Warning: Permanently added '[localhost]:14457' (ECDSA) to the list of known hosts. 2020/12/27 15:31:57 fuzzer started 2020/12/27 15:31:58 dialing manager at 10.0.2.10:35483 2020/12/27 15:31:59 syscalls: 3454 2020/12/27 15:31:59 code coverage: enabled 2020/12/27 15:31:59 comparison tracing: enabled 2020/12/27 15:31:59 extra coverage: enabled 2020/12/27 15:31:59 setuid sandbox: enabled 2020/12/27 15:31:59 namespace sandbox: enabled 2020/12/27 15:31:59 Android sandbox: /sys/fs/selinux/policy does not exist 2020/12/27 15:31:59 fault injection: enabled 2020/12/27 15:31:59 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/12/27 15:31:59 net packet injection: enabled 2020/12/27 15:31:59 net device setup: enabled 2020/12/27 15:31:59 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2020/12/27 15:31:59 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/12/27 15:31:59 USB emulation: enabled 2020/12/27 15:31:59 hci packet injection: enabled 2020/12/27 15:31:59 wifi device emulation: enabled 15:33:08 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x9, 0x5, 0x3, 0x0, [0x0]}, @rr={0x7, 0x3}]}}}}}}, 0x0) 15:33:09 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x110, 0x71, 0x0, &(0x7f0000000180)) 15:33:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0xe]}}, &(0x7f00000003c0)=""/236, 0x2d, 0xec, 0x8}, 0x20) 15:33:09 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) syzkaller login: [ 177.336707][ T9397] IPVS: ftp: loaded support on port[0] = 21 [ 177.449315][ T9397] chnl_net:caif_netlink_parms(): no params data found [ 177.510854][ T9397] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.523009][ T9397] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.536053][ T9397] device bridge_slave_0 entered promiscuous mode [ 177.549203][ T9397] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.559688][ T9397] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.569234][ T9397] device bridge_slave_1 entered promiscuous mode [ 177.594430][ T9397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.611513][ T9397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.626951][ T9399] IPVS: ftp: loaded support on port[0] = 21 [ 177.634070][ T9397] team0: Port device team_slave_0 added [ 177.643843][ T9397] team0: Port device team_slave_1 added [ 177.667176][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.675807][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.707549][ T9397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.724531][ T9397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.733084][ T9397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.766118][ T9397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.805936][ T9401] IPVS: ftp: loaded support on port[0] = 21 [ 177.818704][ T9397] device hsr_slave_0 entered promiscuous mode [ 177.827975][ T9397] device hsr_slave_1 entered promiscuous mode [ 177.938951][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 177.977831][ T9402] IPVS: ftp: loaded support on port[0] = 21 [ 178.045436][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.061487][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.077932][ T9399] device bridge_slave_0 entered promiscuous mode [ 178.090837][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.105590][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.117123][ T9399] device bridge_slave_1 entered promiscuous mode [ 178.132244][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 178.174422][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.205990][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.219177][ T9397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 178.236068][ T9397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 178.261607][ T9397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 178.287432][ T9399] team0: Port device team_slave_0 added [ 178.298191][ T9399] team0: Port device team_slave_1 added [ 178.307176][ T9397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.321631][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.331571][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.341928][ T9401] device bridge_slave_0 entered promiscuous mode [ 178.356232][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.368400][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.382020][ T9401] device bridge_slave_1 entered promiscuous mode [ 178.405598][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.416072][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.453936][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.475377][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.486476][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.524228][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.586759][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.613164][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.636409][ T9399] device hsr_slave_0 entered promiscuous mode [ 178.647437][ T9399] device hsr_slave_1 entered promiscuous mode [ 178.658122][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.671564][ T9399] Cannot create hsr debugfs directory [ 178.681900][ T9402] chnl_net:caif_netlink_parms(): no params data found [ 178.708004][ T9401] team0: Port device team_slave_0 added [ 178.725403][ T9401] team0: Port device team_slave_1 added [ 178.760081][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.768852][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.803374][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.828230][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.838790][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.880263][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.926319][ T9402] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.935084][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.945949][ T9402] device bridge_slave_0 entered promiscuous mode [ 178.959335][ T9402] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.968015][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.977893][ T9402] device bridge_slave_1 entered promiscuous mode [ 179.007151][ T9402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.021943][ T9402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.035972][ T9401] device hsr_slave_0 entered promiscuous mode [ 179.046878][ T9401] device hsr_slave_1 entered promiscuous mode [ 179.058871][ T9401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.070755][ T9401] Cannot create hsr debugfs directory [ 179.115826][ T9402] team0: Port device team_slave_0 added [ 179.127031][ T9402] team0: Port device team_slave_1 added [ 179.162085][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.173168][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.208149][ T9402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.229184][ T9402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.239831][ T9402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.271946][ T9402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.280390][ T42] Bluetooth: hci0: command 0x0409 tx timeout [ 179.318918][ T9402] device hsr_slave_0 entered promiscuous mode [ 179.327599][ T9402] device hsr_slave_1 entered promiscuous mode [ 179.336141][ T9402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.345520][ T9402] Cannot create hsr debugfs directory [ 179.422204][ T9399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 179.438286][ T9397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.454589][ T9399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 179.468068][ T9399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 179.485463][ T9399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 179.514180][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 179.524423][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.539777][ T9397] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.555316][ T9401] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.568433][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 