last executing test programs: 2m39.55339167s ago: executing program 0 (id=528): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r3}, 0x18) syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x80) sendmsg$TIPC_CMD_GET_BEARER_NAMES(0xffffffffffffffff, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000005800)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4000140) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f00000086c0), 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x50) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="a03700002d00010026bd7000fcdbdf250400000005000b00", @ANYRES32=r5, @ANYBLOB="81120c"], 0x37a0}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'wg2\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0xc}, @void, @eth={@empty, @random="8bc6002500", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@mpls_mc={0x8848, {[], @llc={@llc={0xd4, 0x8, "d3"}}}}}}}, 0x19) 2m37.552199651s ago: executing program 0 (id=535): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r5, {}, {0xffff}, {0xfff1, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0) 2m37.31028594s ago: executing program 0 (id=539): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000080)=0x20, &(0x7f00000001c0)=r1}, 0x20) 2m37.186240241s ago: executing program 0 (id=542): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, 0x0, 0x0) 2m34.128295956s ago: executing program 0 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x20000010) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0xfdc6, 0x8001, 0x6, 0x7fee}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xd, 0x7}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m33.054955622s ago: executing program 0 (id=555): socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x24060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 2m17.445497567s ago: executing program 32 (id=555): socket$isdn_base(0x22, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x4000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, 0x0, 0x0) unshare(0x62040200) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r3}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'gre0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r4}, 0x38) shutdown(0xffffffffffffffff, 0x1) recvmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x3db66e6159adff3, 0x10100, 0x0) unshare(0x24060400) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000006e0000006e0000000b000000040000000600000f020000000500000005000000070000000200000006000000000000000100000001000100010100000300000006000000070000000100000009000002000000000000000005000000050000006edd02"], 0x0, 0x93, 0x0, 0x0, 0x1}, 0x28) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x5) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x7ff, 0x2}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x1, 0xb, 0x7fffffff, 0x2}, 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x24}}, 0x0) 7.439320351s ago: executing program 3 (id=1422): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a03f0fff0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c8500000061000000b70000004000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 6.373791757s ago: executing program 1 (id=1429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r6, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r7}, 0x10) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r10, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 6.146402146s ago: executing program 3 (id=1430): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) close(r0) 5.0966989s ago: executing program 3 (id=1433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000002140)=ANY=[]) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) 3.296557765s ago: executing program 1 (id=1436): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0) 3.159347076s ago: executing program 4 (id=1437): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="4700000001003f", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 3.157850706s ago: executing program 3 (id=1438): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) unshare(0x62040200) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r3, 0x0, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x3) r8 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 2.867503349s ago: executing program 4 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000040)='percpu_alloc_percpu\x00'}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f, 0x0, 0xffffffffffffffff, 0x400000}, 0x50) dup3(0xffffffffffffffff, r3, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000b80)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000080)) close(r5) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) 1.450313204s ago: executing program 1 (id=1440): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 1.419230366s ago: executing program 4 (id=1441): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) close(r0) 1.166749036s ago: executing program 4 (id=1442): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="f1e6ffffffffddffffff1200000008000300", @ANYRES32=r1, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 1.1185735s ago: executing program 2 (id=1443): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) 1.053227195s ago: executing program 4 (id=1444): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r6, &(0x7f0000000040)={{0x3, @bcast, 0x1}, [@null={0x40, 0x10}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000040)={0x2, 0x206, 0x8ce, 0xf44, r7}, 0x10) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x77359400}, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r9 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r9, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) connect$llc(r9, &(0x7f0000000240)={0x1a, 