last executing test programs: 10.361443673s ago: executing program 3 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r1, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) 10.079062726s ago: executing program 3 (id=111): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4051}, 0x20008001) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) 4.309856948s ago: executing program 3 (id=145): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0)=0x1, 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4.110666371s ago: executing program 3 (id=149): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000040)={0x1}, 0x8) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xd, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000080)={0xa, 0x4e21, 0x7, @remote, 0xc}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.012479132s ago: executing program 3 (id=156): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000100000001c001280090001006970697027d6fc6015b652eea28f3b"], 0x3c}}, 0x20000000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2.38231157s ago: executing program 1 (id=162): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x5, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, 0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.164772522s ago: executing program 1 (id=164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x8, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.164188816s ago: executing program 3 (id=165): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e24, 0x1}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="ba", 0x1}], 0x1}}], 0x1, 0xc8040) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x6) 1.831458232s ago: executing program 1 (id=169): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000e4ef1f00810000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440), &(0x7f0000000040), 0x6, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r1, &(0x7f0000001600), &(0x7f0000001680)=""/227}, 0x20) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.430231531s ago: executing program 2 (id=173): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x1, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xd}, {0x7}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 1.211191997s ago: executing program 2 (id=175): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004e00)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="0dda2dfa03009ffadfa4bfb48c76fb296526ae98655ee4c429d1f245af4d9bcc0b787eb0619e69f27ab98c3754b47c0b61fc44d54945aa0179444eb7dc989632", 0x40}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}], 0x30, 0x88010}], 0x1, 0x20000010) recvmsg$can_bcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/88, 0x58}], 0x1}, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) 1.012199527s ago: executing program 4 (id=177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20000804) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f, 0x2, [@TCA_BPF_FLAGS_GEN={0x0, 0x9, 0x7}, @TCA_BPF_CLASSID={0x8, 0x3, {0x10}}]}}]}, 0x4c}}, 0x20004804) 1.011376344s ago: executing program 2 (id=178): socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(0x4) 841.382419ms ago: executing program 0 (id=179): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000200)='%pB \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000300)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 752.547041ms ago: executing program 0 (id=181): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x1c, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) 712.885207ms ago: executing program 2 (id=182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff1, 0xa}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x7, 0xfff2}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 656.6039ms ago: executing program 4 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000a636000000007fffffff8500000050000000850000000f00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x5efe) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000240)={0x28, 0x0, 0x0, @local}, 0x10) 570.610677ms ago: executing program 0 (id=184): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg$unix(r1, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)=""/4096, 0x1000}], 0x1}}], 0x1, 0x40000000, 0x0) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) 524.099091ms ago: executing program 4 (id=185): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0xfffffffb, 0x3, 0x7, 0x40, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) 523.311815ms ago: executing program 1 (id=186): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x7, 0x0, 0x0, 0x10}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x8d, &(0x7f0000000240)=""/141}, 0x94) pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0}], 0x1, 0x7, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x1010, r1, 0x0) 395.081111ms ago: executing program 0 (id=187): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d000a887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 394.358709ms ago: executing program 1 (id=188): socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20, 0x8206}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x8000085) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003088700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 350.590417ms ago: executing program 2 (id=189): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000000400)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ac67e809e68ca18f0241349dc5351bd8b9877ae81e64", 0x40}], 0x3}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)=""/149, 0x95}], 0x1}, 0x10001) 346.120766ms ago: executing program 4 (id=190): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004b00)=""/23, 0x17}, 0xf9f8}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 254.417957ms ago: executing program 0 (id=191): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty=0xe0000001}, 0x10) 173.657326ms ago: executing program 2 (id=192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x2, 0x9}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 173.086006ms ago: executing program 4 (id=193): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000140)=0x4) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 95.789379ms ago: executing program 0 (id=194): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x14, 0xfffffffffffffffe}, 0x42) 76.439556ms ago: executing program 4 (id=195): unshare(0x6a040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="03000800ec0619000c0061760448"], 0xfdef) 0s ago: executing program 1 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x8, 0xdd, 0xff}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x9, 0x4, 0x4, 0x1}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.145' (ED25519) to the list of known hosts. [ 84.925249][ T5851] cgroup: Unknown subsys name 'net' [ 85.038468][ T5851] cgroup: Unknown subsys name 'cpuset' [ 85.047679][ T5851] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.823396][ T5851] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.151864][ T5874] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 91.156126][ T5876] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.167043][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.175672][ T5876] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.183762][ T5876] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.187359][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.192732][ T5876] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.205975][ T5877] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.215493][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.223233][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.233072][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.240559][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.244860][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.253367][ T5879] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.256415][ T5869] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.263236][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.270065][ T5869] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.286537][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.293812][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.295709][ T5879] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.308226][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.316264][ T5879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.323888][ T5879] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.338405][ T5879] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.357321][ T5879] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.040262][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 92.082282][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 92.124030][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 92.233799][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 92.327181][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 92.444957][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.452432][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.460337][ T5862] bridge_slave_0: entered allmulticast mode [ 92.468771][ T5862] bridge_slave_0: entered promiscuous mode [ 92.520287][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.527861][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.535176][ T5862] bridge_slave_1: entered allmulticast mode [ 92.542513][ T5862] bridge_slave_1: entered promiscuous mode [ 92.569285][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.576638][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.583900][ T5865] bridge_slave_0: entered allmulticast mode [ 92.591479][ T5865] bridge_slave_0: entered promiscuous mode [ 92.631476][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.638770][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.646590][ T5861] bridge_slave_0: entered allmulticast mode [ 92.653891][ T5861] bridge_slave_0: entered promiscuous mode [ 92.662152][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.669625][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.677144][ T5865] bridge_slave_1: entered allmulticast mode [ 92.684603][ T5865] bridge_slave_1: entered promiscuous mode [ 92.721529][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.743555][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.750980][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.758880][ T5861] bridge_slave_1: entered allmulticast mode [ 92.766887][ T5861] bridge_slave_1: entered promiscuous mode [ 92.800250][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.823746][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.831079][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.839394][ T5878] bridge_slave_0: entered allmulticast mode [ 92.846698][ T5878] bridge_slave_0: entered promiscuous mode [ 92.880289][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.887824][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.895153][ T5863] bridge_slave_0: entered allmulticast mode [ 92.902430][ T5863] bridge_slave_0: entered promiscuous mode [ 92.925004][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.932130][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.939787][ T5878] bridge_slave_1: entered allmulticast mode [ 92.947164][ T5878] bridge_slave_1: entered promiscuous mode [ 92.969133][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.978738][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.986187][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.993535][ T5863] bridge_slave_1: entered allmulticast mode [ 93.001895][ T5863] bridge_slave_1: entered promiscuous mode [ 93.025678][ T5862] team0: Port device team_slave_0 added [ 93.060795][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.074499][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.097190][ T5862] team0: Port device team_slave_1 added [ 93.106005][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.117984][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.129788][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.166237][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.177852][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.269910][ T5865] team0: Port device team_slave_0 added [ 93.277340][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.284851][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.310894][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.315594][ T5876] Bluetooth: hci0: command tx timeout [ 93.351800][ T5861] team0: Port device team_slave_0 added [ 93.359978][ T5865] team0: Port device team_slave_1 added [ 93.381206][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.388452][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.414818][ T5876] Bluetooth: hci2: command tx timeout [ 93.414844][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.434353][ T5876] Bluetooth: hci4: command tx timeout [ 93.440033][ T5876] Bluetooth: hci1: command tx timeout [ 93.441214][ T5879] Bluetooth: hci3: command tx timeout [ 93.455436][ T5863] team0: Port device team_slave_0 added [ 93.465049][ T5863] team0: Port device team_slave_1 added [ 93.472569][ T5878] team0: Port device team_slave_0 added [ 93.481517][ T5861] team0: Port device team_slave_1 added [ 93.515540][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.522618][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.549093][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.562325][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.569733][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.595788][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.626197][ T5878] team0: Port device team_slave_1 added [ 93.707340][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.714922][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.742045][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.762540][ T5862] hsr_slave_0: entered promiscuous mode [ 93.769665][ T5862] hsr_slave_1: entered promiscuous mode [ 93.778250][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.785302][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.811363][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.836009][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.843013][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.870618][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.908678][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.915835][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.941952][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.954585][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.961561][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.987915][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.006558][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.013555][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.039835][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.057074][ T5865] hsr_slave_0: entered promiscuous mode [ 94.063589][ T5865] hsr_slave_1: entered promiscuous mode [ 94.070240][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 94.076191][ T5865] Cannot create hsr debugfs directory [ 94.187209][ T5861] hsr_slave_0: entered promiscuous mode [ 94.193799][ T5861] hsr_slave_1: entered promiscuous mode [ 94.200594][ T5861] debugfs: 'hsr0' already exists in 'hsr' [ 94.206975][ T5861] Cannot create hsr debugfs directory [ 94.308372][ T5863] hsr_slave_0: entered promiscuous mode [ 94.315065][ T5863] hsr_slave_1: entered promiscuous mode [ 94.321362][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 94.327225][ T5863] Cannot create hsr debugfs directory [ 94.357984][ T5878] hsr_slave_0: entered promiscuous mode [ 94.364892][ T5878] hsr_slave_1: entered promiscuous mode [ 94.371114][ T5878] debugfs: 'hsr0' already exists in 'hsr' [ 94.377370][ T5878] Cannot create hsr debugfs directory [ 94.914822][ T5862] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.946658][ T5862] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.958029][ T5862] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.977524][ T5862] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.017361][ T5865] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.047099][ T5865] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.083364][ T5865] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.104276][ T5865] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.143697][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.157139][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.199843][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.210408][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.305444][ T5863] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.342473][ T5863] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.355413][ T5863] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.369568][ T5863] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.394222][ T5879] Bluetooth: hci0: command tx timeout [ 95.471558][ T5878] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.478444][ T5879] Bluetooth: hci1: command tx timeout [ 95.478499][ T5879] Bluetooth: hci4: command tx timeout [ 95.478534][ T5879] Bluetooth: hci2: command tx timeout [ 95.484347][ T5876] Bluetooth: hci3: command tx timeout [ 95.504818][ T5878] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.516436][ T5878] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.529453][ T5878] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.547503][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.603423][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.641063][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.679433][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.687209][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.730983][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.738194][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.749386][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.783851][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.791069][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.826372][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.833590][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.873346][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.931419][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.960102][ T5865] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.997157][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.017950][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.062317][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.069578][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.107178][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.114440][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.144016][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.151242][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.195286][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.229135][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.236553][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.331743][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.372309][ T5861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.431837][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.439097][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.478650][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.485897][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.590264][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.637397][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.777119][ T5862] veth0_vlan: entered promiscuous mode [ 96.844658][ T5862] veth1_vlan: entered promiscuous mode [ 96.966586][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.019920][ T5862] veth0_macvtap: entered promiscuous mode [ 97.056631][ T5862] veth1_macvtap: entered promiscuous mode [ 97.106865][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.161030][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.172079][ T9] cfg80211: failed to load regulatory.db [ 97.189303][ T5861] veth0_vlan: entered promiscuous mode [ 