179.579802][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.590524][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.600134][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.610783][ T9401] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.611842][ T23] Bluetooth: hci1: command 0x0409 tx timeout [ 179.628373][ T9401] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.638818][ T9401] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.653680][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 179.670117][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 179.683756][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.696635][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.707793][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.745915][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 179.763231][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 179.787137][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 179.797964][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.808164][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.832217][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 179.843938][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.849706][ T9431] Bluetooth: hci2: command 0x0409 tx timeout [ 179.854109][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 179.871892][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.882642][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 179.892528][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.905254][ T9402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 179.920680][ T9402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 179.935666][ T9397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.948392][ T9402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 179.960431][ T9402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 179.978451][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.999941][ T28] Bluetooth: hci3: command 0x0409 tx timeout [ 180.017237][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.030245][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.040855][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.051766][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.064971][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.084196][ T9397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.104557][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.118217][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.128445][ T9422] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.137241][ T9422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.149956][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.160220][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.169510][ T9422] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.177833][ T9422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.187144][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.211796][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.220494][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.236371][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.252713][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.262605][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.272136][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.289689][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.299904][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.309896][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 180.319986][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 180.331506][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.341686][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.361068][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.370063][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.378912][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.388647][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 180.407294][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.417846][ T9399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.427333][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.437409][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.447342][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.456879][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.470136][ T9397] device veth0_vlan entered promiscuous mode [ 180.491114][ T9397] device veth1_vlan entered promiscuous mode [ 180.501647][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.514942][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.534971][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.550874][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.562233][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.572871][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.639262][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.652377][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.664388][ T5301] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.677175][ T5301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.688334][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 180.697598][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 180.713913][ T9402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.733836][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.744915][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.757144][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.766650][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.783147][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.803779][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.816381][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.826990][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.840284][ T9402] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.856221][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.867013][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.877789][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.890041][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.902835][ T9397] device veth0_macvtap entered promiscuous mode [ 180.917185][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.927081][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.939886][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.952084][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.961168][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.975836][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.988727][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.004154][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.030175][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.042812][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.055531][ T3083] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.065352][ T3083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.075683][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.086441][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.098126][ T9397] device veth1_macvtap entered promiscuous mode [ 181.114464][ T9401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.131452][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 181.151469][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.172138][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.184793][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.206548][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.217130][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.228173][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.240512][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.268334][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.281748][ T3080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.305190][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.321227][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 