0x20, 0x0, 0x9, 0x2, 0x0, @random='\x00\x00\x00\x00\x00\a'}, 0x10) r10 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x6, 0x81, 0x5}, 0x10) connect$llc(r10, &(0x7f0000000340)={0x1a, 0x322, 0x0, 0x0, 0x4, 0x90, @random}, 0x10) syz_init_net_socket$llc(0x1a, 0x801, 0x0) 981.181191ms ago: executing program 2 (id=1445): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000500000e00000000000000008500000027000000850000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 870.60781ms ago: executing program 2 (id=1446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood\x00', 0x9) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000280)="32780f64398323756224d03ac5cb38", 0xf, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x3}, 0x1c) shutdown(r0, 0x1) 844.720522ms ago: executing program 2 (id=1447): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="4700000001003f", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$kcm(r0, 0x0, 0x0) 711.503063ms ago: executing program 2 (id=1448): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x11}, 0x40) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0xe, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x2, 0x18001, 0x83}}}}]}, 0x44}}, 0x0) 514.689648ms ago: executing program 3 (id=1449): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x110, 0x6, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 462.655223ms ago: executing program 1 (id=1450): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7fffffff, 0x7, 0x4, 0x1000000, 0x800, 0x8, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x1, 0x8, 0x3f9a, 0x0, 0x8000000010001, 0x3}, 0x0, 0x0) close(r0) 419.405346ms ago: executing program 2 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_REAPURBNDELAY(r3, 0x4004550d, 0x0) 331.585853ms ago: executing program 3 (id=1452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x24, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x9}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 234.567981ms ago: executing program 1 (id=1453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r1, @ANYBLOB="f1e6ffffffffddffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="04001300060012000400000006001000fa0000000a000600ffffffffffff00000500130100"], 0x44}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8050) 206.717524ms ago: executing program 1 (id=1454): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) close(0x3) 0s ago: executing program 4 (id=1455): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000500000e00000000000000008500000027000000850000005000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 82.428204][ T5776] cgroup: Unknown subsys name 'net' [ 82.617470][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.327215][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.113268][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.121640][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.130417][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.139490][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.147992][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.156943][ T5791] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.164845][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.174762][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.183729][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.210192][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.230477][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.232333][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.239735][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.253581][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.255445][ T5803] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.262881][ T5797] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.268927][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.275011][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.301319][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.309318][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.317473][ T5801] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.325218][ T5801] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.340422][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.349037][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.827715][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 86.950522][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 86.970374][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.039476][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 87.105487][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.118098][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.127359][ T5786] bridge_slave_0: entered allmulticast mode [ 87.138895][ T5786] bridge_slave_0: entered promiscuous mode [ 87.150451][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.161530][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.170685][ T5786] bridge_slave_1: entered allmulticast mode [ 87.183474][ T5786] bridge_slave_1: entered promiscuous mode [ 87.335792][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.348875][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.477618][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.488109][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.499186][ T5789] bridge_slave_0: entered allmulticast mode [ 87.508400][ T5789] bridge_slave_0: entered promiscuous mode [ 87.545658][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.553096][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.560321][ T5785] bridge_slave_0: entered allmulticast mode [ 87.568652][ T5785] bridge_slave_0: entered promiscuous mode [ 87.640218][ T5786] team0: Port device team_slave_0 