97.217988][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.265958][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.279789][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.301790][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.310801][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.323870][ T5861] veth1_vlan: entered promiscuous mode [ 97.386319][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.442732][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.461559][ T5863] veth0_vlan: entered promiscuous mode [ 97.468100][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.486315][ T5876] Bluetooth: hci0: command tx timeout [ 97.507174][ T5863] veth1_vlan: entered promiscuous mode [ 97.555872][ T5879] Bluetooth: hci2: command tx timeout [ 97.556538][ T51] Bluetooth: hci4: command tx timeout [ 97.561375][ T5879] Bluetooth: hci1: command tx timeout [ 97.572769][ T5876] Bluetooth: hci3: command tx timeout [ 97.585102][ T5865] veth0_vlan: entered promiscuous mode [ 97.605805][ T5861] veth0_macvtap: entered promiscuous mode [ 97.623631][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.632922][ T5878] veth0_vlan: entered promiscuous mode [ 97.639482][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.646042][ T5861] veth1_macvtap: entered promiscuous mode [ 97.660029][ T5865] veth1_vlan: entered promiscuous mode [ 97.681082][ T5878] veth1_vlan: entered promiscuous mode [ 97.712891][ T5862] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.767858][ T5863] veth0_macvtap: entered promiscuous mode [ 97.779917][ T5863] veth1_macvtap: entered promiscuous mode [ 97.821689][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.833429][ T5878] veth0_macvtap: entered promiscuous mode [ 97.856934][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.868458][ T5878] veth1_macvtap: entered promiscuous mode [ 97.898788][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.917770][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.938879][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.948308][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.975074][ T3011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.994937][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.005641][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.030990][ T5865] veth0_macvtap: entered promiscuous mode [ 98.042207][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.056839][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.066535][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.115763][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.125069][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.137627][ T5865] veth1_macvtap: entered promiscuous mode [ 98.187318][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.226703][ T1153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.236096][ T1153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.263000][ T1153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.285060][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.292942][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.298209][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.343156][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.395047][ T3011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.405555][ T3011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.462484][ T3011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.471512][ T3011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.570873][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.583224][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.706263][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.710562][ T5993] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 98.719600][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.842689][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.856485][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.922851][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.946360][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.049436][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.078449][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.204511][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.236078][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.262626][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.292844][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.554190][ T5876] Bluetooth: hci0: command tx timeout [ 99.634449][ T5879] Bluetooth: hci1: command tx timeout [ 99.635172][ T5184] Bluetooth: hci2: command tx timeout [ 99.640149][ T5876] Bluetooth: hci3: command tx timeout [ 99.646324][ T51] Bluetooth: hci4: command tx timeout [ 100.266289][ T6032] syz.3.16 uses obsolete (PF_INET,SOCK_PACKET) [ 100.693680][ T6048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 101.557226][ T6084] netlink: 240 bytes leftover after parsing attributes in process `syz.2.24'. [ 103.448896][ T6129] bridge0: port 3(erspan0) entered blocking state [ 103.470551][ T6129] bridge0: port 3(erspan0) entered disabled state [ 103.498625][ T6129] erspan0: entered