181.331858][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 181.342985][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.357327][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.367981][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 181.370028][ T28] Bluetooth: hci0: command 0x041b tx timeout [ 181.379667][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 181.397936][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 181.408260][ T9422] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 181.422394][ T9399] device veth0_vlan entered promiscuous mode [ 181.436609][ T9402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 181.453815][ T9402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 181.471899][ T9397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.482521][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 181.491934][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.504332][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.516303][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.526269][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.536688][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.555230][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.575535][ T9397] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.595096][ T9397] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.609211][ T9397] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.623940][ T9397] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.646039][ T9399] device veth1_vlan entered promiscuous mode [ 181.660746][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 181.680045][ T3080] Bluetooth: hci1: command 0x041b tx timeout [ 181.685693][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.702534][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.736624][ T9402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.792810][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.806520][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.924889][ T7] Bluetooth: hci2: command 0x041b tx timeout [ 181.926492][ T9399] device veth0_macvtap entered promiscuous mode [ 181.950179][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 181.964233][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 181.976569][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 181.987973][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 181.999594][ T42] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.026245][ T9401] device veth0_vlan entered promiscuous mode [ 182.027381][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.044797][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.059559][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.071149][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.085225][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 182.090099][ T9432] Bluetooth: hci3: command 0x041b tx timeout [ 182.107947][ T9401] device veth1_vlan entered promiscuous mode [ 182.118782][ T9399] device veth1_macvtap entered promiscuous mode [ 182.138019][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.151343][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.162650][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.175489][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.205163][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.215930][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 182.227127][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 182.240550][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 182.254418][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 182.275220][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.288894][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.303900][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.315891][ T9411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.323197][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.330628][ T9411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.341238][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.361946][ T9402] device veth0_vlan entered promiscuous mode [ 182.373129][ T3083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.386044][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.399875][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.413957][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.435625][ T9401] device veth0_macvtap entered promiscuous mode [ 182.448139][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 182.466674][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 182.480406][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 182.493022][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 182.507695][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 182.523299][ T9401] device veth1_macvtap entered promiscuous mode [ 182.534540][ T9397] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 182.536998][ T9399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.559678][ T9399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.572314][ T9399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.583202][ T9399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.601474][ T9402] device veth1_vlan entered promiscuous mode [ 182.639209][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 182.656039][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.676009][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 15:33:15 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x9, 0x5, 0x3, 0x0, [0x0]}, @rr={0x7, 0x3}]}}}}}}, 0x0) [ 182.694029][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.792010][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.833884][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 182.850619][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 182.865672][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 182.885027][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 182.895754][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 182.922551][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.940798][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 15:33:15 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x9, 0x5, 0x3, 0x0, [0x0]}, @rr={0x7, 0x3}]}}}}}}, 0x0) [ 182.965915][ T9401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 182.989732][ T9401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.006930][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.029158][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.041037][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 15:33:16 executing program 0: syz_emit_ethernet(0x2e, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x2}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x7, 0x9, 0x5, 0x3, 0x0, [0x0]}, @rr={0x7, 0x3}]}}}}}}, 0x0) [ 183.056261][ T9401] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.069173][ T9401] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.081905][ T9401] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.093269][ T9401] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.133001][ T9423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.136146][ T9402] device veth0_macvtap entered promiscuous mode 15:33:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000b604000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd37, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 183.144111][ T9423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.191172][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.204679][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.217875][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.231423][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 183.262962][ T9402] device veth1_macvtap entered promiscuous mode [ 183.282472][ T9411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.285815][ T9447] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.293238][ T9411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.322625][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 