (slave bond4): Error -95 calling ndo_bpf [ 385.651869][T15139] bond0 (unregistering): (slave ..@ÿ): Releasing backup interface [ 385.699166][T15139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.735154][T15139] bond0 (unregistering): (slave bond4): Releasing backup interface [ 385.755272][T15139] bond0 (unregistering): Released all slaves [ 385.794946][T15151] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2464'. [ 385.947929][T14946] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 385.972583][T14946] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 385.999919][T14946] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.031233][T14946] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 386.096277][T15162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 386.252793][T14946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.331144][T14946] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.351074][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.358377][T14425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.376771][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.384069][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.808348][T14946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.907961][T15195] __nla_validate_parse: 1 callbacks suppressed [ 386.907981][T15195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2479'. [ 386.951307][T14946] veth0_vlan: entered promiscuous mode [ 386.957650][T15195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2479'. [ 386.974204][T15195] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2479'. [ 386.980287][T14946] veth1_vlan: entered promiscuous mode [ 387.081294][T14946] veth0_macvtap: entered promiscuous mode [ 387.113187][T14946] veth1_macvtap: entered promiscuous mode [ 387.184504][T14946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 387.213183][T14946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 387.249282][T14946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.272865][T14946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.320629][T14946] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.327093][T15210] netlink: 19 bytes leftover after parsing attributes in process `syz.0.2485'. [ 387.339264][T14946] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.359054][T14946] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.380915][T14946] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.407626][T15210] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 387.656407][ T7777] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.666227][ T7777] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.693448][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2491'. [ 387.749936][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 387.786314][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.795122][T15232] netlink: 'syz.2.2491': attribute type 7 has an invalid length. [ 387.806146][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.925295][T15240] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2492'. [ 388.023734][T15248] IPVS: set_ctl: invalid protocol: 58 172.20.20.64:20002 [ 388.154654][T15244] tipc: Enabled bearer , priority 0 [ 388.190539][T15257] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 388.298195][T15258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 388.330116][T15244] syzkaller0: MTU too low for tipc bearer [ 388.363157][T15244] tipc: Disabling bearer [ 388.389556][T15258] (unnamed net_device) (uninitialized): option lacp_active: invalid value (5) [ 388.437868][T15265] netlink: 'syz.0.2500': attribute type 4 has an invalid length. [ 388.831072][T15287] team0: Port device team_slave_0 removed [ 388.838967][T15291] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 388.911077][T15287] team0: Port device team_slave_1 removed [ 388.959849][T15287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.980314][T15287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.007868][T15287] team0: Port device geneve0 removed [ 389.014846][T15287] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 389.039816][T15287] batman_adv: batadv0: Removing interface: ip6gretap1 [ 389.057065][T15287] bond0: (slave bond1): Releasing backup interface [ 389.127223][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.135197][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.331745][T15312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2509'. [ 389.360049][T14425] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.444937][T15312] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2509'. [ 390.134679][T14425] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.215815][T14425] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.266967][T14425] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.382430][T14425] bridge_slave_1: left allmulticast mode [ 390.388697][T14425] bridge_slave_1: left promiscuous mode [ 390.394410][T14425] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.404149][T14425] bridge_slave_0: left allmulticast mode [ 390.409994][T14425] bridge_slave_0: left promiscuous mode [ 390.415797][T14425] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.631851][T15322] TCP: TCP_TX_DELAY enabled [ 391.000216][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 391.009748][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 391.018893][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 391.029380][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 391.048339][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 391.144163][T15343] Cannot find add_set index 4 as target [ 391.173692][T14425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.191502][T14425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 391.209865][T14425] bond0 (unregistering): Released all slaves [ 391.575009][T15353] netlink: 'syz.3.2521': attribute type 1 has an invalid length. [ 391.920692][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.014026][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.086925][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.100634][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.110628][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.121816][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.131701][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.204942][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.216873][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.246964][T15383] openvswitch: netlink: Flow key attr not present in new flow. [ 392.369613][T15392] macvlan0: entered promiscuous mode [ 392.386911][T15392] macvlan0: entered allmulticast mode [ 392.424157][T15399] IPVS: set_ctl: invalid protocol: 12 0.0.0.0:20003 [ 392.516784][T15403] Bluetooth: MGMT ver 1.23 [ 392.542950][T15401] __nla_validate_parse: 3 callbacks suppressed [ 392.542969][T15401] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2529'. [ 392.608298][T15409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input59 [ 392.673394][T14425] hsr_slave_0: left promiscuous mode [ 392.682412][T14425] hsr_slave_1: left promiscuous mode [ 392.690407][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.704810][T14425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 392.758549][T14425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 392.765998][T14425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.820573][T14425] veth1_macvtap: left promiscuous mode [ 392.826251][T14425] veth0_macvtap: left promiscuous mode [ 392.834923][T14425] veth1_vlan: left promiscuous mode [ 392.840652][T14425] veth0_vlan: left promiscuous mode [ 393.136867][ T5846] Bluetooth: hci0: command tx timeout [ 393.879908][T15436] netlink: 'syz.0.2537': attribute type 11 has an invalid length. [ 394.769106][T14425] team0 (unregistering): Port device team_slave_1 removed [ 394.813767][T14425] team0 (unregistering): Port device team_slave_0 removed [ 395.225855][ T5846] Bluetooth: hci0: command tx timeout [ 395.555352][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2543'. [ 395.875746][T15464] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2546'. [ 395.895513][T15465] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2544'. [ 395.907579][T15465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input60 [ 395.950471][T15337] chnl_net:caif_netlink_parms(): no params data found [ 396.352309][T15337] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.360009][T15337] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.368686][T15337] bridge_slave_0: entered allmulticast mode [ 396.384961][T15337] bridge_slave_0: entered promiscuous mode [ 396.503654][T15337] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.523458][T15337] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.535445][T15337] bridge_slave_1: entered allmulticast mode [ 396.571807][T15337] bridge_slave_1: entered promiscuous mode [ 396.630440][T15483] veth1_to_bond: entered promiscuous mode [ 396.642056][T15483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2550'. [ 396.787212][T15337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.893625][T15337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.896000][T15493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 397.102860][T15337] team0: Port device team_slave_0 added [ 397.152521][T15337] team0: Port device team_slave_1 added [ 397.271637][T15337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.281739][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.309088][ T5846] Bluetooth: hci0: command tx timeout [ 397.321483][T15337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.397412][T15337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.420186][T15337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.457664][T15337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.761769][T15337] hsr_slave_0: entered promiscuous mode [ 397.771313][T15337] hsr_slave_1: entered promiscuous mode [ 397.783635][T15337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 397.794097][T15337] Cannot create hsr debugfs directory [ 398.179398][T15514] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2559'. [ 398.199481][T15514] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input61 [ 398.344381][T15524] net_ratelimit: 55 callbacks suppressed [ 398.344400][T15524] openvswitch: netlink: Message has 4 unknown bytes. [ 398.344444][T15525] openvswitch: netlink: Message has 4 unknown bytes. [ 398.396197][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2562'. [ 398.540246][T15536] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 398.750431][T15544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2569'. [ 398.802759][T15544] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2569'. [ 399.024955][T15337] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 399.055570][T15337] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 399.096740][T15337] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 399.161385][T15337] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 399.378252][ T5846] Bluetooth: hci0: command tx timeout [ 399.435169][T15337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.470211][T15337] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.509548][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.516773][T14426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.569431][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.576745][T14424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.956005][T15579] lo: entered allmulticast mode [ 400.037320][T15579] lo: left allmulticast mode [ 400.112664][T15337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.290104][T15337] veth0_vlan: entered promiscuous mode [ 400.306419][T15337] veth1_vlan: entered promiscuous mode [ 400.378775][T15337] veth0_macvtap: entered promiscuous mode [ 400.405913][T15337] veth1_macvtap: entered promiscuous mode [ 400.464406][T15337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.513724][T15337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.539808][T15337] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.549488][T15337] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.562139][T15337] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.577739][T15337] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.941224][T14427] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.978099][T15597] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2581'. [ 400.982849][T14427] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.018342][T15597] syzkaller1: entered promiscuous mode [ 401.023928][T15597] syzkaller1: entered allmulticast mode [ 401.102174][T14427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.121575][T14427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.317019][T15602] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2582'. [ 401.337185][T15602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2582'. [ 402.295867][T14424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.094903][T14424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.264805][T14424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.343115][T14424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.448665][T14424] bridge_slave_1: left allmulticast mode [ 403.454340][T14424] bridge_slave_1: left promiscuous mode [ 