added [ 87.647388][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.656280][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.664789][ T5789] bridge_slave_1: entered allmulticast mode [ 87.672913][ T5789] bridge_slave_1: entered promiscuous mode [ 87.711719][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.719301][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.727235][ T5785] bridge_slave_1: entered allmulticast mode [ 87.734312][ T5785] bridge_slave_1: entered promiscuous mode [ 87.757070][ T5786] team0: Port device team_slave_1 added [ 87.779823][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.787148][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.794587][ T5788] bridge_slave_0: entered allmulticast mode [ 87.801641][ T5788] bridge_slave_0: entered promiscuous mode [ 87.839417][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.849098][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.857037][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.864921][ T5788] bridge_slave_1: entered allmulticast mode [ 87.872045][ T5788] bridge_slave_1: entered promiscuous mode [ 87.881116][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.905601][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.912818][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.939262][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.954836][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.008634][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.039554][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.047043][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.073896][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.100655][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.131594][ T5785] team0: Port device team_slave_0 added [ 88.141478][ T5789] team0: Port device team_slave_0 added [ 88.150353][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.194546][ T5788] team0: Port device team_slave_0 added [ 88.203207][ T5785] team0: Port device team_slave_1 added [ 88.211105][ T5789] team0: Port device team_slave_1 added [ 88.244333][ T5788] team0: Port device team_slave_1 added [ 88.250907][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.258290][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.284871][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.303088][ T5795] Bluetooth: hci2: command tx timeout [ 88.303106][ T50] Bluetooth: hci0: command tx timeout [ 88.358701][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.366551][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.392797][ T5795] Bluetooth: hci3: command tx timeout [ 88.392873][ T50] Bluetooth: hci1: command tx timeout [ 88.399528][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.440698][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.447921][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.474097][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.487057][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.494156][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.520239][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.539373][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.546426][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.572953][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.589212][ T5786] hsr_slave_0: entered promiscuous mode [ 88.596269][ T5786] hsr_slave_1: entered promiscuous mode [ 88.631459][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.638667][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.665066][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.743616][ T5788] hsr_slave_0: entered promiscuous mode [ 88.750198][ T5788] hsr_slave_1: entered promiscuous mode [ 88.757252][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.765913][ T5788] Cannot create hsr debugfs directory [ 88.856812][ T5789] hsr_slave_0: entered promiscuous mode [ 88.863913][ T5789] hsr_slave_1: entered promiscuous mode [ 88.870383][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.878098][ T5789] Cannot create hsr debugfs directory [ 88.910952][ T5785] hsr_slave_0: entered promiscuous mode [ 88.918422][ T5785] hsr_slave_1: entered promiscuous mode [ 88.925241][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.933829][ T5785] Cannot create hsr debugfs directory [ 89.325691][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.338934][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.369643][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.398970][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.445270][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.487409][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.498806][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.525004][ T5789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.541330][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.580726][ T5789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.594989][ T5789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.619460][ T5789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.676777][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.697946][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.711753][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.736185][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.821753][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.913302][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.954842][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.962351][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.997167][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.004426][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.069657][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.081438][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.121028][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.162417][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.169617][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.190221][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.228239][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.275188][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.282475][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.298445][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.306145][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.325747][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.360925][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.368257][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.380134][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.387580][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.398808][ T50] Bluetooth: hci2: command tx timeout [ 90.402717][ T5795] Bluetooth: hci0: command tx timeout [ 90.464088][ T5795] Bluetooth: hci3: command tx timeout [ 90.464097][ T50] Bluetooth: hci1: command tx timeout [ 90.477781][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.485169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.647962][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.801104][ T5786] veth0_vlan: entered promiscuous mode [ 90.849045][ T5786] veth1_vlan: entered promiscuous mode [ 90.947965][ T5786] veth0_macvtap: entered promiscuous mode [ 90.985671][ T5786] veth1_macvtap: entered promiscuous mode [ 91.067887][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.086117][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.144942][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.160639][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.208581][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.218758][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.227994][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.236917][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.276660][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.304357][ T5785] veth0_vlan: entered promiscuous mode [ 91.375649][ T5785] veth1_vlan: entered promiscuous mode [ 91.431680][ T5788] veth0_vlan: entered promiscuous mode [ 91.471744][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.488505][ T5789] veth0_vlan: entered promiscuous mode [ 91.496634][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.529361][ T5788] veth1_vlan: entered promiscuous mode [ 91.568556][ T5789] veth1_vlan: entered promiscuous mode [ 91.604412][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.614556][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.630311][ T5788] veth0_macvtap: entered promiscuous mode [ 91.646639][ T5785] veth0_macvtap: entered promiscuous mode [ 91.659423][ T5785] veth1_macvtap: entered promiscuous mode [ 91.687575][ T5788] veth1_macvtap: entered promiscuous mode [ 91.716438][ T5789] veth0_macvtap: entered promiscuous mode [ 91.746981][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.758376][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.771828][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.789570][ T5789] veth1_macvtap: entered promiscuous mode [ 91.816178][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.839363][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.866542][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.897388][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.925429][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.955033][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.966553][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.979331][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.017024][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.028871][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.039494][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.050753][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.065272][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.077933][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.087461][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.092619][ T5882] syz.1.5 uses obsolete (PF_INET,SOCK_PACKET) [ 92.097210][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.112856][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.130325][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.139949][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.150236][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.159722][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.206347][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.234990][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.248591][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.249822][ T23] cfg80211: failed to load regulatory.db [ 92.266864][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.277049][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.288426][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.300560][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.386726][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.403098][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.418867][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.433872][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.451298][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.462385][ T5795] Bluetooth: hci0: command tx timeout [ 92.463016][ T50] Bluetooth: hci2: command tx timeout [ 92.469313][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.485962][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.540118][ T5789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.549709][ T50] Bluetooth: hci3: command tx timeout [ 92.549723][ T5795] Bluetooth: hci1: command tx timeout [ 92.562365][ T5789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.571312][ T5789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.582750][ T5789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.660624][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.691229][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.775774][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.791794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.821582][ T5891] syzkaller0: entered promiscuous mode [ 92.827830][ T5891] syzkaller0: entered allmulticast mode [ 92.891772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.905661][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.937560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.946598][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.020520][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.046680][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.094972][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.145517][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.865280][ T5906] netlink: 292 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.874332][ T5909] syzkaller0: entered promiscuous mode [ 93.928675][ T5909] syzkaller0: entered allmulticast mode [ 94.243555][ T5919] syz.0.11[5919]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.965990][ T50] Bluetooth: hci2: command tx timeout [ 94.971499][ T50] Bluetooth: hci0: command tx timeout [ 94.977268][ T50] Bluetooth: hci3: command tx timeout [ 94.982772][ T50] Bluetooth: hci1: command tx timeout [ 95.138954][ T5919] loop0: detected capacity change from 0 to 32768 [ 95.162890][ T5919] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.11 (5919) [ 95.208664][ T5919] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.219343][ T5919] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 95.229401][ T5919] BTRFS info (device loop0): setting nodatacow, compression disabled [ 95.237952][ T5919] BTRFS info (device loop0): max_inline at 0 [ 95.244354][ T5919] BTRFS info (device loop0): turning on async discard [ 95.251182][ T5919] BTRFS info (device loop0): turning off barriers [ 95.257770][ T5919] BTRFS info (device loop0): turning on flush-on-commit [ 95.266230][ T5919] BTRFS info (device loop0): enabling disk space caching [ 95.273709][ T5919] BTRFS info (device loop0): turning on barriers [ 95.280137][ T5919] BTRFS info (device loop0): force clearing of disk cache [ 95.287395][ T5919] BTRFS info (device loop0): enabling ssd optimizations [ 95.294506][ T5919] BTRFS info (device loop0): turning off barriers [ 95.301080][ T5919] BTRFS info (device loop0): max_inline at 8 [ 95.307729][ T5919] BTRFS error (device loop0): unrecognized mount option 'dont_measure' [ 95.324906][ T5919] BTRFS error (device loop0): open_ctree failed: -22 [ 95.607574][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5787) [ 95.643868][ T5929] Zero length message leads to an empty skb [ 96.677936][ T5953] Bluetooth: MGMT ver 1.22 [ 96.690516][ T5953] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 96.908903][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.918430][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.364298][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.397845][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.599634][ T5932] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.608869][ T5932] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.618514][ T5932] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.632720][ T5932] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.743491][ T50] Bluetooth: hci3: command tx timeout [ 97.837290][ T5932] syz.1.14 (5932) used greatest stack depth: 19984 bytes left [ 97.969115][ T5985] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 97.975404][ T5962] bridge_slave_0: left allmulticast mode [ 97.976369][ T5985] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 97.991778][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.018008][ T5962] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.123171][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 98.379945][ T5995] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 98.391612][ T5996] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 98.464975][ T5996] team0: Port device dummy0 added [ 98.514220][ T5999] netlink: 'syz.3.28': attribute type 10 has an invalid length. [ 98.564354][ T5999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.570378][ T6003] sctp: [Deprecated]: syz.2.32 (pid 6003) Use of int in max_burst socket option deprecated. [ 98.570378][ T6003] Use struct sctp_assoc_value instead [ 98.631347][ T5999] team0: Failed to send options change via netlink (err -105) [ 98.648648][ T5999] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 98.660275][ T5999] team0: Port device dummy0 removed [ 98.676706][ T5999] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 98.958076][ T6014] bridge_slave_0: left allmulticast mode [ 98.965563][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.978144][ T6014] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.002862][ T6018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 99.197796][ T5996] syz.3.28 (5996) used greatest stack depth: 19344 bytes left [ 99.274754][ T6027] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 99.312627][ T6027] netlink: 14 bytes leftover after parsing attributes in process `syz.2.39'. [ 99.329166][ T6029] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 99.561040][ T6027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.584342][ T6027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.599436][ T6027] bond0 (unregistering): Released all slaves [ 99.622636][ T6033] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 99.928999][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 100.117281][ T6044] bridge_slave_0: left allmulticast mode [ 100.146687][ T6048] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 100.167450][ T6044] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.205283][ T6044] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 100.529692][ T6060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.52'. [ 100.623879][ T6067] netlink: 3 bytes leftover after parsing attributes in process `syz.1.50'. [ 101.098856][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 101.335296][ T6083] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 101.375016][ T6080] bridge_slave_0: left allmulticast mode [ 101.381386][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.406042][ T6080] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 101.717709][ T6092] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 101.754751][ T6092] netlink: 14 bytes leftover after parsing attributes in process `syz.3.63'. [ 102.292738][ T6092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.321475][ T6113] netlink: 3 bytes leftover after parsing attributes in process `syz.2.69'. [ 102.365885][ T6092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.425869][ T6092] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 102.468506][ T6092] bond0 (unregistering): Released all slaves [ 102.641048][ T6117] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 103.820162][ T6142] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 103.837327][ T6142] netlink: 14 bytes leftover after parsing attributes in process `syz.1.80'. [ 104.144345][ T6142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.160444][ T6142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.173410][ T6142] bond0 (unregistering): Released all slaves [ 104.221533][ T6149] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.243114][ T6150] syz_tun: entered allmulticast mode [ 104.290602][ T6153] dvmrp8: entered allmulticast mode [ 104.617255][ T6147] syz_tun: left allmulticast mode [ 104.658118][ T6147] dvmrp8: left allmulticast mode [ 106.180794][ T6185] loop0: detected capacity change from 0 to 32768 [ 106.233109][ T6185] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.243570][ T6185] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 106.252411][ T6185] BTRFS info (device loop0): setting nodatacow, compression disabled [ 106.260576][ T6185] BTRFS info (device loop0): max_inline at 0 [ 106.266753][ T6185] BTRFS info (device loop0): turning on async discard [ 106.273657][ T6185] BTRFS info (device loop0): turning off barriers [ 106.280124][ T6185] BTRFS info (device loop0): turning on flush-on-commit [ 106.287188][ T6185] BTRFS info (device loop0): enabling disk space caching [ 106.294533][ T6185] BTRFS info (device loop0): turning on barriers [ 106.300914][ T6185] BTRFS info (device loop0): force clearing of disk cache [ 106.312330][ T6185] BTRFS info (device loop0): enabling ssd optimizations [ 106.319340][ T6185] BTRFS info (device loop0): turning off barriers [ 106.327087][ T6185] BTRFS info (device loop0): max_inline at 8 [ 106.333230][ T6185] BTRFS error (device loop0): unrecognized mount option 'dont_measure' [ 106.342697][ T6185] BTRFS error (device loop0): open_ctree failed: -22 [ 106.407214][ T6192] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 106.548601][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (5787) [ 106.616577][ T6194] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 106.710555][ T6198] netlink: 14 bytes leftover after parsing attributes in process `syz.2.95'. [ 106.808177][ T6202] netlink: 68 bytes leftover after parsing attributes in process `syz.0.96'. [ 107.926939][ T6229] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 109.201300][ T6234] loop2: detected capacity change from 0 to 32768 [ 109.207847][ C1] sched: RT throttling activated [ 109.232153][ T6234] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.242583][ T6234] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 109.251346][ T6234] BTRFS info (device loop2): setting nodatacow, compression disabled [ 109.259639][ T6234] BTRFS info (device loop2): max_inline at 0 [ 109.265811][ T6234] BTRFS info (device loop2): turning on async discard [ 109.272757][ T6234] BTRFS info (device loop2): turning off barriers [ 109.273194][ T6238] netlink: 3 bytes leftover after parsing attributes in process `syz.1.107'. [ 109.279204][ T6234] BTRFS info (device loop2): turning on flush-on-commit [ 109.279255][ T6234] BTRFS info (device loop2): enabling disk space caching [ 109.303584][ T6234] BTRFS info (device loop2): turning on barriers [ 109.309968][ T6234] BTRFS info (device loop2): force clearing of disk cache [ 109.317297][ T6234] BTRFS info (device loop2): enabling ssd optimizations [ 109.324410][ T6234] BTRFS info (device loop2): turning off barriers [ 109.330919][ T6234] BTRFS info (device loop2): max_inline at 8 [ 109.337200][ T6234] BTRFS error (device loop2): unrecognized mount option 'dont_measure' [ 109.359702][ T6234] BTRFS error (device loop2): open_ctree failed: -22 [ 109.523717][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5787) [ 109.763284][ T6243] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 109.833892][ T6243] netlink: 14 bytes leftover after parsing attributes in process `syz.0.108'. [ 109.873951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.883073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 110.111202][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.210998][ T6250] af_packet: tpacket_rcv: packet too big, clamped from 65340 to 3952. macoff=96 [ 