183.335577][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.367892][ T9449] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.387172][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.404662][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.423492][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 15:33:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000b604000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd37, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 183.438546][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.453645][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 183.459712][ T28] Bluetooth: hci0: command 0x040f tx timeout [ 183.470495][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.472241][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.503290][ T9411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.507158][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.522466][ T9411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.532002][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.557015][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.569936][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.582234][ T9402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 183.595649][ T9402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.614102][ T9402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.628458][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 183.638420][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 183.650297][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 183.661768][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 183.673194][ T4049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 183.705598][ T9428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.721910][ T9428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.723388][ T9402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.746273][ T9402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.758213][ T9402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.769869][ T9432] Bluetooth: hci1: command 0x040f tx timeout [ 183.772095][ T9402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.791184][ T9452] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:33:16 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x110, 0x71, 0x0, &(0x7f0000000180)) [ 183.805870][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.913707][ T9428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.917713][ T9465] BPF:[1] VAR _ [ 183.930039][ T2968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.932132][ T9465] BPF:type_id=0 linkage=0 [ 183.948627][ T2968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.981378][ T9465] BPF: [ 184.006507][ T9465] BPF:Invalid name [ 184.007828][ T9431] Bluetooth: hci2: command 0x040f tx timeout [ 184.012611][ T9465] BPF: [ 184.012611][ T9465] [ 184.023528][ T9428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.029170][ T9431] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 184.033780][ T9465] BPF:[1] VAR _ [ 184.040856][ T9432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.049009][ T9465] BPF:type_id=0 linkage=0 [ 184.072557][ T9465] BPF: [ 184.076355][ T9465] BPF:Invalid name [ 184.082732][ T9465] BPF: [ 184.082732][ T9465] 15:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000b604000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd37, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 184.148147][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.162539][ T9432] Bluetooth: hci3: command 0x040f tx timeout 15:33:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 15:33:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0xe]}}, &(0x7f00000003c0)=""/236, 0x2d, 0xec, 0x8}, 0x20) 15:33:17 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x110, 0x71, 0x0, &(0x7f0000000180)) 15:33:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="000000b604000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x30, 0x2c, 0xd37, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x4}}]}, 0x30}}, 0x0) [ 184.214288][ T9478] BPF:[1] VAR _ [ 184.227799][ T9478] BPF:type_id=0 linkage=0 [ 184.239948][ T9478] BPF: [ 184.246209][ T9478] BPF:Invalid name [ 184.256581][ T9478] BPF: [ 184.256581][ T9478] [ 184.283402][ T9480] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. 15:33:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0xe]}}, &(0x7f00000003c0)=""/236, 0x2d, 0xec, 0x8}, 0x20) 15:33:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 15:33:17 executing program 1: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x110, 0x71, 0x0, &(0x7f0000000180)) [ 184.335819][ T9488] BPF:[1] VAR _ [ 184.350694][ T9488] BPF:type_id=0 linkage=0 [ 184.356693][ T9488] BPF: [ 184.364122][ T9488] BPF:Invalid name [ 184.373114][ T9488] BPF: [ 184.373114][ T9488] 15:33:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @empty}}, 0x14) 15:33:17 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0800000000000000000a00000018000000140006"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:33:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x2}]}, {0x0, [0x0, 0x5f, 0xe]}}, &(0x7f00000003c0)=""/236, 0x2d, 0xec, 0x8}, 0x20) 15:33:17 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000040), 0xfd86) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) 15:33:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @empty}}, 0x14) [ 184.510876][ T9504] BPF:[1] VAR _ [ 184.521192][ T9504] BPF:type_id=0 linkage=0 [ 184.549806][ T9504] BPF: [ 184.553139][ T9504] BPF:Invalid name [ 184.557420][ T9504] BPF: [ 184.557420][ T9504] 15:33:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @empty}}, 0x14) 15:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 15:33:17 executing program 2: set_thread_area(&(0x7f0000000200)={0xffffffff}) 15:33:17 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0800000000000000000a00000018000000140006"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:33:17 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000000c0)={@ipv4={[], [], @empty}}, 0x14) 15:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 15:33:17 executing program 2: set_thread_area(&(0x7f0000000200)={0xffffffff}) 15:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 15:33:17 executing program 2: set_thread_area(&(0x7f0000000200)={0xffffffff}) 15:33:17 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0800000000000000000a00000018000000140006"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:33:17 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x8, 0x3000000, @private2={0xfc, 0x2, [0x0, 0x0, 0x11]}}, 0x20) 15:33:17 executing program 2: set_thread_area(&(0x7f0000000200)={0xffffffff}) 15:33:17 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8, 0x1, 'ife\x00'}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}, @TCA_IFE_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 15:33:17 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x8, 0x3000000, @private2={0xfc, 0x2, [0x0, 0x0, 0x11]}}, 0x20) 15:33:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x8, 0x3000000, @private2={0xfc, 0x2, [0x0, 0x0, 0x11]}}, 0x20) 15:33:18 executing program 0: sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001600ff0800000000000000000a00000018000000140006"], 0x2c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 15:33:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 1: r0 = socket(0x11, 0x2, 0x0) sendto$l2tp6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x8, 0x3000000, @private2={0xfc, 0x2, [0x0, 0x0, 0x11]}}, 0x20) 15:33:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xa627373b2b7d931d, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 15:33:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, {[@window={0x5, 0x4}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "7d9f5332313f94b70be8934f"}, @fastopen={0x22, 0x6, "aaae2965"}, @fastopen={0x22, 