403.460239][T14424] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.469654][T14424] bridge_slave_0: left allmulticast mode [ 403.475301][T14424] bridge_slave_0: left promiscuous mode [ 403.481455][T14424] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.755581][T15631] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.762933][T15631] IPv6: NLM_F_CREATE should be set when creating new route [ 403.884558][T15639] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2594'. [ 404.157498][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.185435][T14424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.185698][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.206717][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.216687][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.225143][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.246002][T14424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.259364][T14424] bond0 (unregistering): Released all slaves [ 404.281723][T15640] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2593'. [ 404.309698][T15645] bz: entered promiscuous mode [ 404.397629][T14426] bond0: (slave ip6gretap2): link status up again after 0 ms [ 404.432442][T14425] bond0: (slave ip6gretap2): link status up again after 0 ms [ 404.456867][T14425] bond0: (slave ip6gretap2): link status up again after 0 ms [ 404.470593][T14425] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 404.626907][T14425] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 404.756807][ T53] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 405.041555][T14426] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 405.215319][T15677] rdma_op ffff88803311a9f0 conn xmit_rdma 0000000000000000 [ 405.498232][T14424] hsr_slave_0: left promiscuous mode [ 405.513371][T14424] hsr_slave_1: left promiscuous mode [ 405.529334][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.556651][T14424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.579773][T14424] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.582368][T15700] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input62 [ 405.596575][T14424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.671507][T14424] veth1_macvtap: left promiscuous mode [ 405.690182][T14424] veth0_macvtap: left promiscuous mode [ 405.706372][T14424] veth1_vlan: left promiscuous mode [ 405.715012][T14424] veth0_vlan: left promiscuous mode [ 406.256716][ T5836] Bluetooth: hci0: command tx timeout [ 406.668427][T14424] team0 (unregistering): Port device team_slave_1 removed [ 406.724603][T14424] team0 (unregistering): Port device team_slave_0 removed [ 407.159298][T15693] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2609'. [ 407.183599][T15720] tc_dump_action: action bad kind [ 407.197628][T14425] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 407.239067][T15649] chnl_net:caif_netlink_parms(): no params data found [ 407.411603][T15732] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.590325][T15649] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.620129][T15649] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.652781][T15649] bridge_slave_0: entered allmulticast mode [ 407.672929][T15649] bridge_slave_0: entered promiscuous mode [ 407.700328][T15649] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.725455][T15649] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.746869][T15649] bridge_slave_1: entered allmulticast mode [ 407.781779][T15649] bridge_slave_1: entered promiscuous mode [ 407.945624][T15649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.996127][T15649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.049984][T15759] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2628'. [ 408.079002][T15759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input63 [ 408.139100][T15649] team0: Port device team_slave_0 added [ 408.170611][T15649] team0: Port device team_slave_1 added [ 408.279264][T15773] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 408.296123][T15649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.313451][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.342240][ T5836] Bluetooth: hci0: command tx timeout [ 408.361868][T15649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.430077][T15649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.452420][T15649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.537692][T15649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.570413][T15779] IPVS: Unknown mcast interface: vcan0 [ 408.587803][T14424] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 408.739506][T15649] hsr_slave_0: entered promiscuous mode [ 408.746409][T15649] hsr_slave_1: entered promiscuous mode [ 408.768724][T15649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.796870][T15649] Cannot create hsr debugfs directory [ 408.822168][T15785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 408.897853][T14424] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 409.112195][T15811] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2640'. [ 409.122154][T15809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2640'. [ 409.266803][T15814] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2642'. [ 409.282196][T15814] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input64 [ 409.409049][T14424] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 409.585134][T15824] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 409.638473][ T7771] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 409.696166][T15832] netlink: 'syz.2.2647': attribute type 1 has an invalid length. [ 409.714148][T15832] netlink: 228 bytes leftover after parsing attributes in process `syz.2.2647'. [ 409.751249][ T7771] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 409.825871][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 409.861692][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 409.874118][T15834] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2648'. [ 409.887307][ T7771] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 409.912323][T15834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 409.929755][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 409.939894][T15834] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 409.946701][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 409.978579][T15843] macvlan1: entered promiscuous mode [ 409.985932][T15843] bridge0: port 1(macvlan1) entered blocking state [ 409.997010][T15843] bridge0: port 1(macvlan1) entered disabled state [ 410.003809][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 410.004222][T15843] macvlan1: entered allmulticast mode [ 410.016652][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x0 [ 410.033016][ T8565] hid-generic 0005:0008:5505.0001: unknown main item tag 0x1 [ 410.040771][T15843] bridge0: entered allmulticast mode [ 410.054314][ T8565] hid-generic 0005:0008:5505.0001: item fetching failed at offset 48/49 [ 410.072257][T15843] macvlan1: left allmulticast mode [ 410.080757][T15843] bridge0: left allmulticast mode [ 410.122085][ T8565] hid-generic 0005:0008:5505.0001: probe with driver hid-generic failed with error -22 [ 410.220149][T15834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 410.276143][T15834] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.324889][T15862] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2655'. [ 410.372012][T15649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.397162][T15649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 410.421976][T15834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 410.440471][T15834] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.472205][T15649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 410.494882][T15649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 410.534758][T15834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 410.545731][T15834] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 410.724431][T15834] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 410.735090][T15834] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 410.783643][T15834] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 410.820680][T15834] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 410.861183][T15834] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 410.875324][T15834] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 410.924072][T15834] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 410.934567][T15834] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 410.967676][ T53] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 411.024352][T15649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.072003][T15649] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.088653][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.095930][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.120205][T14425] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.127447][T14425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.217575][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 411.304184][T15649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 411.412584][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 411.463066][T15892] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2663'. [ 411.537218][T14426] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 411.697144][T14425] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 411.774549][T15908] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 411.881743][T15649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 411.931746][T15916] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2670'. [ 411.938829][T15915] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 411.981742][T15649] veth0_vlan: entered promiscuous mode [ 412.003629][T15649] veth1_vlan: entered promiscuous mode [ 412.077372][T15649] veth0_macvtap: entered promiscuous mode [ 412.089498][T15649] veth1_macvtap: entered promiscuous mode [ 412.132936][T15649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.155554][T15649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.175919][T15649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.186268][T15649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.195516][T15649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.210234][T15649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.355033][T14425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.365332][T14425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.407161][T14425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.415186][T14425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.841436][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.865917][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2681'. [ 412.884547][T15942] netlink: 'syz.2.2682': attribute type 1 has an invalid length. [ 412.895050][T15938] unsupported nlmsg_type 40 [ 413.018095][T15949] netlink: 'syz.2.2684': attribute type 1 has an invalid length. [ 413.476288][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.985342][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.476289][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.517345][ T7771] net_ratelimit: 21 callbacks suppressed [ 414.517368][ T7771] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 414.637006][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 414.660724][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.747146][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 414.790590][ T12] bridge_slave_1: left allmulticast mode [ 414.796262][ T12] bridge_slave_1: left promiscuous mode [ 414.803362][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.817380][ T12] bridge_slave_0: left allmulticast mode [ 414.823099][ T12] bridge_slave_0: left promiscuous mode [ 414.862483][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.365141][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.382928][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.393378][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.405124][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 415.414929][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 415.717175][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.743645][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.769650][ T12] bond0 (unregistering): Released all slaves [ 416.022339][T16002] netlink: 'syz.4.2699': attribute type 29 has an invalid length. [ 416.051261][T16002] __nla_validate_parse: 2 callbacks suppressed [ 416.051281][T16002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2699'. [ 416.067693][T16004] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 416.080493][T14426] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 416.088764][T16007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2701'. [ 416.098890][T16002] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2699'. [ 416.209809][T16009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2700'. [ 416.226614][T16006] netlink: 'syz.4.2699': attribute type 29 has an invalid length. [ 416.256805][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 416.261447][T16004] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2700'. [ 416.408092][T16009] bond2: entered allmulticast mode [ 