allmulticast mode [ 103.532546][ T6129] erspan0: entered promiscuous mode [ 103.565735][ T6129] bridge0: port 3(erspan0) entered blocking state [ 103.572556][ T6129] bridge0: port 3(erspan0) entered forwarding state [ 103.585966][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.593756][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.601449][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.609108][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.616782][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.624424][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.632045][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.639729][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.647363][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.686465][ T6135] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 103.696025][ T6133] erspan0: left allmulticast mode [ 103.701123][ T6133] erspan0: left promiscuous mode [ 103.715931][ T6133] bridge0: port 3(erspan0) entered disabled state [ 104.314974][ T6132] netlink: 24 bytes leftover after parsing attributes in process `syz.4.43'. [ 104.402251][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.43'. [ 105.393926][ T6162] netlink: 96 bytes leftover after parsing attributes in process `syz.1.52'. [ 108.356831][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.76'. [ 109.882290][ T6262] trusted_key: syz.0.85 sent an empty control message without MSG_MORE. [ 110.826555][ T6287] net_ratelimit: 3310 callbacks suppressed [ 110.826568][ T6287] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 112.100747][ T6335] netlink: 32 bytes leftover after parsing attributes in process `syz.4.113'. [ 112.741847][ T6355] syzkaller1: entered promiscuous mode [ 112.754330][ T6355] syzkaller1: entered allmulticast mode [ 113.654920][ T6369] syzkaller0: entered promiscuous mode [ 113.668791][ T6369] syzkaller0: entered allmulticast mode [ 114.807816][ T6400] netlink: 'syz.1.135': attribute type 21 has an invalid length. [ 114.823230][ T6400] netlink: 'syz.1.135': attribute type 22 has an invalid length. [ 114.832499][ T6400] netlink: 'syz.1.135': attribute type 23 has an invalid length. [ 114.931863][ T6400] netlink: 136 bytes leftover after parsing attributes in process `syz.1.135'. [ 117.438207][ T6411] netlink: 'syz.4.139': attribute type 5 has an invalid length. [ 118.063251][ T6434] netlink: 'syz.3.149': attribute type 27 has an invalid length. [ 118.296744][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.305321][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.607426][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.638316][ T6434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.063850][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.081990][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.101374][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.127291][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.180511][ T6452] Zero length message leads to an empty skb [ 120.222214][ T6488] netlink: 96 bytes leftover after parsing attributes in process `syz.0.166'. [ 121.104239][ T6519] pim6reg1: entered promiscuous mode [ 121.114445][ T6519] pim6reg1: entered allmulticast mode [ 121.203434][ T6521] netlink: 32 bytes leftover after parsing attributes in process `syz.4.177'. [ 121.397628][ T6527] netlink: 76 bytes leftover after parsing attributes in process `syz.2.182'. [ 138.134676][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.141208][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.574539][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.580889][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.996324][ T5869] Bluetooth: hci0: command 0x0406 tx timeout [ 217.002416][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 217.008572][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 217.014710][ T5877] Bluetooth: hci3: command 0x0406 tx timeout [ 227.237186][ T5879] Bluetooth: hci4: command 0x0406 tx timeout [ 260.999746][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.006294][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.314176][ T31] INFO: task syz.3.165:6482 blocked for more than 143 seconds. [ 269.321800][ T31] Not tainted syzkaller #0 [ 269.513998][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 269.522743][ T31] task:syz.3.165 state:D stack:26920 pid:6482 tgid:6482 ppid:5863 task_flags:0x400040 flags:0x00004000 [ 269.775335][ T31] Call Trace: [ 269.778791][ T31] [ 269.781760][ T31] __schedule+0x1798/0x4cc0 [ 269.944022][ T31] ? __lock_acquire+0xab9/0xd20 [ 269.948989][ T31] ? __lock_acquire+0xab9/0xd20 [ 270.053981][ T31] ? __pfx___schedule+0x10/0x10 [ 270.058957][ T31] ? schedule+0x91/0x360 [ 270.063250][ T31] schedule+0x165/0x360 [ 270.266866][ T31] schedule_preempt_disabled+0x13/0x30 [ 270.272497][ T31] __mutex_lock+0x7e6/0x1350 [ 270.413957][ T31] ? __mutex_lock+0x5bb/0x1350 [ 270.418905][ T31] ? pipe_release+0x48/0x330 [ 270.423557][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 270.634022][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 