0x5, '\x00\x00\x00'}, @md5sig={0x13, 0x12, "9533e062c17afbcc911cc9f426041419"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e8c137643c"}]}}}}}}}}, 0x0) 15:33:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000000)=0x2210, 0x4) 15:33:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xa627373b2b7d931d, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) [ 185.534452][ T9432] Bluetooth: hci0: command 0x0419 tx timeout 15:33:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xa627373b2b7d931d, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 15:33:18 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, {[@window={0x5, 0x4}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "7d9f5332313f94b70be8934f"}, @fastopen={0x22, 0x6, "aaae2965"}, @fastopen={0x22, 0x5, '\x00\x00\x00'}, @md5sig={0x13, 0x12, "9533e062c17afbcc911cc9f426041419"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e8c137643c"}]}}}}}}}}, 0x0) 15:33:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '~\x00 ', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xa627373b2b7d931d, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 15:33:18 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000fa0000000000000000c1030000030000002004000000000000800200000000000000000000800000005003000050030000500300005003000050030000030000000000000000000000fe8000000000000000000000000000bbff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000076657468315f746f5f626f6e640000006e657470636930000000000000000000000000000000000000000000000000000000000000000000001d000000000000000000000000000000000000500280020000000001000000000000000000000000000000000000005001686173686c696d697400000000000000f8ff0000000000000000010000027465616d5f736c6176655f310008000000000000000000000000000000000000000000000079aa1b2500000000000000000000000000000000000000000000000000000000000000000000000000000000b500000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000e200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000400000000000000b61a000800000000000000000000000000005800686173686c696d697400000000000000000000000000000000000000000173797a6b616c6c657231000000000000000000000000000004000000000000000000000005000000a600000000000000005f0200000000003000434f4e4e4d41524b0000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000ff0f000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000040000000000000000a800d0000000000000000000000000000000000000000000000000002800434c4153534946590000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000212f00000000000000000000feffffff"], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, {[@window={0x5, 0x4}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "7d9f5332313f94b70be8934f"}, @fastopen={0x22, 0x6, "aaae2965"}, @fastopen={0x22, 0x5, '\x00\x00\x00'}, @md5sig={0x13, 0x12, "9533e062c17afbcc911cc9f426041419"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e8c137643c"}]}}}}}}}}, 0x0) 15:33:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x6f) fcntl$setstatus(r0, 0x4, 0xc00) 15:33:18 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6d) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1) syz_emit_ethernet(0x8e, &(0x7f0000000640)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x58, 0x6, 0x0, @private0, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x10, 0x0, 0x0, 0x0, {[@window={0x5, 0x4}, @timestamp={0x8, 0xa}, @fastopen={0x22, 0xe, "7d9f5332313f94b70be8934f"}, @fastopen={0x22, 0x6, "aaae2965"}, @fastopen={0x22, 0x5, '\x00\x00\x00'}, @md5sig={0x13, 0x12, "9533e062c17afbcc911cc9f426041419"}, @exp_fastopen={0xfe, 0x9, 0xf989, "e8c137643c"}]}}}}}}}}, 0x0) 15:33:18 executing program 3: syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x8000000, 0x7, &(0x7f0000000200)=[{&(0x7f0000010000)="00400000700200008f3d00000a00000000000000843d0000000400005c70be13840300001e000000000000000020cc070200010052654973457233467300000002000000020001000200853d00000000010000001231231212331233123112341341241273797a6b616c6c65720000000000000001001e003dc1655f004eed00", 0x80, 0x10000}, {&(0x7f0000010100)="000000000000000000000000010000000300"/32, 0x20, 0x100c0}, {&(0x7f0000010200)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff00"/1984, 0x7c0, 0x12000}, {&(0x7f0000010a00)="ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x1800, 0x12800}, {&(0x7f0000012200)="0000000000000000000000000a00000000000000843d0000000400005c70be13840300001e00"/64, 0x40, 0x7b1c000}, {&(0x7f0000012300)="010002005c1f0000000000000000000000000000000000000100000002000000000000000000000000002c00d41f0100010000000200000001000000f401000002003000a41f00"/96, 0x60, 0x7b1e000}, {&(0x7f0000012400)="0000000001000000010000000200000028000400020000000000000001000000200004002e2e0000000000002e00000000000000ed4100000300000030000000000000005cf90100535f01003dc1655f3dc1655f3dc1655f0100000000000000", 0x60, 0x7b1ffa0}], 0x0, &(0x7f0000012500)) 15:33:18 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x6f) fcntl$setstatus(r0, 0x4, 0xc00) [ 185.837462][ T9625] loop3: detected capacity change from 264192 to 0 [ 185.849805][ T28] Bluetooth: hci1: command 0x0419 tx timeout 15:33:18 executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x400c00) 15:33:18 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x6f) fcntl$setstatus(r0, 0x4, 0xc00) [ 185.901645][ T9625] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 128, size 512) [ 185.926453][ T9625] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 15:33:18 executing program 0: r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40046602, &(0x7f0000000000)=0x6f) fcntl$setstatus(r0, 0x4, 0xc00) 15:33:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)='y', 0x1}], 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) [ 186.075787][ T9625] loop3: detected capacity change from 264192 to 0 [ 186.085847][ T28] Bluetooth: hci2: command 0x0419 tx timeout [ 186.105165][ T9625] REISERFS warning (device loop3): sh-2011 read_super_block: can't find a reiserfs filesystem on (dev loop3, block 128, size 512) [ 186.132353][ T9625] REISERFS warning (device loop3): sh-2021 reiserfs_fill_super: can not find reiserfs on loop3 15:33:19 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x0, &(0x7f0000000100)=@srh, 0x8) 15:33:19 executing program 3: pkey_alloc(0x1000000, 0x0) 15:33:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x1, 0x42b, 0x8}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8e, r0}, 0x38) 15:33:19 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x0, &(0x7f0000000100)=@srh, 0x8) [ 186.240119][ T28] Bluetooth: hci3: command 0x0419 tx timeout 15:33:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x1, 0x42b, 0x8}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8e, r0}, 0x38) 15:33:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)='y', 0x1}], 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 15:33:19 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x0, &(0x7f0000000100)=@srh, 0x8) 15:33:19 executing program 3: pkey_alloc(0x1000000, 0x0) 15:33:19 executing program 0: r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x10d, 0x0, &(0x7f0000000100)=@srh, 0x8) 15:33:19 executing program 3: pkey_alloc(0x1000000, 0x0) 15:33:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x1, 0x42b, 0x8}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8e, r0}, 0x38) 15:33:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0xfee0) 15:33:19 executing program 3: pkey_alloc(0x1000000, 0x0) 15:33:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)='y', 0x1}], 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 15:33:19 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x1, 0x1, 0x42b, 0x8}, 0x40) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x8e, r0}, 0x38) 15:33:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0xfee0) 15:33:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 15:33:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x210000, 0x800, 0x0, 0x3}, 0x20) 15:33:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0xfee0) 