416.428623][T16009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.434338][T16016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2703'. [ 416.460987][T16012] netlink: 'syz.2.2702': attribute type 1 has an invalid length. [ 416.498869][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2703'. [ 416.518405][T16018] netlink: 'syz.4.2703': attribute type 7 has an invalid length. [ 416.538607][T16018] netlink: 'syz.4.2703': attribute type 8 has an invalid length. [ 416.546406][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 416.636690][T14427] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 416.837730][T14425] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 417.097764][ T12] hsr_slave_0: left promiscuous mode [ 417.103955][ T12] hsr_slave_1: left promiscuous mode [ 417.118199][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.135989][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.153761][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.161929][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.224672][ T12] veth1_macvtap: left promiscuous mode [ 417.247794][ T12] veth0_macvtap: left promiscuous mode [ 417.259002][ T12] veth1_vlan: left promiscuous mode [ 417.264507][ T12] veth0_vlan: left promiscuous mode [ 417.457697][ T5836] Bluetooth: hci0: command tx timeout [ 417.489772][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'. [ 417.879292][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 417.902445][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 417.920164][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 417.948241][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 417.960944][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.229011][ T12] team0 (unregistering): Port device team_slave_1 removed [ 418.273646][ T12] team0 (unregistering): Port device team_slave_0 removed [ 418.733553][T16045] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2710'. [ 418.756947][T16057] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 418.798323][ T7771] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 418.829221][T15996] chnl_net:caif_netlink_parms(): no params data found [ 419.021196][T16076] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 419.092148][T14428] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 419.370925][T15996] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.397430][T15996] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.417588][T15996] bridge_slave_0: entered allmulticast mode [ 419.441271][T15996] bridge_slave_0: entered promiscuous mode [ 419.536793][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 419.541142][ T5846] Bluetooth: hci0: command tx timeout [ 419.586986][T15996] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.594249][T15996] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.608997][T15996] bridge_slave_1: entered allmulticast mode [ 419.631956][T15996] bridge_slave_1: entered promiscuous mode [ 419.887714][T15996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.968958][T15996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.019375][ T5846] Bluetooth: hci2: command tx timeout [ 420.157592][T15996] team0: Port device team_slave_0 added [ 420.218975][T15996] team0: Port device team_slave_1 added [ 420.238450][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.426144][T15996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.443855][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.504865][T15996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.523700][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.617150][T16118] bond0: entered promiscuous mode [ 420.623300][T16118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.638675][T15996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.657527][T15996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.685101][T15996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.701832][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.829913][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.913014][T15996] hsr_slave_0: entered promiscuous mode [ 420.935173][T15996] hsr_slave_1: entered promiscuous mode [ 420.947316][T15996] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.955015][T15996] Cannot create hsr debugfs directory [ 420.979962][T16053] chnl_net:caif_netlink_parms(): no params data found [ 421.079427][ T53] bond0: (slave ip6gretap2): failed to get link speed/duplex [ 421.183124][T16146] netlink: 'syz.4.2735': attribute type 1 has an invalid length. [ 421.254501][T16146] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.289607][T16150] batadv3: entered promiscuous mode [ 421.349470][T16147] 8021q: adding VLAN 0 to HW filter on device bond3 [ 421.363247][T16147] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 421.377228][T16147] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 421.415669][T16152] veth7: entered promiscuous mode [ 421.538582][T16053] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.545808][T16053] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.553064][T16053] bridge_slave_0: entered allmulticast mode [ 421.561336][T16053] bridge_slave_0: entered promiscuous mode [ 421.617628][ T5846] Bluetooth: hci0: command tx timeout [ 421.768059][ T12] bond0 (unregistering): (slave ip6gretap2): Removing an active aggregator [ 421.781474][ T12] bond0 (unregistering): (slave ip6gretap2): Releasing backup interface [ 421.795359][ T12] bond0 (unregistering): (slave ip6gretap2): the permanent HWaddr of slave - 86:d9:14:52:e3:d7 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 421.965432][ T12] tipc: Disabling bearer [ 421.999860][ T12] dvmrp0 (unregistering): left allmulticast mode [ 422.096766][ T5846] Bluetooth: hci2: command tx timeout [ 422.664577][ T12] bond0 (unregistering): (slave veth7): Releasing backup interface [ 422.679601][ T12] bond0 (unregistering): Released all slaves [ 422.695587][ T12] bond1 (unregistering): Released all slaves [ 422.815909][ T12] bond2 (unregistering): Released all slaves [ 422.840801][T16053] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.852176][T16053] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.859749][T16053] bridge_slave_1: entered allmulticast mode [ 422.867707][T16053] bridge_slave_1: entered promiscuous mode [ 423.048700][ T12] : left promiscuous mode [ 423.092100][T16053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.140774][T16053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.252701][T16181] __nla_validate_parse: 5 callbacks suppressed [ 423.252722][T16181] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2744'. [ 423.270933][ T12] tipc: Left network mode [ 423.292159][T16053] team0: Port device team_slave_0 added [ 423.310423][T16053] team0: Port device team_slave_1 added [ 423.498291][T16053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.505537][T16053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.531736][T16053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.569509][T16196] netlink: 'syz.0.2749': attribute type 16 has an invalid length. [ 423.603951][T16196] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.2749'. [ 423.687932][T16194] ip_vti0: left promiscuous mode [ 423.697127][ T5846] Bluetooth: hci0: command tx timeout [ 423.703219][T16194] sit0: left promiscuous mode [ 423.731578][T16194] batadv0: left allmulticast mode [ 423.773248][T16205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2750'. [ 423.848966][T16194] veth1_to_bond: left promiscuous mode [ 423.915179][T16194] geneve1: left promiscuous mode [ 423.972165][T16194] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.980851][T16194] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.989844][T16194] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.002404][T16194] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.011123][T16194] geneve2: left promiscuous mode [ 424.018290][T16194] gtp0: left promiscuous mode [ 424.025118][T16194] ip6gre1: left allmulticast mode [ 424.040647][T16194] vlan0: left promiscuous mode [ 424.045468][T16194] bridge0: left promiscuous mode [ 424.054979][T16194] bridge4: left allmulticast mode [ 424.065961][T16194] bond4: left promiscuous mode [ 424.072859][T16194] macvlan0: left promiscuous mode [ 424.078202][T16194] macvlan0: left allmulticast mode [ 424.084697][T16053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.106749][T16053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.154887][T16053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.176620][ T5846] Bluetooth: hci2: command tx timeout [ 424.452192][T16053] hsr_slave_0: entered promiscuous mode [ 424.460087][T16053] hsr_slave_1: entered promiscuous mode [ 424.470120][T16053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.478475][T16053] Cannot create hsr debugfs directory [ 424.502522][T16218] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2754'. [ 425.171567][ T12] hsr_slave_0: left promiscuous mode [ 425.197450][ T12] hsr_slave_1: left promiscuous mode [ 425.285433][T16241] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2762'. [ 425.922781][T15996] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 425.985334][T15996] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 426.005664][T15996] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 426.021430][T16257] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2766'. [ 426.062898][T15996] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 426.258421][ T5846] Bluetooth: hci2: command tx timeout [ 426.508007][T16273] rdma_op ffff8880243289f0 conn xmit_rdma 0000000000000000 [ 426.524385][T15996] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.539936][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2773'. [ 426.624504][ T12] IPVS: stop unused estimator thread 0... [ 426.641342][T15996] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.685699][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.692957][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.793614][T14427] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.800886][T14427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.912553][T16053] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.949788][T16053] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 427.011020][T16053] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 427.033800][T16053] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.364116][T16053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.421123][T16053] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.447104][T14425] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.454356][T14425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.474913][T14426] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.482147][T14426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.675614][T15996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.860055][T15996] veth0_vlan: entered promiscuous mode [ 427.938854][T15996] veth1_vlan: entered promiscuous mode [ 428.022779][T15996] veth0_macvtap: entered promiscuous mode [ 428.055205][T15996] veth1_macvtap: entered promiscuous mode [ 428.132757][T15996] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.192222][T15996] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.252098][T15996] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.274525][T15996] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.291761][T15996] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.301659][T15996] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.354250][T16053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.445109][T16343] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2792'. [ 428.522570][T16345] netlink: 'syz.0.2792': attribute type 1 has an invalid length. [ 428.530943][T16345] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2792'. [ 428.901137][T14425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.919404][T14425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.990641][T16053] veth0_vlan: entered promiscuous mode [ 429.011980][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.023499][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.038816][T16053] veth1_vlan: entered promiscuous mode [ 429.041584][T16360] netlink: 'syz.2.2798': attribute type 23 has an invalid length. [ 429.139506][T16365] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2799'. [ 429.177121][T16363] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 429.252992][T16365] 0ªX¹¦À: renamed from caif0 [ 429.263008][T16365] 0ªX¹¦À: entered allmulticast mode [ 429.268670][T16365] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 429.286011][T14425] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 431.388784][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 431.416232][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 431.425031][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 431.446089][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 431.455769][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 431.487651][T16053] veth0_macvtap: entered promiscuous mode [ 431.503726][T16379] netlink: 'syz.0.2803': attribute type 32 has an invalid length. [ 431.529480][T16053] veth1_macvtap: entered promiscuous mode [ 431.650201][T14427] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.687578][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2810'. [ 