270.639500][ T31] pipe_release+0x48/0x330 [ 270.773984][ T31] ? __pfx_pipe_release+0x10/0x10 [ 270.779114][ T31] __fput+0x44c/0xa70 [ 270.783143][ T31] task_work_run+0x1d1/0x260 [ 270.967908][ T31] ? __pfx_task_work_run+0x10/0x10 [ 270.973163][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 271.124229][ T31] exit_to_user_mode_loop+0xec/0x110 [ 271.129611][ T31] do_syscall_64+0x2bd/0x3b0 [ 271.274004][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.279290][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.433946][ T31] ? clear_bhb_loop+0x60/0xb0 [ 271.438717][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.583927][ T31] RIP: 0033:0x7f128b78eec9 [ 271.588438][ T31] RSP: 002b:00007ffcdff1c4d8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 271.764626][ T31] RAX: 0000000000000000 RBX: 00007f128b9e7da0 RCX: 00007f128b78eec9 [ 271.772708][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 272.004189][ T31] RBP: 00007f128b9e7da0 R08: 0000000000003c2c R09: 00000007dff1c7cf [ 272.012247][ T31] R10: 00007f128b9e7cb0 R11: 0000000000000246 R12: 000000000001d785 [ 272.234019][ T31] R13: 00007ffcdff1c5d0 R14: ffffffffffffffff R15: 00007ffcdff1c5f0 [ 272.242093][ T31] [ 272.404007][ T31] [ 272.404007][ T31] Showing all locks held in the system: [ 272.411790][ T31] 3 locks held by kworker/1:0/24: [ 272.574026][ T31] 1 lock held by khungtaskd/31: [ 272.579038][ T31] #0: ffffffff8e13a0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 272.784067][ T31] 1 lock held by udevd/5234: [ 272.788755][ T31] 1 lock held by dhcpcd/5528: [ 272.793480][ T31] 2 locks held by getty/5625: [ 273.003998][ T31] #0: ffff88814d0290a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 273.133999][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 273.283978][ T31] 1 lock held by dhcpcd/5664: [ 273.288733][ T31] 1 lock held by dhcpcd/5668: [ 273.293460][ T31] 1 lock held by syz-executor/5861: [ 273.523999][ T31] 1 lock held by syz-executor/5862: [ 273.529289][ T31] 1 lock held by syz-executor/5865: [ 273.673994][ T31] 1 lock held by udevd/5919: [ 273.678664][ T31] 1 lock held by udevd/5939: [ 273.683282][ T31] 1 lock held by udevd/6437: [ 273.874181][ T31] 1 lock held by syz.3.165/6482: [ 273.879193][ T31] #0: ffff888058868868 (&pipe->mutex){+.+.}-{4:4}, at: pipe_release+0x48/0x330 [ 274.083946][ T31] 1 lock held by syz.3.165/6484: [ 274.088966][ T31] #0: ffff888058868868 (&pipe->mutex){+.+.}-{4:4}, at: splice_file_to_pipe+0x2e/0x440 [ 274.303967][ T31] [ 274.306403][ T31] ============================================= [ 274.306403][ T31] [ 274.474020][ T31] NMI backtrace for cpu 0 [ 274.474055][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 274.474096][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.474116][ T31] Call Trace: [ 274.474130][ T31] [ 274.474144][ T31] dump_stack_lvl+0x189/0x250 [ 274.474189][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 274.474231][ T31] ? __pfx__printk+0x10/0x10 [ 274.474297][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 274.474335][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 274.474371][ T31] ? __pfx__printk+0x10/0x10 [ 274.474404][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 274.474440][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 274.474477][ T31] watchdog+0xf93/0xfe0 [ 274.474511][ T31] ? watchdog+0x1de/0xfe0 [ 274.474546][ T31] kthread+0x70e/0x8a0 [ 274.474576][ T31] ? __pfx_watchdog+0x10/0x10 [ 274.474603][ T31] ? __pfx_kthread+0x10/0x10 [ 274.474631][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 274.474652][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 274.474673][ T31] ? __pfx_kthread+0x10/0x10 [ 274.474700][ T31] ret_from_fork+0x439/0x7d0 [ 274.474723][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 274.474750][ T31] ? __switch_to_asm+0x39/0x70 [ 274.474786][ T31] ? __switch_to_asm+0x33/0x70 [ 274.474809][ T31] ? __pfx_kthread+0x10/0x10 [ 274.474835][ T31] ret_from_fork_asm+0x1a/0x30 [ 274.474878][ T31] [ 274.476641][ T31] Sending NMI from CPU 0 to CPUs 1: [ 274.625017][ C1] NMI backtrace for cpu 1 [ 274.625039][ C1] CPU: 1 UID: 101 PID: 5528 Comm: dhcpcd Not tainted syzkaller #0 PREEMPT(full) [ 274.625060][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.625072][ C1] RIP: 0010:group_send_sig_info+0x185/0x260 [ 274.625102][ C1] Code: 48 c7 c2 c0 c7 89 8b e8 99 95 16 00 48 c7 c7 e0 a0 13 8e 4c 89 e6 e8 7a 7b 16 00 e8 05 27 20 00 31 ff 44 89 ee e8 db be 38 00 <45> 85 ed 74 2f e8 91 ba 38 00 65 48 8b 05 e9 7b 17 11 48 3b 44 24 [ 274.625117][ C1] RSP: 0018:ffffc90000a08e58 EFLAGS: 00000006 [ 274.625133][ C1] RAX: ffffffff8186f425 RBX: ffff88802eac5a00 RCX: 0000000000010000 [ 274.625146][ C1] RDX: ffff88802eac5a00 RSI: 0000000000000000 RDI: 0000000000000000 [ 274.625158][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8186f2dd [ 274.625169][ C1] R10: dffffc0000000000 R11: ffffffff81cbfb20 R12: ffffffff8186f2dd [ 274.625183][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000011 [ 274.625193][ C1] FS: 00007f33d529c740(0000) GS:ffff888125d39000(0000) knlGS:0000000000000000 [ 274.625209][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 274.625221][ C1] CR2: 0000564433c8a168 CR3: 0000000033718000 CR4: 00000000003526f0 [ 274.625237][ C1] Call Trace: [ 274.625243][ C1] [ 274.625254][ C1] do_bpf_send_signal+0xa9/0x1c0 [ 274.625284][ C1] irq_work_single+0xe1/0x240 [ 274.625309][ C1] irq_work_run+0x155/0x2f0 [ 274.625332][ C1] ? __pfx_irq_work_run+0x10/0x10 [ 274.625356][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 274.625371][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 274.625391][ C1] __sysvec_irq_work+0xa8/0x3d0 [ 274.625418][ C1] sysvec_irq_work+0x9e/0xc0 [ 274.625445][ C1] [ 274.625450][ C1] [ 274.625457][ C1] asm_sysvec_irq_work+0x1a/0x20 [ 274.625476][ C1] RIP: 0010:native_apic_msr_write+0x39/0x50 [ 274.625506][ C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 12 1f 8f 03 66 [ 274.625520][ C1] RSP: 0018:ffffc90003a3fb08 EFLAGS: 00000246 [ 274.625534][ C1] RAX: 00000000000000f6 RBX: 0000000000000200 RCX: 000000000000083f [ 274.625546][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 274.625556][ C1] RBP: ffffc90003a3fbe0 R08: ffffc90003a3fb67 R09: 1ffff92000747f6c [ 274.625569][ C1] R10: dffffc0000000000 R11: fffff52000747f6d R12: ffff8880b8731401 [ 274.625583][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: ffff8880b87314b0 [ 274.625604][ C1] arch_irq_work_raise+0x6d/0x80 [ 274.625630][ C1] __irq_work_queue_local+0x1d7/0x550 [ 274.625655][ C1] ? __pfx___irq_work_queue_local+0x10/0x10 [ 274.625679][ C1] ? do_raw_spin_lock+0x121/0x290 [ 274.625701][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 274.625723][ C1] irq_work_queue+0x99/0x140 [ 274.625747][ C1] bpf_send_signal_common+0x3b4/0x540 [ 274.625773][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 274.625803][ C1] ? __pfx___cant_migrate+0x10/0x10 [ 274.625833][ C1] ? __lock_acquire+0xab9/0xd20 [ 274.625860][ C1] bpf_send_signal+0x1d/0x30 [ 274.625877][ C1] bpf_prog_7ba5217f62dcd359+0x41/0x49 [ 274.625892][ C1] bpf_trace_run2+0x284/0x4b0 [ 274.625913][ C1] ? __might_fault+0xb0/0x130 [ 274.625936][ C1] ? bpf_trace_run2+0x186/0x4b0 [ 274.625958][ C1] ? __pfx_bpf_trace_run2+0x10/0x10 [ 274.625982][ C1] ? __might_fault+0xb0/0x130 [ 274.626004][ C1] ? trace_sys_enter+0x74/0x100 [ 274.626031][ C1] __bpf_trace_sys_enter+0x38/0x60 [ 274.626057][ C1] trace_sys_enter+0xb0/0x100 [ 274.626083][ C1] syscall_trace_enter+0xf9/0x160 [ 274.626109][ C1] do_syscall_64+0xd3/0x3b0 [ 274.626130][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.626147][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 274.626166][ C1] ? clear_bhb_loop+0x60/0xb0 [ 274.626186][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.626203][ C1] RIP: 0033:0x7f33d52de189 [ 274.626217][ C1] Code: 16 00 00 00 eb de 66 2e 0f 1f 84 00 00 00 00 00 90 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec d0 00 00 00 49 89 d0 48 85 f6 0f 84 [ 274.626231][ C1] RSP: 002b:00007ffcdf8a8b40 EFLAGS: 00000293 ORIG_RAX: 000000000000000f [ 274.626248][ C1] RAX: ffffffffffffffda RBX: 00007f33d529c740 RCX: 00007f33d52de189 [ 274.626261][ C1] RDX: 00005644060a25e0 RSI: 00007ffcdf8a8c70 RDI: 0000000000000011 [ 274.626273][ C1] RBP: 00007ffcdf8a9410 R08: 0000000000000008 R09: 0000000000000000 [ 274.626283][ C1] R10: 00007ffcdf8a9410 R11: 0000000000000293 R12: 00005644060a25e0 [ 274.626295][ C1] R13: 0000564433ca3df0 R14: 00000000ffffffff R15: 00007ffcdf8a91c0 [ 274.626318][ C1] [ 276.604182][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 276.611122][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 276.620270][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 276.630377][ T31] Call Trace: [ 276.633692][ T31] [ 276.636664][ T31] dump_stack_lvl+0x99/0x250 [ 276.641297][ T31] ? __asan_memcpy+0x40/0x70 [ 276.645938][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.651178][ T31] ? __pfx__printk+0x10/0x10 [ 276.655818][ T31] vpanic+0x281/0x750 [ 276.659836][ T31] ? __pfx_vpanic+0x10/0x10 [ 276.664378][ T31] ? preempt_schedule+0xae/0xc0 [ 276.669273][ T31] ? preempt_schedule_common+0x83/0xd0 [ 276.674783][ T31] panic+0xb9/0xc0 [ 276.678536][ T31] ? __pfx_panic+0x10/0x10 [ 276.682986][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 276.688404][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 276.694611][ T31] watchdog+0xfd2/0xfe0 [ 276.698808][ T31] ? watchdog+0x1de/0xfe0 [ 276.703178][ T31] kthread+0x70e/0x8a0 [ 276.707280][ T31] ? __pfx_watchdog+0x10/0x10 [ 276.711980][ T31] ? __pfx_kthread+0x10/0x10 [ 276.716620][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 276.721861][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.727074][ T31] ? __pfx_kthread+0x10/0x10 [ 276.731712][ T31] ret_from_fork+0x439/0x7d0 [ 276.736329][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 276.741470][ T31] ? __switch_to_asm+0x39/0x70 [ 276.746281][ T31] ? __switch_to_asm+0x33/0x70 [ 276.751061][ T31] ? __pfx_kthread+0x10/0x10 [ 276.755665][ T31] ret_from_fork_asm+0x1a/0x30 [ 276.760461][ T31] [ 276.763861][ T31] Kernel Offset: disabled [ 276.768223][ T31] Rebooting in 86400 seconds..