15:33:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 15:33:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x210000, 0x800, 0x0, 0x3}, 0x20) 15:33:19 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r0) r1 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_bridge\x00', 0x0}) bind$packet(r1, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000001c0)=0x8, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)='y', 0x1}], 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000040), 0xfdef}]) 15:33:19 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0x3, &(0x7f0000000040)='dctcp\x00', 0xfee0) 15:33:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 15:33:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x210000, 0x800, 0x0, 0x3}, 0x20) 15:33:19 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x210000, 0x800, 0x0, 0x3}, 0x20) 15:33:19 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9, 0x1, 'mpls\x00'}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 15:33:19 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 15:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) 15:33:19 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x141801, 0x0) write$9p(r0, &(0x7f00000001c0)="f042d6d6c2809dfca2bb9fd083a96a1652a0", 0x12) [ 186.889928][ T9737] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 15:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) 15:33:19 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:19 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x141801, 0x0) write$9p(r0, &(0x7f00000001c0)="f042d6d6c2809dfca2bb9fd083a96a1652a0", 0x12) 15:33:19 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:19 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) 15:33:20 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 15:33:20 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x141801, 0x0) write$9p(r0, &(0x7f00000001c0)="f042d6d6c2809dfca2bb9fd083a96a1652a0", 0x12) 15:33:20 executing program 3: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) 15:33:20 executing program 0: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:20 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x141801, 0x0) write$9p(r0, &(0x7f00000001c0)="f042d6d6c2809dfca2bb9fd083a96a1652a0", 0x12) 15:33:20 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:20 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10) [ 187.855698][ T9778] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:33:20 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) 15:33:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10) 15:33:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) 15:33:21 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) 15:33:21 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) [ 188.687266][ T9791] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:33:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) 15:33:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10) 15:33:21 executing program 3: r0 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000000800000065000000000000000f0000000000000095000000000000008caa29bdebd26d40796fb13b7501ff5a8c082a17810f99dde98f18c122ae2fd1b9efd884c0081f98445432c5a3b674762ade6e67c8effd181bb87a6cdb60fb5ff16d74c4e2aada1c1dcc239817da68ffbb1435df76c97409c20bee8a8202549363895643e0bb32a4a7ac4c3408f756682fa9bde008a1"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x3f) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) close(r0) [ 188.762827][ T9800] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:33:21 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x6c, 0x0, &(0x7f0000000040)) 15:33:21 executing program 0: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e48000037000510d25a80648c63940d0324fc60100010400a000000053582c137153e370948018000f01700d1bd", 0xfd99}], 0x1, 0x0, 0x0, 0x60000000}, 0x10) [ 188.828893][ T9812] netlink: 'syz-executor.0': attribute type 1 has an invalid length. 15:33:21 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) 15:33:21 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000006c0)='SMC_PNETID\x00') sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000ac0)={0x34, r1, 0x21, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'virt_wifi0\x00'}]}, 0x34}}, 0x0) [ 188.871917][ T9817] smc: net device virt_wifi0 applied user defined pnetid SYZ1 15:33:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0xfffffe32, 0x0, 0x0, 0xffffffffffffff39) 15:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 15:33:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) [ 189.606673][ T9824] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 189.624627][ T9824] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 15:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 189.682041][ T9831] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 189.700819][ T9831] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 15:33:22 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) 15:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 15:33:22 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) [ 189.791185][ T9843] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 189.810020][ T9843] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 15:33:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9, 0x1, 'bond\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xffffffff}]}}}]}, 0x3c}}, 0x0) [ 189.867988][ T9847] (unnamed net_device) (uninitialized): option arp_interval: invalid value (18446744073709551615) [ 189.884600][ T9847] (unnamed net_device) (uninitialized): option arp_interval: allowed values 0 - 2147483647 15:33:23 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) 15:33:23 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) 15:33:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 15:33:23 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 15:33:24 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) 15:33:24 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 15:33:24 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) 15:33:24 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) 15:33:24 executing program 2: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, 0x0, &(0x7f0000000040)) 15:33:24 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@restrict, @union]}}, &(0x7f0000000140)=""/180, 0x32, 0xb4, 0x1}, 0x20) 15:33:24 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xce, &(0x7f00000012c0)=""/203, &(0x7f0000000040)=0xcb) 15:33:24 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 191.201599][ T9883] IPVS: ftp: loaded support on port[0] = 21 [ 191.263141][ T9885] IPVS: ftp: loaded support on port[0] = 21 15:33:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xce, &(0x7f00000012c0)=""/203, &(0x7f0000000040)=0xcb) 15:33:25 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:25 executing program 1: timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) recvfrom(r2, &(0x7f0000000140)=""/163, 0x100000345, 0x0, 0x0, 0x0) 15:33:25 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSDEBUG(r0, 0x40047452, 0x0) [ 192.283262][ T9892] IPVS: ftp: loaded support on port[0] = 21 15:33:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xce, &(0x7f00000012c0)=""/203, &(0x7f0000000040)=0xcb) 15:33:25 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:25 executing program 2: r0 = socket$inet(0x2, 0x3, 0x2) getsockopt(r0, 0x0, 0xce, &(0x7f00000012c0)=""/203, &(0x7f0000000040)=0xcb) 15:33:25 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 192.413265][ T9904] IPVS: ftp: loaded support on port[0] = 21 [ 192.467300][ T9910] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:26 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:26 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:26 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 193.170599][ T9918] IPVS: ftp: loaded support on port[0] = 21 [ 193.177884][ T9921] IPVS: ftp: loaded support on port[0] = 21 [ 193.181983][ T9922] IPVS: ftp: loaded