431.715370][T16053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.737057][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2810'. [ 431.787739][T16053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.825029][T16053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.920474][T14427] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.037715][T16053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.054691][T16053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.088087][T16053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.185277][ T30] audit: type=1800 audit(1747194391.929:11): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2814" name="memory.events" dev="tmpfs" ino=3292 res=0 errno=0 [ 432.223236][T14427] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.252382][ T30] audit: type=1804 audit(1747194391.999:12): pid=16414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2814" name="memory.events" dev="tmpfs" ino=3292 res=1 errno=0 [ 432.298372][T16053] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.320017][T16417] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 432.324948][T16053] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.363191][T16053] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.372401][T16053] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.398910][T16414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 432.421142][T16414] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.495055][T14427] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.551985][T16414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 432.562561][T16414] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.652194][T16414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 432.682740][T16414] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 432.803215][T16414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 432.836783][T16414] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 433.032264][T14427] bridge_slave_1: left allmulticast mode [ 433.038193][T14427] bridge_slave_1: left promiscuous mode [ 433.043982][T14427] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.054032][T14427] bridge_slave_0: left allmulticast mode [ 433.060548][T14427] bridge_slave_0: left promiscuous mode [ 433.066358][T14427] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.460461][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 433.539474][ T5846] Bluetooth: hci0: command tx timeout [ 433.554069][T14427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.566812][T14427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.578466][T14427] bond0 (unregistering): Released all slaves [ 433.636686][T16437] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2821'. [ 433.650171][T16414] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 433.659135][T16414] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 433.694034][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.716292][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.749521][T16414] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 433.758434][T16414] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 433.913516][T14424] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.923897][T14424] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.934183][T16414] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 433.962327][T16414] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 433.981747][T16414] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 433.996562][T16414] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 434.473887][T16388] chnl_net:caif_netlink_parms(): no params data found [ 434.837849][T16458] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2828'. [ 434.854823][T14427] hsr_slave_0: left promiscuous mode [ 434.874139][T14427] hsr_slave_1: left promiscuous mode [ 434.898632][T14427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.906083][T14427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.921151][T14427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.929140][T14427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.936269][T16466] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.980899][T14427] veth1_macvtap: left promiscuous mode [ 434.986690][T14427] veth0_macvtap: left promiscuous mode [ 434.992665][T14427] veth1_vlan: left promiscuous mode [ 434.998676][T14427] veth0_vlan: left promiscuous mode [ 435.598803][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.613967][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.625176][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.630798][ T55] Bluetooth: hci0: command tx timeout [ 435.653345][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.667748][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.891218][T14427] team0 (unregistering): Port device team_slave_1 removed [ 435.942683][T14427] team0 (unregistering): Port device team_slave_0 removed [ 436.533650][T16487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2833'. [ 436.563844][T16388] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.573943][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2833'. [ 436.594549][T16388] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.612997][T16388] bridge_slave_0: entered allmulticast mode [ 436.621756][T16388] bridge_slave_0: entered promiscuous mode [ 436.629614][T16489] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2834'. [ 436.846279][T16493] xt_cgroup: invalid path, errno=-2 [ 436.846670][T16388] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.886701][T16388] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.916879][T16388] bridge_slave_1: entered allmulticast mode [ 436.947782][T16388] bridge_slave_1: entered promiscuous mode [ 437.120765][T16388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.153663][T16497] Bluetooth: MGMT ver 1.23 [ 437.158529][T16388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.206375][T16490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2833'. [ 437.356201][T16388] team0: Port device team_slave_0 added [ 437.430908][T16388] team0: Port device team_slave_1 added [ 437.666041][T16388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.673394][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.700176][T16388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.708106][ T5836] Bluetooth: hci2: command tx timeout [ 437.717836][ T5836] Bluetooth: hci0: command tx timeout [ 437.728135][T16519] IPv6: sit2: Disabled Multicast RS [ 437.736622][T16388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.765544][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.837644][T16388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.240382][T14427] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.355847][T16388] hsr_slave_0: entered promiscuous mode [ 438.372887][T16388] hsr_slave_1: entered promiscuous mode [ 438.379249][T16542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2845'. [ 438.413598][T16388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 438.446708][T16388] Cannot create hsr debugfs directory [ 438.556196][T14427] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.646756][T16550] netlink: 'syz.0.2846': attribute type 1 has an invalid length. [ 438.692760][T14427] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.718882][T16468] chnl_net:caif_netlink_parms(): no params data found [ 438.798997][T16550] bond8: entered promiscuous mode [ 438.804100][T16550] bond8: entered allmulticast mode [ 438.834346][T16553] bond8: (slave ip6gretap3): making interface the new active one [ 438.906819][T16553] ip6gretap3: entered promiscuous mode [ 438.912947][T16553] ip6gretap3: entered allmulticast mode [ 438.920402][T16553] bond8: (slave ip6gretap3): Enslaving as an active interface with an up link [ 439.071970][T14427] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.786684][ T5846] Bluetooth: hci0: command tx timeout [ 439.786695][ T5836] Bluetooth: hci2: command tx timeout [ 439.848546][T16468] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.879253][T16468] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.905020][T16468] bridge_slave_0: entered allmulticast mode [ 439.932767][T16468] bridge_slave_0: entered promiscuous mode [ 440.012071][T16468] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.021467][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.038039][T16468] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.045343][T16468] bridge_slave_1: entered allmulticast mode [ 440.054298][T16468] bridge_slave_1: entered promiscuous mode [ 440.150636][T16468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.204921][T16468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.354185][T16596] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 440.391913][T16468] team0: Port device team_slave_0 added [ 440.410206][T16468] team0: Port device team_slave_1 added [ 440.541660][T14427] bridge_slave_1: left allmulticast mode [ 440.548974][T14427] bridge_slave_1: left promiscuous mode [ 440.563920][T14427] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.590750][T14427] bridge_slave_0: left allmulticast mode [ 440.600253][T14427] bridge_slave_0: left promiscuous mode [ 440.617503][T14427] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.540603][T14427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.563568][T14427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.585519][T14427] bond0 (unregistering): Released all slaves [ 441.650600][T16468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.661692][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.733964][T16468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.858395][ T5846] Bluetooth: hci2: command tx timeout [ 441.913783][T16468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.924250][T16468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.951054][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 442.000357][T16468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.190140][T16614] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2863'. [ 442.205658][T16614] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2863'. [ 442.228278][T16468] hsr_slave_0: entered promiscuous mode [ 442.247808][T16468] hsr_slave_1: entered promiscuous mode [ 442.254305][T16468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.275266][T16616] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2863'. [ 442.276490][T16468] Cannot create hsr debugfs directory [ 442.689864][T16620] dvmrp1: entered allmulticast mode [ 442.705616][T14427] hsr_slave_0: left promiscuous mode [ 442.723884][T14427] hsr_slave_1: left promiscuous mode [ 442.737552][T14427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.745181][T14427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.753679][T14427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.766722][T14427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.817207][T14427] veth1_macvtap: left promiscuous mode [ 442.822810][T14427] veth0_macvtap: left promiscuous mode [ 442.841224][T14427] veth1_vlan: left promiscuous mode [ 442.854969][T14427] veth0_vlan: left promiscuous mode [ 443.193870][T16632] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2867'. [ 443.483500][T14427] team0 (unregistering): Port device team_slave_1 removed [ 443.538506][T14427] team0 (unregistering): Port device team_slave_0 removed [ 443.940238][ T5846] Bluetooth: hci2: command tx timeout [ 444.265539][T16388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 444.407944][T16646] syzkaller0: entered promiscuous mode [ 444.413621][T16646] syzkaller0: entered allmulticast mode [ 444.480003][T16648] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 444.493591][T16648] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2871'. [ 444.649328][T16388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 446.282567][T16388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 446.297184][T16388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 446.530323][T16660] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2876'. [ 446.592043][T16388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.722878][T16388] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.758786][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.766056][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.805579][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.812807][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.838158][T16666] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 446.857187][T16666] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 446.950685][T16666] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 446.976732][T16666] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.066168][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2880'. [ 447.083286][T16666] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 447.115884][T16666] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.132198][T16676] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2880'. [ 447.195621][T16666] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 447.236657][T16666] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 447.475248][T16468] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 447.592882][T16468] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 