110.222452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 110.338621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.418509][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.964198][ T6243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.008932][ T6243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.029618][ T6243] bond0 (unregistering): Released all slaves [ 111.253131][ T6264] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 111.280422][ T6268] warning: `syz.0.117' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.102643][ T6285] netlink: 3 bytes leftover after parsing attributes in process `syz.0.119'. [ 112.292387][ T6277] loop3: detected capacity change from 0 to 32768 [ 112.328515][ T6277] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 112.339025][ T6277] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 112.347954][ T6277] BTRFS info (device loop3): setting nodatacow, compression disabled [ 112.356197][ T6277] BTRFS info (device loop3): max_inline at 0 [ 112.362310][ T6277] BTRFS info (device loop3): turning on async discard [ 112.369913][ T6277] BTRFS info (device loop3): turning off barriers [ 112.376546][ T6277] BTRFS info (device loop3): turning on flush-on-commit [ 112.383694][ T6277] BTRFS info (device loop3): enabling disk space caching [ 112.390727][ T6277] BTRFS info (device loop3): turning on barriers [ 112.397792][ T6277] BTRFS info (device loop3): force clearing of disk cache [ 112.405121][ T6277] BTRFS info (device loop3): enabling ssd optimizations [ 112.412279][ T6277] BTRFS info (device loop3): turning off barriers [ 112.419310][ T6277] BTRFS info (device loop3): max_inline at 8 [ 112.425405][ T6277] BTRFS error (device loop3): unrecognized mount option 'dont_measure' [ 112.443076][ T6277] BTRFS error (device loop3): open_ctree failed: -22 [ 112.720453][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5787) [ 112.724067][ T6288] loop2: detected capacity change from 0 to 1024 [ 112.753555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.763378][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.771838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.781081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 113.168460][ T6299] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 113.208000][ T6299] netlink: 14 bytes leftover after parsing attributes in process `syz.3.125'. [ 113.266095][ T6301] netlink: 12 bytes leftover after parsing attributes in process `syz.1.126'. [ 113.571804][ T6305] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 113.936732][ T6305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.026685][ T6308] bond0: (slave geneve2): making interface the new active one [ 114.050412][ T6308] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 114.930120][ T6325] netlink: 3 bytes leftover after parsing attributes in process `syz.3.133'. [ 115.235610][ T6326] loop0: detected capacity change from 0 to 32768 [ 115.269378][ T6326] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.279723][ T6326] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.289458][ T6326] BTRFS info (device loop0): setting nodatacow, compression disabled [ 115.297833][ T6326] BTRFS info (device loop0): max_inline at 0 [ 115.303948][ T6326] BTRFS info (device loop0): turning on async discard [ 115.310852][ T6326] BTRFS info (device loop0): turning off barriers [ 115.318048][ T6326] BTRFS info (device loop0): turning on flush-on-commit [ 115.325161][ T6326] BTRFS info (device loop0): enabling disk space caching [ 115.332304][ T6326] BTRFS info (device loop0): turning on barriers [ 115.339898][ T6326] BTRFS info (device loop0): force clearing of disk cache [ 115.347185][ T6326] BTRFS info (device loop0): enabling ssd optimizations [ 115.354349][ T6326] BTRFS info (device loop0): turning off barriers [ 115.360950][ T6326] BTRFS info (device loop0): max_inline at 8 [ 115.367082][ T6326] BTRFS error (device loop0): unrecognized mount option 'dont_measure' [ 115.376626][ T6326] BTRFS error (device loop0): open_ctree failed: -22 [ 115.412130][ T6332] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 115.696211][ T6190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (6190) [ 116.262667][ T6346] loop3: detected capacity change from 0 to 1024 [ 116.528083][ T6360] netlink: 3 bytes leftover after parsing attributes in process `syz.1.143'. [ 116.903336][ T6366] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 118.281252][ T6372] loop2: detected capacity change from 0 to 32768 [ 118.307779][ T6372] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 118.318079][ T6372] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 118.326867][ T6372] BTRFS info (device loop2): setting nodatacow, compression disabled [ 118.335128][ T6372] BTRFS info (device loop2): max_inline at 0 [ 118.341170][ T6372] BTRFS info (device loop2): turning on async discard [ 118.348079][ T6372] BTRFS info (device loop2): turning off barriers [ 118.354576][ T6372] BTRFS info (device loop2): turning on flush-on-commit [ 118.361537][ T6372] BTRFS info (device loop2): enabling disk space caching [ 118.368651][ T6372] BTRFS info (device loop2): turning on barriers [ 118.375122][ T6372] BTRFS info (device loop2): force clearing of disk cache [ 118.382343][ T6372] BTRFS info (device loop2): enabling ssd optimizations [ 118.389390][ T6372] BTRFS info (device loop2): turning off barriers [ 118.396056][ T6372] BTRFS info (device loop2): max_inline at 8 [ 118.402287][ T6372] BTRFS error (device loop2): unrecognized mount option 'dont_measure' [ 118.413250][ T6372] BTRFS error (device loop2): open_ctree failed: -22 [ 118.489462][ T6374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.148'. [ 118.904782][ T5787] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (5787) [ 