support on port[0] = 21 [ 193.221160][ T9924] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:26 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) 15:33:26 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 193.340368][ T9931] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 193.396475][ T9936] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, 0x0) [ 193.445216][ T9942] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, 0x0) 15:33:26 executing program 2: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 193.515886][ T9952] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vim2m\x00', 0x2, 0x0) pselect6(0x40, &(0x7f0000000300)={0x8}, 0x0, 0x0, 0x0, 0x0) 15:33:26 executing program 1: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000002100)={0x5}, 0x8) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000020c0), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x5, 0x0, 0x0) unshare(0x42000000) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020}, 0x2020) socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002040), &(0x7f0000002080)=0xc) [ 193.599036][ T9959] IPVS: ftp: loaded support on port[0] = 21 15:33:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) 15:33:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 15:33:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) 15:33:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 15:33:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 15:33:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) 15:33:26 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb, 0x1, 'bridge\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STATS_ENABLED={0x5, 0x2a, 0x1}]}}}]}, 0x3c}}, 0x0) 15:33:26 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000080)='eth0\xd2\x84{;\x8b\xe51Cp\x97\xc3\xbf\xed\x02\xb7\xf8\xb4\x83i;pW<\x8a\xa7\'\x9b\x92-\xe7\x94\xfb\xdcP?\x1c\xc4\x03\x17\v\xd36\xd7\xd8\xbf\x89\xb9\xcb\x86\xd2\xca\xf2I\x18\x95K\xbf\xb9s\xf9\x92;\x02\xbcIPb5=\x19\xc4\xfa\x11m\x82\xf4\x92\xe3$\x1fe\xa4\x9e\xb7;\xf7B\xad0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010100}]}, &(0x7f0000000180)=0xc) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={r2}, 0x10) 15:33:26 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000080)='eth0\xd2\x84{;\x8b\xe51Cp\x97\xc3\xbf\xed\x02\xb7\xf8\xb4\x83i;pW<\x8a\xa7\'\x9b\x92-\xe7\x94\xfb\xdcP?\x1c\xc4\x03\x17\v\xd36\xd7\xd8\xbf\x89\xb9\xcb\x86\xd2\xca\xf2I\x18\x95K\xbf\xb9s\xf9\x92;\x02\xbcIPb5=\x19\xc4\xfa\x11m\x82\xf4\x92\xe3$\x1fe\xa4\x9e\xb7;\xf7B\xad0x0) io_submit(r1, 0x2, &(0x7f0000001880)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 15:33:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x33}}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 15:33:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@polexpire={0xb8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x6d5fd760b50d29b2}}}, 0xb8}}, 0x0) 15:33:29 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@polexpire={0xb8, 0x1b, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x6d5fd760b50d29b2}}}, 0xb8}}, 0x0) 15:33:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xb, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) 15:33:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x33}}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) [ 196.229109][T10174] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 15:33:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x33}}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 15:33:29 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r0, &(0x7f0000000100)="f6", 0xffffffe7, 0xc000, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140), 0x4) 15:33:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xb, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) [ 196.384116][T10183] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. 15:33:29 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) 15:33:29 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@dev, 0x0, 0x33}}}, 0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) 15:33:29 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8, 0x1, 'ppp\x00'}, {0xb, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x38}}, 0x0) [ 196.468581][T10195] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.536023][T10182] ------------[ cut here ]------------ [ 196.540083][T10182] WARNING: CPU: 2 PID: 10182 at mm/page_counter.c:57 page_counter_cancel+0x56/0x70 15:33:29 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) [ 196.556873][T10182] Modules linked in: [ 196.560246][T10182] CPU: 2 PID: 10182 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 196.570772][T10182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 196.570772][T10182] RIP: 0010:page_counter_cancel+0x56/0x70 15:33:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x0, 0x3f00, {@in6_addr=@empty, 0x86dd}}}]}, 0x38}}, 0x0) 15:33:29 executing program 3: r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000180)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x77d245dc, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0x1}], 0x10}}], 0x2, 0x0) [ 196.608196][T10182] Code: 89 ef 48 89 c3 48 89 c6 e8 37 fd ff ff 31 ff 48 89 de e8 dd 8d b8 ff 48 85 db 78 09 5b 5d 41 5c e9 df 85 b8 ff e8 da 85 b8 ff <0f> 0b 5b 5d 41 5c e9 cf 85 b8 ff 0f 1f 44 00 00 66 2e 0f 1f 84 00 [ 196.647569][T10182] RSP: 0018:ffffc9000d247788 EFLAGS: 00010012 [ 196.647569][T10182] RAX: 000000000002501b RBX: ffffffffffffffb0 RCX: ffffc900b950c000 [ 196.647569][T10182] RDX: 0000000000040000 RSI: ffffffff81b9f666 RDI: 0000000000000003 [ 196.647569][T10182] RBP: ffff888069710120 R08: 0000000000000000 R09: ffff8880103a417f [ 196.683288][T10182] R10: ffffffff81b9f653 R11: 0000000000000000 R12: 0000000000000100 [ 196.683288][T10182] R13: 0000000000000200 R14: ffff888069710000 R15: 0000000000000002 [ 196.683288][T10182] FS: 0000000000000000(0000) GS:ffff88802cc00000(0063) knlGS:00000000f55b5b40 [ 196.683288][T10182] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 196.683288][T10182] CR2: 0000000020200000 CR3: 0000000029ebb000 CR4: 0000000000350ee0 [ 196.683288][T10182] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.683288][T10182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.683288][T10182] Call Trace: [ 196.683288][T10182] page_counter_uncharge+0x2e/0x60 [ 196.683288][T10182] drain_stock+0xc9/0x2c0 [ 196.683288][T10182] refill_stock+0x132/0x270 [ 196.683288][T10182] __sk_mem_reduce_allocated+0x24d/0x550 [ 196.683288][T10182] dfrag_clear+0x45e/0x540 [ 196.683288][T10182] __mptcp_clean_una+0x146/0xc60 [ 196.683288][T10182] ? mptcp_push_pending+0x1740/0x1740 [ 196.683288][T10182] mptcp_release_cb+0x2d4/0x330 [ 196.683288][T10182] ? mptcp_push_pending+0x1740/0x1740 [ 196.683288][T10182] release_sock+0xb4/0x1b0 [ 196.683288][T10182] sk_stream_wait_memory+0x608/0xed0 [ 196.683288][T10182] ? sk_stream_wait_connect+0x6a0/0x6a0 [ 196.683288][T10182] ? __init_waitqueue_head+0x110/0x110 [ 196.683288][T10182] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 196.683288][T10182] ? copy_page_from_iter+0x5f2/0x870 [ 196.683288][T10182] mptcp_sendmsg+0xd87/0x27b0 [ 196.683288][T10182] ? mptcp_release_cb+0x330/0x330 [ 196.683288][T10182] ? aa_sk_perm+0x316/0xaa0 [ 196.683288][T10182] ? aa_af_perm+0x230/0x230 [ 196.683288][T10182] ? __fget_files+0x288/0x3d0 [ 196.683288][T10182] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 196.683288][T10182] inet_sendmsg+0x99/0xe0 [ 196.683288][T10182] ? inet_send_prepare+0x4d0/0x4d0 [ 196.683288][T10182] sock_sendmsg+0xcf/0x120 [ 196.683288][T10182] __sys_sendto+0x21c/0x320 [ 196.683288][T10182] ? __ia32_sys_getpeername+0xb0/0xb0 [ 196.683288][T10182] ? _copy_to_user+0xdc/0x150 [ 196.683288][T10182] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 196.960856][T10182] ? put_old_timespec32+0x101/0x1f0 [ 196.970990][T10182] ? get_old_timespec32+0x1f0/0x1f0 [ 196.981197][T10182] ? __ia32_sys_futex_time32+0x32a/0x530 [ 196.981197][T10182] __ia32_sys_sendto+0xdb/0x1b0 [ 196.991374][T10182] ? lockdep_hardirqs_on+0x79/0x100 [ 197.001876][T10182] __do_fast_syscall_32+0x56/0x80 [ 197.009621][T10182] do_fast_syscall_32+0x2f/0x70 [ 197.012108][T10182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 197.022264][T10182] RIP: 0023:0xf7fbb549 [ 197.022264][T10182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.052868][T10182] RSP: 002b:00000000f55b50bc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 197.059805][T10182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 197.069877][T10182] RDX: 00000000ffffffe7 RSI: 000000000000c000 RDI: 0000000000000000 [ 197.079756][T10182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.089616][T10182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 197.099695][T10182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.114084][T10182] Kernel panic - not syncing: panic_on_warn set ... [ 197.124312][T10182] CPU: 2 PID: 10182 Comm: syz-executor.2 Not tainted 5.10.0-syzkaller #0 [ 197.139732][T10182] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 197.155132][T10182] Call Trace: [ 197.161554][T10182] dump_stack+0x107/0x163 [ 197.165339][T10182] panic+0x306/0x73d [ 197.171884][T10182] ? __warn_printk+0xf3/0xf3 [ 197.175674][T10182] ? __warn.cold+0x1a/0x44 [ 197.185830][T10182] ? page_counter_cancel+0x56/0x70 [ 197.189537][T10182] __warn.cold+0x35/0x44 [ 197.196091][T10182] ? page_counter_cancel+0x56/0x70 [ 197.206272][T10182] report_bug+0x1bd/0x210 [ 197.209524][T10182] handle_bug+0x3c/0x60 [ 197.216546][T10182] exc_invalid_op+0x14/0x40 [ 197.219538][T10182] asm_exc_invalid_op+0x12/0x20 [ 197.229532][T10182] RIP: 0010:page_counter_cancel+0x56/0x70 [ 197.247770][T10182] Code: 89 ef 48 89 c3 48 89 c6 e8 37 fd ff ff 31 ff 48 89 de e8 dd 8d b8 ff 48 85 db 78 09 5b 5d 41 5c e9 df 85 b8 ff e8 da 85 b8 ff <0f> 0b 5b 5d 41 5c e9 cf 85 b8 ff 0f 1f 44 00 00 66 2e 0f 1f 84 00 [ 197.299758][T10182] RSP: 0018:ffffc9000d247788 EFLAGS: 00010012 [ 197.319994][T10182] RAX: 000000000002501b RBX: ffffffffffffffb0 RCX: ffffc900b950c000 [ 197.340754][T10182] RDX: 0000000000040000 RSI: ffffffff81b9f666 RDI: 0000000000000003 [ 197.365441][T10182] RBP: ffff888069710120 R08: 0000000000000000 R09: ffff8880103a417f [ 197.381878][T10182] R10: ffffffff81b9f653 R11: 0000000000000000 R12: 0000000000000100 [ 197.392130][T10182] R13: 0000000000000200 R14: ffff888069710000 R15: 0000000000000002 [ 197.402317][T10182] ? page_counter_cancel+0x43/0x70 [ 197.412509][T10182] ? page_counter_cancel+0x56/0x70 [ 197.419769][T10182] ? page_counter_cancel+0x56/0x70 [ 197.422723][T10182] page_counter_uncharge+0x2e/0x60 [ 197.432969][T10182] drain_stock+0xc9/0x2c0 [ 197.439954][T10182] refill_stock+0x132/0x270 [ 197.443189][T10182] __sk_mem_reduce_allocated+0x24d/0x550 [ 197.449639][T10182] dfrag_clear+0x45e/0x540 [ 197.453386][T10182] __mptcp_clean_una+0x146/0xc60 [ 197.463629][T10182] ? mptcp_push_pending+0x1740/0x1740 [ 197.469618][T10182] mptcp_release_cb+0x2d4/0x330 [ 197.473723][T10182] ? mptcp_push_pending+0x1740/0x1740 [ 197.479768][T10182] release_sock+0xb4/0x1b0 [ 197.483887][T10182] sk_stream_wait_memory+0x608/0xed0 [ 197.494114][T10182] ? sk_stream_wait_connect+0x6a0/0x6a0 [ 197.499715][T10182] ? __init_waitqueue_head+0x110/0x110 [ 197.504317][T10182] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 197.514548][T10182] ? copy_page_from_iter+0x5f2/0x870 [ 197.519841][T10182] mptcp_sendmsg+0xd87/0x27b0 [ 197.529896][T10182] ? mptcp_release_cb+0x330/0x330 [ 197.535073][T10182] ? aa_sk_perm+0x316/0xaa0 [ 197.539737][T10182] ? aa_af_perm+0x230/0x230 [ 197.545291][T10182] ? __fget_files+0x288/0x3d0 [ 197.549547][T10182] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 197.559726][T10182] inet_sendmsg+0x99/0xe0 [ 197.565716][T10182] ? inet_send_prepare+0x4d0/0x4d0 [ 197.569769][T10182] sock_sendmsg+0xcf/0x120 [ 197.575890][T10182] __sys_sendto+0x21c/0x320 [ 197.581595][T10182] ? __ia32_sys_getpeername+0xb0/0xb0 [ 197.586168][T10182] ? _copy_to_user+0xdc/0x150 [ 197.589605][T10182] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 197.600973][T10182] ? put_old_timespec32+0x101/0x1f0 [ 197.606609][T10182] ? get_old_timespec32+0x1f0/0x1f0 [ 197.609724][T10182] ? __ia32_sys_futex_time32+0x32a/0x530 [ 197.621095][T10182] __ia32_sys_sendto+0xdb/0x1b0 [ 197.629608][T10182] ? lockdep_hardirqs_on+0x79/0x100 [ 197.629608][T10182] __do_fast_syscall_32+0x56/0x80 [ 197.639742][T10182] do_fast_syscall_32+0x2f/0x70 [ 197.647678][T10182] entry_SYSENTER_compat_after_hwframe+0x4d/0x5c [ 197.649631][T10182] RIP: 0023:0xf7fbb549 [ 197.659812][T10182] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 eb 0d 90 90 90 90 90 90 90 90 90 90 90 90 [ 197.684308][T10182] RSP: 002b:00000000f55b50bc EFLAGS: 00000296 ORIG_RAX: 0000000000000171 [ 197.698930][T10182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000100 [ 197.709684][T10182] RDX: 00000000ffffffe7 RSI: 000000000000c000 RDI: 0000000000000000 [ 197.719793][T10182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 197.731130][T10182] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 197.740134][T10182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 197.750371][T10182] Kernel Offset: disabled [ 197.750371][T10182] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:33:30 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=0000000000000067 RCX=0000000000000001 RDX=0000000000000000 RSI=ffff888011d90000 RDI=0000000000000003 RBP=ffff88806c856168 RSP=ffffc9000df9fd58 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff81a5919b R11=0000000000000000 R12=0000000000000001 R13=0000000000000067 R14=ffff88801f52bb58 R15=fff0000000000fff RIP=ffffffff8172744c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5945f32740 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5945af1ec8 CR3=00000000731ca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=24242424242424242424242424242424 XMM02=00000000000000000000000000000000 XMM03=000000000000ff000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=1ffff1100418f288 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000001 RDI=ffff888020c79430 RBP=dffffc0000000000 RSP=ffffc9000d3d7bb8 R8 =ffff888020c79430 R9 =ffffc9000d3d7c58 R10=fffff52001a7af72 R11=0000000000000000 R12=ffff8880092944b8 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81d41cf0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fc532526330 CR3=000000000b08e000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ffffffffffffffffffffffffffff0000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84144331 RDI=ffffffff8fb0ad40 RBP=ffffffff8fb0ad00 RSP=ffffc9000d247158 R8 =0000000000000000 R9 =0000000000000069 R10=ffffffff8414583d R11=000000000000000a R12=0000000000000069 R13=0000000000000069 R14=ffffffff8fb0ad00 R15=dffffc0000000000 RIP=ffffffff84144388 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802cc00000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020200000 CR3=0000000029ebb000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000008 XMM02=00000118000000000000000500000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=dffffc0000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=1ffff110025f359a RSI=0000000000000004 RDI=ffff888012f9acd4 RBP=ffff888012f9a300 RSP=ffffc90001557518 R8 =0000000000000001 R9 =00000000000e00a0 R10=0000000000000028 R11=0000000000000000 R12=ffff888012f9acb0 R13=0000000000000000 R14=ffff888012f9b4c0 R15=0000000000060000 RIP=ffffffff81582fb7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c000033c90 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000041dfc0 CR3=00000000205b8000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a29307830202c327830202c5d7d7d XMM01=697475636578652039323a33333a3531 XMM02=30303030303278302874656b636f7320 XMM03=3d2030720a3a33206d6172676f727020 XMM04=676e697475636578652039323a33333a XMM05=697475636578652039323a33333a3531 XMM06=30303030303030303030317830202c32 XMM07=7830202c313230303030303030303030 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000