447.645477][T16468] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 447.671924][T16666] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 447.686972][T16666] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.706298][T16388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.728545][T16468] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 447.752488][T16666] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 447.768168][T16666] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.814293][T16666] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 447.830385][T16666] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 447.851485][T16666] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 447.860109][T16666] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 448.150578][T16388] veth0_vlan: entered promiscuous mode [ 448.273861][T16693] netlink: 'syz.4.2883': attribute type 4 has an invalid length. [ 448.305476][T16388] veth1_vlan: entered promiscuous mode [ 448.385718][T16468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.418691][T16695] netlink: 'syz.4.2884': attribute type 7 has an invalid length. [ 448.427306][T16695] netlink: 'syz.4.2884': attribute type 8 has an invalid length. [ 448.462969][T16468] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.495072][T16388] veth0_macvtap: entered promiscuous mode [ 448.525937][T14429] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.533294][T14429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.551654][T16388] veth1_macvtap: entered promiscuous mode [ 448.590617][T14429] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.597892][T14429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.684447][T16388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.731701][T16388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.764398][T16388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.779968][T16388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.792862][T16388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.812226][T16388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.126644][T14429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.146364][T14429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.269692][ T7771] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.289759][ T7771] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.408704][T16718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2889'. [ 449.462340][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2889'. [ 449.526126][T16718] netlink: 'syz.0.2889': attribute type 18 has an invalid length. [ 449.624218][T16468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.635572][T16720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2889'. [ 449.923993][T14429] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.021164][T16468] veth0_vlan: entered promiscuous mode [ 450.244952][T14429] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.312141][T16741] batadv0: left allmulticast mode [ 450.330383][T16741] batadv0: left promiscuous mode [ 450.361183][T16741] bridge0: port 1(batadv0) entered disabled state [ 450.476313][T14429] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.539430][T16468] veth1_vlan: entered promiscuous mode [ 450.561250][T14429] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.601854][T16468] veth0_macvtap: entered promiscuous mode [ 450.612514][T16468] veth1_macvtap: entered promiscuous mode [ 450.666015][T16468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.680524][T16468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.691976][T16468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.704288][T16468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.716177][T16468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.728791][T16468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.746068][T16468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.755516][T16468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.764591][T16468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.773669][T16468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.892826][T14429] bridge_slave_1: left allmulticast mode [ 450.900107][T14429] bridge_slave_1: left promiscuous mode [ 450.907494][T14429] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.917983][T14429] bridge_slave_0: left allmulticast mode [ 450.923648][T14429] bridge_slave_0: left promiscuous mode [ 450.929993][T14429] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.293383][T14429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.305026][T14429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.318851][T14429] bond0 (unregistering): Released all slaves [ 451.342190][T14426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.350228][T14426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.391635][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.399821][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.892248][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2894'. [ 451.976656][T14429] hsr_slave_0: left promiscuous mode [ 451.991510][T14429] hsr_slave_1: left promiscuous mode [ 452.020558][T14429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 452.046720][T14429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.077906][T14429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 452.105752][T14429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.165709][T14429] veth1_macvtap: left promiscuous mode [ 452.202596][T14429] veth0_macvtap: left promiscuous mode [ 452.216985][T14429] veth1_vlan: left promiscuous mode [ 452.222419][T14429] veth0_vlan: left promiscuous mode [ 452.461314][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 452.474261][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 452.492752][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 452.522103][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 452.530045][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 452.843742][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 452.864939][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 452.883509][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 452.893370][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 452.912683][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.060550][T14429] team0 (unregistering): Port device team_slave_1 removed [ 453.113236][T14429] team0 (unregistering): Port device team_slave_0 removed [ 453.777265][T16774] netlink: 'syz.2.2898': attribute type 33 has an invalid length. [ 454.085328][T16788] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.145289][T16796] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2903'. [ 454.227584][T14429] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.398773][T14429] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.581369][ T5836] Bluetooth: hci0: command tx timeout [ 454.614926][T16798] 0ªX¹¦À: left allmulticast mode [ 454.828247][T16798] vlan0: left promiscuous mode [ 454.836629][T16798] veth0_vlan: left promiscuous mode [ 454.932458][T16798] gretap1: left promiscuous mode [ 454.966584][T16798] gretap1: left allmulticast mode [ 454.977337][ T5836] Bluetooth: hci2: command tx timeout [ 454.984501][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 454.988859][T16798] vlan2: left allmulticast mode [ 455.000104][T16818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2910'. [ 455.011324][T16818] netlink: 'syz.2.2910': attribute type 11 has an invalid length. [ 455.016672][T16798] veth1: left allmulticast mode [ 455.034353][T16798] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.049723][T16798] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.070040][T16798] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.080963][T16798] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 455.098405][T16798] geneve2: left promiscuous mode [ 455.135159][T16798] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 455.156039][T16798] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 455.164493][T16798] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 455.173785][T16798] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 455.182495][T16798] geneve0: left promiscuous mode [ 455.188336][T16798] geneve0: left allmulticast mode [ 455.208418][T16798] bond6: left promiscuous mode [ 455.231461][T16798] bond0: left promiscuous mode [ 455.237461][T16798] bond8: left promiscuous mode [ 455.249987][T16798] ip6gretap3: left promiscuous mode [ 455.256782][T16798] bond8: left allmulticast mode [ 455.261684][T16798] ip6gretap3: left allmulticast mode [ 455.315922][ T5914] syz1: Port: 1 Link DOWN [ 455.415965][T16822] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2911'. [ 455.444836][T14429] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.534812][T16821] netlink: 'syz.0.2911': attribute type 15 has an invalid length. [ 455.556189][T16821] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2911'. [ 455.638152][T16830] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 455.673093][T16830] netlink: 'syz.4.2915': attribute type 1 has an invalid length. [ 455.975076][T16842] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2918'. [ 456.033064][T16840] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2918'. [ 456.045672][T14429] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.103014][T16846] FAULT_INJECTION: forcing a failure. [ 456.103014][T16846] name failslab, interval 1, probability 0, space 0, times 0 [ 456.119706][T16846] CPU: 0 UID: 0 PID: 16846 Comm: syz.2.2920 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 456.119733][T16846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.119744][T16846] Call Trace: [ 456.119751][T16846] [ 456.119759][T16846] dump_stack_lvl+0x189/0x250 [ 456.119797][T16846] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.119825][T16846] ? __pfx__printk+0x10/0x10 [ 456.119852][T16846] ? __pfx___might_resched+0x10/0x10 [ 456.119870][T16846] ? fs_reclaim_acquire+0x7d/0x100 [ 456.119906][T16846] should_fail_ex+0x414/0x560 [ 456.119933][T16846] should_failslab+0xa8/0x100 [ 456.119962][T16846] __kmalloc_cache_noprof+0x70/0x3d0 [ 456.119987][T16846] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 456.120014][T16846] tcp_sendmsg_fastopen+0x1de/0x5e0 [ 456.120043][T16846] tcp_sendmsg_locked+0x4b85/0x5490 [ 456.120071][T16846] ? tcp_sendmsg_locked+0xc1/0x5490 [ 456.120124][T16846] ? __lock_acquire+0xaac/0xd20 [ 456.120163][T16846] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 456.120182][T16846] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.120205][T16846] ? __local_bh_enable_ip+0x12d/0x1c0 [ 456.120237][T16846] tcp_sendmsg+0x2f/0x50 [ 456.120258][T16846] __sock_sendmsg+0xe5/0x270 [ 456.120283][T16846] ____sys_sendmsg+0x52d/0x830 [ 456.120316][T16846] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.120348][T16846] ? import_iovec+0x74/0xa0 [ 456.120373][T16846] ___sys_sendmsg+0x21f/0x2a0 [ 456.120402][T16846] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.120468][T16846] ? __fget_files+0x2a/0x420 [ 456.120493][T16846] ? __fget_files+0x3a0/0x420 [ 456.120530][T16846] __sys_sendmmsg+0x227/0x430 [ 456.120562][T16846] ? __pfx___sys_sendmmsg+0x10/0x10 [ 456.120599][T16846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.120641][T16846] ? ksys_write+0x1f0/0x250 [ 456.120662][T16846] ? rcu_is_watching+0x15/0xb0 [ 456.120711][T16846] __x64_sys_sendmmsg+0xa0/0xc0 [ 456.120741][T16846] do_syscall_64+0xf6/0x210 [ 456.120764][T16846] ? clear_bhb_loop+0x45/0xa0 [ 456.120789][T16846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.120809][T16846] RIP: 0033:0x7ff9da98e969 [ 456.120827][T16846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.120844][T16846] RSP: 002b:00007ff9db8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 456.120865][T16846] RAX: ffffffffffffffda RBX: 00007ff9dabb5fa0 RCX: 00007ff9da98e969 [ 456.120880][T16846] RDX: 0000000000000001 RSI: 0000200000001000 RDI: 0000000000000003 [ 456.120893][T16846] RBP: 00007ff9db8cf090 R08: 0000000000000000 R09: 0000000000000000 [ 456.120905][T16846] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 456.120916][T16846] R13: 0000000000000000 R14: 00007ff9dabb5fa0 R15: 00007ffd2090e848 [ 456.120949][T16846] [ 456.302829][T16852] xt_hashlimit: size too large, truncated to 1048576 [ 456.659584][ T5836] Bluetooth: hci0: command tx timeout [ 456.849694][T16766] chnl_net:caif_netlink_parms(): no params data found [ 456.955033][T14429] bridge_slave_1: left allmulticast mode [ 456.961643][T14429] bridge_slave_1: left promiscuous mode [ 456.967873][T14429] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.980056][T14429] bridge_slave_0: left allmulticast mode [ 456.987349][T14429] bridge_slave_0: left promiscuous mode [ 456.993529][T14429] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.057933][T16879] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2926'. [ 457.068048][ T5836] Bluetooth: hci2: command tx timeout [ 457.519584][T14429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.532315][T14429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.543012][T14429] bond0 (unregistering): Released all slaves [ 457.576784][T16881] batman_adv: batadv0: Adding interface: ip6gretap4 [ 457.583431][T16881] batman_adv: batadv0: The MTU of interface ip6gretap4 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 457.616886][T16881] batman_adv: batadv0: Interface activated: ip6gretap4 [ 457.724714][T16768] chnl_net:caif_netlink_parms(): no params data found [ 457.936640][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 458.228280][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2935'. [ 458.302337][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.313726][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.323757][T16766] bridge_slave_0: entered allmulticast mode [ 458.331715][T16913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 458.332233][T16766] bridge_slave_0: entered promiscuous mode [ 458.348770][T16913] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2936'. [ 458.378495][T16911] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 458.429537][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.437174][T16913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2936'. [ 458.446632][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.454040][T16766] bridge_slave_1: entered allmulticast mode [ 458.473316][T16766] bridge_slave_1: entered promiscuous mode [ 458.637047][T16921] netlink: 'syz.4.2938': attribute type 10 has an invalid length. [ 458.664465][T16921] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2938'. [ 458.765680][ T5836] Bluetooth: hci0: command tx timeout [ 458.924924][T16921] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.938553][T16921] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.952183][T16921] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.963398][T16921] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.991524][T16921] geneve0: entered promiscuous mode [ 458.998514][T16921] team0: Port device geneve0 added [ 459.029381][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.053566][T14429] hsr_slave_0: left promiscuous mode [ 459.067143][T14429] hsr_slave_1: left promiscuous mode [ 459.076258][T14429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.084735][T14429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.094812][T14429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.102728][T14429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.133752][T14429] veth1_macvtap: left promiscuous mode [ 459.139679][T14429] veth0_macvtap: left promiscuous mode [ 459.145577][T14429] veth1_vlan: left promiscuous mode [ 459.151044][ T5836] Bluetooth: hci2: command tx timeout [ 459.158392][T14429] veth0_vlan: left promiscuous mode [ 459.903827][T16959] netlink: 'syz.2.2948': attribute type 1 has an invalid length. [ 459.953557][T14429] team0 (unregistering): Port device team_slave_1 removed [ 460.001623][T14429] team0 (unregistering): Port device team_slave_0 removed [ 460.503201][T16768] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.511791][T16768] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.524040][T16768] bridge_slave_0: entered allmulticast mode [ 460.535260][T16768] bridge_slave_0: entered promiscuous mode [ 460.549304][T16939] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 460.552575][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.610883][T16768] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.646588][T16768] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.653897][T16768] bridge_slave_1: entered allmulticast mode [ 460.668598][T16768] bridge_slave_1: entered promiscuous mode [ 460.816612][ T5836] Bluetooth: hci0: command tx timeout [ 460.998893][T16766] team0: Port device team_slave_0 added [ 461.030245][T16768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.077640][T16768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.112299][T16766] team0: Port device team_slave_1 added [ 461.221135][ T5836] Bluetooth: hci2: command tx timeout [ 461.337115][T16768] team0: Port device team_slave_0 added [ 461.352906][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.386879][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.431434][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.452870][T16768] team0: Port device team_slave_1 added [ 461.515739][T16992] batadv_slave_0: entered promiscuous mode [ 461.522412][T16992] netlink: 'syz.0.2957': attribute type 3 has an invalid length. [ 461.537604][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.557595][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.611719][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.644156][T17006] netlink: 'syz.2.2958': attribute type 9 has an invalid length. [ 461.747569][T16768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.754757][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.781492][T16768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.055702][T16768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.073164][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.104091][T16768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.182940][T16766] hsr_slave_0: entered promiscuous mode [ 462.204302][T16766] hsr_slave_1: entered promiscuous mode [ 462.217508][T16766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.225129][T16766] Cannot create hsr debugfs directory [ 462.408510][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2968'. [ 462.449123][T16768] hsr_slave_0: entered promiscuous mode [ 462.457287][T16768] hsr_slave_1: entered promiscuous mode [ 462.496732][T16768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.504349][T16768] Cannot create hsr debugfs directory [ 463.109260][T17055] netlink: 'syz.0.2977': attribute type 21 has an invalid length. [ 463.121452][T17055] netlink: 'syz.0.2977': attribute type 21 has an invalid length. [ 463.255044][T17059] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 463.268854][T17059] xt_hashlimit: overflow, rate too high: 0 [ 463.294033][T17057] syzkaller0: entered promiscuous mode [ 463.300183][T17057] syzkaller0: entered allmulticast mode [ 463.311770][T17060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2978'. [ 465.351680][T16768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.382518][T16768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.403781][T17083] netlink: 'syz.0.2985': attribute type 3 has an invalid length. [ 465.416359][T16768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.434949][T17083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 465.497344][T16768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.514089][T17079] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2983'. [ 465.864536][T16768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.915612][T16768] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.940840][T17103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2992'. [ 465.972808][T17106] atomic_op ffff88805a4ec998 conn xmit_atomic 0000000000000000 [ 465.986171][T14426] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.993430][T14426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.010281][T17106] wg2: entered promiscuous mode [ 466.018454][T17106] wg2: entered allmulticast mode [ 466.120023][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.127281][T14424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.154099][T16766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 466.174244][T16766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 466.194250][T16766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 466.207447][T16766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 466.228713][T17111] netlink: 264 bytes leftover after parsing attributes in process `syz.2.2994'. [ 466.559232][T16766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.625519][T16766] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.661072][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.668447][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.726189][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.733535][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.012402][T16768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.165371][T16768] veth0_vlan: entered promiscuous mode [ 467.210901][T16768] veth1_vlan: entered promiscuous mode [ 467.335045][T16768] veth0_macvtap: entered promiscuous mode [ 467.607231][T17152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2997'. [ 467.827278][T17160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3004'. [ 467.852238][T16768] veth1_macvtap: entered promiscuous mode [ 467.930496][T16768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.974110][T16768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.992809][T16766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.150560][T16768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.159611][T16768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.168761][T16768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.179179][T16768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.300463][T17166] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 468.312797][T17166] netlink: 601 bytes leftover after parsing attributes in process `syz.2.3006'. [ 468.652515][T17176] syzkaller1: entered promiscuous mode [ 468.788006][T17172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3007'. [ 468.879188][T16766] veth0_vlan: entered promiscuous mode [ 468.917779][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.939639][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.132716][T16766] veth1_vlan: entered promiscuous mode [ 469.174490][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.186018][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.238064][T17188] IPVS: length: 207 != 24 [ 469.355357][T16766] veth0_macvtap: entered promiscuous mode [ 469.392569][T16766] veth1_macvtap: entered promiscuous mode [ 469.772937][T17197] macvlan2: entered promiscuous mode [ 469.791608][T17197] bridge0: entered promiscuous mode [ 469.802664][T17197] bridge0: port 3(macvlan2) entered blocking state [ 469.827277][T17197] bridge0: port 3(macvlan2) entered disabled state [ 469.848808][T17197] macvlan2: entered allmulticast mode [ 469.895081][T17197] bridge0: entered allmulticast mode [ 469.903098][T17197] macvlan2: left allmulticast mode [ 469.913588][T17197] bridge0: left allmulticast mode [ 469.923950][T17197] bridge0: left promiscuous mode [ 469.962109][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.974091][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.992797][T16766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.044691][T16766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.064240][T16766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.099799][T16766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 470.111725][T16766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.132358][T16766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.141263][T16766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.157745][T16766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.261987][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.270543][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.322331][T14428] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.361051][T14426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.370426][T14426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.412677][T14428] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.763787][T14428] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.940492][T14428] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.160239][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 471.170791][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 471.179648][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 471.188892][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 471.197017][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 471.212318][T14428] bridge_slave_1: left allmulticast mode [ 471.225937][T14428] bridge_slave_1: left promiscuous mode [ 471.232010][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.242074][T14428] bridge_slave_0: left allmulticast mode [ 471.248382][T14428] bridge_slave_0: left promiscuous mode [ 471.254267][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.632455][T14428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.644417][T14428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.655638][T14428] bond0 (unregistering): Released all slaves [ 472.172503][T14428] hsr_slave_0: left promiscuous mode [ 472.184356][T14428] hsr_slave_1: left promiscuous mode [ 472.191171][T14428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.199201][T14428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.207476][T14428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.215006][T14428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.238874][T14428] veth1_macvtap: left promiscuous mode [ 472.245184][T14428] veth0_macvtap: left promiscuous mode [ 472.251512][T14428] veth1_vlan: left promiscuous mode [ 472.257279][T14428] veth0_vlan: left promiscuous mode [ 472.735164][T17238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3024'. [ 473.125462][T14428] team0 (unregistering): Port device team_slave_1 removed [ 473.172079][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.192236][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.209171][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.228474][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.239406][T14428] team0 (unregistering): Port device team_slave_0 removed [ 473.239421][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 473.299360][ T5846] Bluetooth: hci0: command tx timeout [ 473.374645][ T30] audit: type=1800 audit(1747194433.119:13): pid=17247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3022" name="memory.events" dev="tmpfs" ino=3659 res=0 errno=0 [ 473.923073][T17254] netlink: 'syz.2.3027': attribute type 1 has an invalid length. [ 473.935611][T17228] chnl_net:caif_netlink_parms(): no params data found [ 474.351979][T17228] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.377129][T17228] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.384468][T17228] bridge_slave_0: entered allmulticast mode [ 474.399318][T17228] bridge_slave_0: entered promiscuous mode [ 474.427333][T17228] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.434508][T17228] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.444198][T17228] bridge_slave_1: entered allmulticast mode [ 474.452278][T17228] bridge_slave_1: entered promiscuous mode [ 474.561917][T17228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.599405][T17228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.711643][T14428] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.784263][T17228] team0: Port device team_slave_0 added [ 474.959893][T14428] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.989536][T17228] team0: Port device team_slave_1 added [ 475.055124][T14428] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.234110][T14428] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.296753][ T5846] Bluetooth: hci2: command tx timeout [ 475.311503][T17228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.329912][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.358175][T17228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.371330][T17228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.380678][ T5846] Bluetooth: hci0: command tx timeout [ 475.386185][T17228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.414009][T17228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.563014][T17228] hsr_slave_0: entered promiscuous mode [ 475.569687][T17228] hsr_slave_1: entered promiscuous mode [ 475.576013][T17228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.584059][T17228] Cannot create hsr debugfs directory [ 475.915421][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3034'. [ 475.931060][T17292] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 475.956847][T17292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.999496][T14428] bridge_slave_1: left allmulticast mode [ 476.005191][T14428] bridge_slave_1: left promiscuous mode [ 476.016197][T14428] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.036798][T14428] bridge_slave_0: left allmulticast mode [ 476.042594][T14428] bridge_slave_0: left promiscuous mode [ 476.054639][T14428] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.500692][T14428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.513331][T14428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.525048][T14428] bond0 (unregistering): Released all slaves [ 476.833782][T17248] chnl_net:caif_netlink_parms(): no params data found [ 477.210566][T17318] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3039'. [ 477.377028][ T5846] Bluetooth: hci2: command tx timeout [ 477.461288][ T5846] Bluetooth: hci0: command tx timeout [ 477.499672][T14428] hsr_slave_0: left promiscuous mode [ 477.505946][T14428] hsr_slave_1: left promiscuous mode [ 477.517468][T14428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.525463][T14428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.543969][T14428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.551585][T14428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.605203][T14428] veth1_macvtap: left promiscuous mode [ 477.621596][T14428] veth0_macvtap: left promiscuous mode [ 477.636752][T14428] veth1_vlan: left promiscuous mode [ 477.646644][T14428] veth0_vlan: left promiscuous mode [ 477.780186][T17329] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3043'. [ 478.321557][T14428] team0 (unregistering): Port device team_slave_1 removed [ 478.372796][T14428] team0 (unregistering): Port device team_slave_0 removed [ 478.930622][T17248] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.952400][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.962211][T17248] bridge_slave_0: entered allmulticast mode [ 478.971107][T17248] bridge_slave_0: entered promiscuous mode [ 478.999479][T17248] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.025236][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.033245][T17248] bridge_slave_1: entered allmulticast mode [ 479.048345][T17248] bridge_slave_1: entered promiscuous mode [ 479.191892][T17248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.268017][T17248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.433312][T17228] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 479.457754][ T5846] Bluetooth: hci2: command tx timeout [ 479.477591][T17248] team0: Port device team_slave_0 added [ 479.493208][T17228] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 479.522419][T17248] team0: Port device team_slave_1 added [ 479.537301][ T5846] Bluetooth: hci0: command tx timeout [ 479.542929][T17228] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 479.584611][T17347] netlink: 'syz.2.3047': attribute type 58 has an invalid length. [ 479.600318][T17347] netlink: 'syz.2.3047': attribute type 58 has an invalid length. [ 479.633943][T17228] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 479.774708][T17248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.795192][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.821893][T17248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.850520][T17248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.858482][T17248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.938517][T17248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.111285][T17359] batadv_slave_0: left promiscuous mode [ 480.132075][T17359] batman_adv: batadv0: Interface deactivated: ip6gretap4 [ 480.314550][T17248] hsr_slave_0: entered promiscuous mode [ 480.337816][T17248] hsr_slave_1: entered promiscuous mode [ 480.344274][T17248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.352753][T17248] Cannot create hsr debugfs directory [ 480.363237][T17370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 480.460332][T17371] netlink: 'syz.0.3051': attribute type 10 has an invalid length. [ 480.480894][T17371] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3051'. [ 480.656208][T17228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 480.755743][T17228] 8021q: adding VLAN 0 to HW filter on device team0 [ 480.763246][T17373] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3052'. [ 480.779787][T17375] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 480.801260][T17375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 480.821206][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 480.830977][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 480.841453][T17377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 480.858753][T14427] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.865908][T14427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.928966][T14427] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.936164][T14427] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.947247][T17381] netlink: 'syz.4.3054': attribute type 3 has an invalid length. [ 480.981093][T17378] netlink: 'syz.2.3052': attribute type 15 has an invalid length. [ 480.989261][T17381] openvswitch: netlink: IP tunnel dst address not specified [ 481.241708][T17387] netlink: 'syz.4.3055': attribute type 3 has an invalid length. [ 481.261967][T17387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3055'. [ 481.357512][T17248] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 481.389716][T17248] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 481.452612][T17248] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 481.479364][T17248] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 481.538790][ T5846] Bluetooth: hci2: command tx timeout [ 481.539088][T17228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 481.740046][T17248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.759067][T17228] veth0_vlan: entered promiscuous mode [ 481.829679][T17248] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.861863][T14424] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.869095][T14424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.883525][T17228] veth1_vlan: entered promiscuous mode [ 481.893514][T14424] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.900671][T14424] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.928362][T17403] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 481.962926][T17403] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3060'. [ 482.063786][T17228] veth0_macvtap: entered promiscuous mode [ 482.121123][T17228] veth1_macvtap: entered promiscuous mode [ 482.183106][T17228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.234879][T17228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.274507][T17228] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.295885][T17228] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.316131][T17228] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.328346][T17228] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.559065][T17422] netlink: 'syz.4.3065': attribute type 11 has an invalid length. [ 482.582499][ T7771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.613532][ T7771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.730923][T17248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.807252][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.830456][T17430] __nla_validate_parse: 2 callbacks suppressed [ 482.830474][T17430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3066'. [ 482.834221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.844596][T17430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3066'. [ 482.900997][T17430] netlink: 'syz.2.3066': attribute type 15 has an invalid length. [ 483.018904][T17248] veth0_vlan: entered promiscuous mode [ 483.113436][T17248] veth1_vlan: entered promiscuous mode [ 483.198439][T17248] veth0_macvtap: entered promiscuous mode [ 483.241562][T17248] veth1_macvtap: entered promiscuous mode [ 483.279374][T17248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 483.306561][T17248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.332141][T17248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 483.365256][T17248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 483.379427][T17248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 483.401159][T17248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 483.688083][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.762429][T17248] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.779297][T17248] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.790243][T17248] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.799286][T17248] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.910102][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.050015][T14429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.060481][T14429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.163836][T14426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 484.173169][T14426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.242505][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.395595][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.730063][ T12] bridge_slave_1: left allmulticast mode [ 484.751590][ T12] bridge_slave_1: left promiscuous mode [ 484.761961][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.784815][T17467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3077'. [ 484.831195][ T12] bridge_slave_0: left allmulticast mode [ 484.847969][ T12] bridge_slave_0: left promiscuous mode [ 484.853812][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.064283][ T5836] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 485.075441][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 485.085258][ T5836] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 485.098837][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 485.108925][ T5836] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 485.581681][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.592967][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 485.603481][ T12] bond0 (unregistering): Released all slaves [ 486.089930][ T12] hsr_slave_0: left promiscuous mode [ 486.095888][ T12] hsr_slave_1: left promiscuous mode [ 486.097109][ C1] ================================================================== [ 486.103008][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.109269][ C1] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x471/0x4b0 [ 486.109305][ C1] Read of size 2 at addr ffff88807cbef02a by task swapper/1/0 [ 486.116753][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.124570][ C1] [ 486.124588][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 486.124617][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 486.124631][ C1] Call Trace: [ 486.124641][ C1] [ 486.124652][ C1] dump_stack_lvl+0x189/0x250 [ 486.124688][ C1] ? __virt_addr_valid+0x18c/0x540 [ 486.124717][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.124750][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.124779][ C1] ? rcu_is_watching+0x15/0xb0 [ 486.124809][ C1] ? lock_release+0x4b/0x3e0 [ 486.124841][ C1] ? __virt_addr_valid+0x18c/0x540 [ 486.124868][ C1] ? __virt_addr_valid+0x469/0x540 [ 486.124895][ C1] print_report+0xb4/0x290 [ 486.124921][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 486.124944][ C1] kasan_report+0x118/0x150 [ 486.124973][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 486.125000][ C1] rose_timer_expiry+0x471/0x4b0 [ 486.125027][ C1] call_timer_fn+0x17b/0x5f0 [ 486.125054][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.125077][ C1] ? call_timer_fn+0xbe/0x5f0 [ 486.125104][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 486.125137][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 486.125174][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.125192][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 486.125216][ C1] __run_timer_base+0x61a/0x860 [ 486.125241][ C1] ? ktime_get+0x3e/0x1f0 [ 486.125269][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 486.125292][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 486.125325][ C1] run_timer_softirq+0xb7/0x180 [ 486.125351][ C1] handle_softirqs+0x283/0x870 [ 486.125373][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 486.125394][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 486.125434][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 486.125463][ C1] __irq_exit_rcu+0xca/0x1f0 [ 486.125482][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 486.125507][ C1] irq_exit_rcu+0x9/0x30 [ 486.125524][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 486.125558][ C1] [ 486.125565][ C1] [ 486.125574][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 486.125598][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 486.125618][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 cb 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 486.125639][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 486.125659][ C1] RAX: e9cb29a8c3a04f00 RBX: ffffffff81974f28 RCX: e9cb29a8c3a04f00 [ 486.125676][ C1] RDX: 0000000000000001 RSI: ffffffff8d751c03 RDI: ffffffff8bc1d4a0 [ 486.125692][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 486.125708][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f2f70 [ 486.125725][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 486.125743][ C1] ? do_idle+0x1e8/0x510 [ 486.125768][ C1] default_idle+0x13/0x20 [ 486.125792][ C1] default_idle_call+0x74/0xb0 [ 486.125816][ C1] do_idle+0x1e8/0x510 [ 486.125839][ C1] ? __pfx_do_idle+0x10/0x10 [ 486.125857][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.125889][ C1] cpu_startup_entry+0x44/0x60 [ 486.125908][ C1] start_secondary+0x101/0x110 [ 486.125928][ C1] common_startup_64+0x13e/0x147 [ 486.125971][ C1] [ 486.125979][ C1] [ 486.462963][ C1] Allocated by task 14428: [ 486.467375][ C1] kasan_save_track+0x3e/0x80 [ 486.472053][ C1] __kasan_kmalloc+0x93/0xb0 [ 486.476647][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 486.482036][ C1] igmp6_group_dropped+0x3ac/0xf10 [ 486.487145][ C1] __ipv6_dev_mc_dec+0x2d2/0x390 [ 486.492079][ C1] __ipv6_ifa_notify+0x43d/0xac0 [ 486.497024][ C1] addrconf_ifdown+0xe69/0x1880 [ 486.502077][ C1] addrconf_notify+0x1bc/0x1010 [ 486.506935][ C1] notifier_call_chain+0x1b3/0x3e0 [ 486.512127][ C1] dev_close_many+0x29c/0x410 [ 486.516799][ C1] unregister_netdevice_many_notify+0x619/0x2320 [ 486.523125][ C1] unregister_netdevice_queue+0x33c/0x380 [ 486.528845][ C1] nsim_destroy+0x1f6/0x670 [ 486.533353][ C1] __nsim_dev_port_del+0x14d/0x1b0 [ 486.538456][ C1] nsim_dev_reload_destroy+0x288/0x490 [ 486.543905][ C1] nsim_dev_reload_down+0x8a/0xc0 [ 486.548930][ C1] devlink_reload+0x1b3/0x8d0 [ 486.553603][ C1] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 486.559063][ C1] ops_undo_list+0x184/0x990 [ 486.563665][ C1] cleanup_net+0x4c5/0x8a0 [ 486.568098][ C1] process_scheduled_works+0xadb/0x17a0 [ 486.573666][ C1] worker_thread+0x8a0/0xda0 [ 486.578271][ C1] kthread+0x70e/0x8a0 [ 486.582346][ C1] ret_from_fork+0x4b/0x80 [ 486.586760][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.591539][ C1] [ 486.593856][ C1] Freed by task 14429: [ 486.597929][ C1] kasan_save_track+0x3e/0x80 [ 486.602608][ C1] kasan_save_free_info+0x46/0x50 [ 486.607657][ C1] __kasan_slab_free+0x62/0x70 [ 486.612429][ C1] kmem_cache_free_bulk+0x2d1/0x520 [ 486.617629][ C1] kvfree_rcu_bulk+0xe5/0x1e0 [ 486.622321][ C1] kfree_rcu_monitor+0x211/0x2a0 [ 486.628401][ C1] process_scheduled_works+0xadb/0x17a0 [ 486.633973][ C1] worker_thread+0x8a0/0xda0 [ 486.638571][ C1] kthread+0x70e/0x8a0 [ 486.642653][ C1] ret_from_fork+0x4b/0x80 [ 486.647079][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.651859][ C1] [ 486.654174][ C1] Last potentially related work creation: [ 486.659880][ C1] kasan_save_stack+0x3e/0x60 [ 486.664557][ C1] kasan_record_aux_stack+0xbc/0xd0 [ 486.669759][ C1] kvfree_call_rcu+0xbb/0x410 [ 486.674437][ C1] mld_clear_delrec+0x193/0x5d0 [ 486.679288][ C1] ipv6_mc_destroy_dev+0x45/0x5a0 [ 486.684318][ C1] addrconf_ifdown+0x139e/0x1880 [ 486.689258][ C1] addrconf_notify+0x1bc/0x1010 [ 486.694107][ C1] notifier_call_chain+0x1b3/0x3e0 [ 486.699218][ C1] unregister_netdevice_many_notify+0x15d8/0x2320 [ 486.705644][ C1] unregister_netdevice_queue+0x33c/0x380 [ 486.711379][ C1] nsim_destroy+0x1f6/0x670 [ 486.715893][ C1] __nsim_dev_port_del+0x14d/0x1b0 [ 486.721176][ C1] nsim_dev_reload_destroy+0x288/0x490 [ 486.726629][ C1] nsim_dev_reload_down+0x8a/0xc0 [ 486.731646][ C1] devlink_reload+0x1b3/0x8d0 [ 486.736334][ C1] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 486.741800][ C1] ops_undo_list+0x184/0x990 [ 486.746399][ C1] cleanup_net+0x4c5/0x8a0 [ 486.750861][ C1] process_scheduled_works+0xadb/0x17a0 [ 486.756448][ C1] worker_thread+0x8a0/0xda0 [ 486.761068][ C1] kthread+0x70e/0x8a0 [ 486.765139][ C1] ret_from_fork+0x4b/0x80 [ 486.769557][ C1] ret_from_fork_asm+0x1a/0x30 [ 486.774314][ C1] [ 486.776632][ C1] The buggy address belongs to the object at ffff88807cbef000 [ 486.776632][ C1] which belongs to the cache kmalloc-512 of size 512 [ 486.790684][ C1] The buggy address is located 42 bytes inside of [ 486.790684][ C1] freed 512-byte region [ffff88807cbef000, ffff88807cbef200) [ 486.804391][ C1] [ 486.806711][ C1] The buggy address belongs to the physical page: [ 486.813125][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7cbec [ 486.821892][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 486.830403][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 486.837949][ C1] page_type: f5(slab) [ 486.841940][ C1] raw: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 486.850526][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 486.859107][ C1] head: 00fff00000000040 ffff88801a041c80 dead000000000100 dead000000000122 [ 486.867776][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 486.876452][ C1] head: 00fff00000000002 ffffea0001f2fb01 00000000ffffffff 00000000ffffffff [ 486.885120][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 486.893792][ C1] page dumped because: kasan: bad access detected [ 486.900215][ C1] page_owner tracks the page as allocated [ 486.905930][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8848, tgid 8846 (syz.2.719), ts 186700615427, free_ts 173639971339 [ 486.927201][ C1] post_alloc_hook+0x1d8/0x230 [ 486.931971][ C1] get_page_from_freelist+0x21e0/0x22c0 [ 486.937516][ C1] __alloc_frozen_pages_noprof+0x181/0x370 SYZFAIL: failed to send rpc fd=3 want=736 sent=0 n=-1 (errno 32: Broken pipe) [ 486.943347][ C1] alloc_pages_mpol+0x232/0x4a0 [ 486.948237][ C1] allocate_slab+0x8a/0x3b0 [ 486.952774][ C1] ___slab_alloc+0xbfc/0x1480 [ 486.957493][ C1] __kmalloc_noprof+0x305/0x4f0 [ 486.962378][ C1] ops_init+0x7b/0x5c0 [ 486.966481][ C1] setup_net+0x219/0x4b0 [ 486.970749][ C1] copy_net_ns+0x32e/0x590 [ 486.975186][ C1] create_new_namespaces+0x3d3/0x700 [ 486.980511][ C1] unshare_nsproxy_namespaces+0x11c/0x170 [ 486.986275][ C1] ksys_unshare+0x4c8/0x8c0 [ 486.990809][ C1] __x64_sys_unshare+0x38/0x50 [ 486.995599][ C1] do_syscall_64+0xf6/0x210 [ 487.000129][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.006043][ C1] page last free pid 5848 tgid 5848 stack trace: [ 487.012387][ C1] __free_frozen_pages+0xb14/0xce0 [ 487.017529][ C1] __put_partials+0x161/0x1c0 [ 487.022238][ C1] put_cpu_partial+0x17c/0x250 [ 487.027018][ C1] __slab_free+0x2f7/0x400 [ 487.031450][ C1] qlist_free_all+0x9a/0x140 [ 487.036065][ C1] kasan_quarantine_reduce+0x148/0x160 [ 487.041558][ C1] __kasan_slab_alloc+0x22/0x80 [ 487.046433][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 487.051924][ C1] vm_area_dup+0x2b/0x5c0 [ 487.056283][ C1] copy_mm+0xbe1/0x2100 [ 487.060454][ C1] copy_process+0x16d3/0x3b80 [ 487.065151][ C1] kernel_clone+0x21e/0x870 [ 487.069674][ C1] __x64_sys_clone+0x18b/0x1e0 [ 487.074460][ C1] do_syscall_64+0xf6/0x210 [ 487.078992][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.084917][ C1] [ 487.087257][ C1] Memory state around the buggy address: [ 487.092911][ C1] ffff88807cbeef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.100992][ C1] ffff88807cbeef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 487.109071][ C1] >ffff88807cbef000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.117150][ C1] ^ [ 487.122533][ C1] ffff88807cbef080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.130613][ C1] ffff88807cbef100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 487.138693][ C1] ================================================================== [ 487.146867][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 487.154092][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.15.0-rc5-syzkaller-01070-g9f607dc39b66 #0 PREEMPT(full) [ 487.165746][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 487.175830][ C1] Call Trace: [ 487.179128][ C1] [ 487.181993][ C1] dump_stack_lvl+0x99/0x250 [ 487.186621][ C1] ? __asan_memcpy+0x40/0x70 [ 487.191233][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 487.196466][ C1] ? __pfx__printk+0x10/0x10 [ 487.201097][ C1] panic+0x2db/0x790 [ 487.205032][ C1] ? __pfx_panic+0x10/0x10 [ 487.209483][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 487.215416][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 487.221347][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 487.227711][ C1] ? print_memory_metadata+0x314/0x400 [ 487.233196][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.238325][ C1] check_panic_on_warn+0x89/0xb0 [ 487.243270][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.248387][ C1] end_report+0x78/0x160 [ 487.252640][ C1] kasan_report+0x129/0x150 [ 487.257153][ C1] ? rose_timer_expiry+0x471/0x4b0 [ 487.262288][ C1] rose_timer_expiry+0x471/0x4b0 [ 487.267231][ C1] call_timer_fn+0x17b/0x5f0 [ 487.271831][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 487.277299][ C1] ? call_timer_fn+0xbe/0x5f0 [ 487.281983][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 487.287105][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 487.292317][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.297524][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 487.302990][ C1] __run_timer_base+0x61a/0x860 [ 487.307848][ C1] ? ktime_get+0x3e/0x1f0 [ 487.312196][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 487.317572][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 487.323825][ C1] run_timer_softirq+0xb7/0x180 [ 487.328689][ C1] handle_softirqs+0x283/0x870 [ 487.333473][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 487.338243][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 487.343528][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 487.348740][ C1] __irq_exit_rcu+0xca/0x1f0 [ 487.353339][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 487.358547][ C1] irq_exit_rcu+0x9/0x30 [ 487.362791][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 487.368440][ C1] [ 487.371376][ C1] [ 487.374306][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 487.380289][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 487.386010][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 cb 10 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 487.405620][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 487.411695][ C1] RAX: e9cb29a8c3a04f00 RBX: ffffffff81974f28 RCX: e9cb29a8c3a04f00 [ 487.419672][ C1] RDX: 0000000000000001 RSI: ffffffff8d751c03 RDI: ffffffff8bc1d4a0 [ 487.427648][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932b5b R09: 1ffff1101712656b [ 487.435632][ C1] R10: dffffc0000000000 R11: ffffed101712656c R12: ffffffff8f7f2f70 [ 487.443629][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038deb40 [ 487.451604][ C1] ? do_idle+0x1e8/0x510 [ 487.455874][ C1] default_idle+0x13/0x20 [ 487.460211][ C1] default_idle_call+0x74/0xb0 [ 487.464976][ C1] do_idle+0x1e8/0x510 [ 487.469048][ C1] ? __pfx_do_idle+0x10/0x10 [ 487.473638][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 487.478843][ C1] cpu_startup_entry+0x44/0x60 [ 487.483609][ C1] start_secondary+0x101/0x110 [ 487.488375][ C1] common_startup_64+0x13e/0x147 [ 487.493329][ C1] [ 487.496675][ C1] Kernel Offset: disabled [ 487.501002][ C1] Rebooting in 86400 seconds..