118.938157][ T6387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.151'. [ 119.317585][ T6395] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 119.668185][ T6403] netlink: 16 bytes leftover after parsing attributes in process `syz.3.158'. [ 119.757358][ T6406] netlink: 3 bytes leftover after parsing attributes in process `syz.0.157'. [ 120.849528][ T6419] syzkaller0: entered promiscuous mode [ 120.883246][ T6419] syzkaller0: entered allmulticast mode [ 121.404963][ T6440] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 122.998560][ T6440] netlink: 14 bytes leftover after parsing attributes in process `syz.2.165'. [ 123.138380][ T6446] netlink: 16 bytes leftover after parsing attributes in process `syz.1.168'. [ 123.472651][ T6458] tipc: Started in network mode [ 123.484001][ T6458] tipc: Node identity 12fb23982746, cluster identity 4711 [ 123.500832][ T6458] tipc: Enabled bearer , priority 0 [ 123.517770][ T6458] syzkaller0: entered promiscuous mode [ 123.523698][ T6458] syzkaller0: entered allmulticast mode [ 123.561000][ T6458] tipc: Resetting bearer [ 123.597166][ T6457] tipc: Resetting bearer [ 123.661586][ T6457] tipc: Disabling bearer [ 123.688254][ T6465] 9pnet_fd: Insufficient options for proto=fd [ 123.736217][ T6465] loop2: detected capacity change from 0 to 1024 [ 123.743565][ T6467] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.931366][ T6469] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 123.996959][ T6469] netlink: 14 bytes leftover after parsing attributes in process `syz.1.178'. [ 124.531477][ T6484] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 124.797846][ T6495] netlink: 3 bytes leftover after parsing attributes in process `syz.1.185'. [ 124.819251][ T6496] Bluetooth: MGMT ver 1.22 [ 124.890224][ T6496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.188'. [ 125.280238][ T6499] netlink: 32 bytes leftover after parsing attributes in process `syz.0.189'. [ 125.289623][ T6499] veth1: entered promiscuous mode [ 125.295580][ T6499] veth1: entered allmulticast mode [ 125.303383][ T6499] netlink: 'syz.0.189': attribute type 8 has an invalid length. [ 125.572751][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.190'. [ 125.616843][ T6503] syzkaller0: entered promiscuous mode [ 125.625072][ T6503] syzkaller0: entered allmulticast mode [ 125.817693][ T6507] tipc: Enabling of bearer rejected, failed to enable media [ 125.833773][ T6507] syzkaller0: entered promiscuous mode [ 125.839696][ T6507] syzkaller0: entered allmulticast mode [ 126.002625][ T6514] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 126.441414][ T6527] netlink: 3 bytes leftover after parsing attributes in process `syz.0.200'. [ 126.462479][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.202'. [ 126.645799][ T6532] 9pnet_fd: Insufficient options for proto=fd [ 126.756780][ T6532] loop2: detected capacity change from 0 to 1024 [ 126.777619][ T6535] syzkaller0: entered promiscuous mode [ 126.802707][ T6535] syzkaller0: entered allmulticast mode [ 127.200526][ T6542] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 127.447698][ T6545] netlink: 8 bytes leftover after parsing attributes in process `syz.0.208'. [ 127.459896][ T6548] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 128.485458][ T6569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 128.739715][ T5798] IPVS: starting estimator thread 0... [ 128.834270][ T6572] IPVS: using max 18 ests per chain, 43200 per kthread [ 128.857014][ T6574] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.550252][ T6596] 9pnet_fd: Insufficient options for proto=fd [ 129.560431][ T6597] __nla_validate_parse: 1 callbacks suppressed [ 129.560443][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 129.616526][ T6596] loop0: detected capacity change from 0 to 1024 [ 129.827458][ T6602] netlink: 40 bytes leftover after parsing attributes in process `syz.2.231'. [ 129.907855][ T6602] netlink: 'syz.2.231': attribute type 64 has an invalid length. [ 130.454011][ T6609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 131.177789][ T6621] trusted_key: encrypted_key: insufficient parameters specified [ 131.182413][ T6622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.346083][ T6624] Invalid ELF header magic: != ELF [ 131.860958][ T6622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.680763][ T6631] tipc: Started in network mode [ 132.685890][ T6631] tipc: Node identity , cluster identity 4711 [ 132.692581][ T6631] tipc: Failed to obtain node identity [ 132.698399][ T6631] tipc: Enabling of bearer rejected, failed to enable media [ 132.740112][ T6631] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 132.770539][ T6631] syzkaller0: entered promiscuous mode [ 132.793213][ T6631] syzkaller0: entered allmulticast mode [ 133.194411][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.201142][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.350122][ T6652] netlink: 3 bytes leftover after parsing attributes in process `syz.3.247'. [ 134.869486][ T6654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 134.891332][ T6654] vlan3: entered promiscuous mode [ 134.901454][ T6654] batadv0: entered promiscuous mode [ 135.184766][ T6669] trusted_key: encrypted_key: insufficient parameters specified [ 135.281027][ T6670] Invalid ELF header magic: != ELF [ 136.481874][ T6691] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 136.532211][ T6691] netlink: 14 bytes leftover after parsing attributes in process `syz.1.259'. [ 136.746565][ T6701] trusted_key: encrypted_key: insufficient parameters specified [ 136.766093][ T6699] Driver unsupported XDP return value 0 on prog (id 83) dev N/A, expect packet loss! [ 136.851892][ T6704] Invalid ELF header magic: != ELF [ 138.998737][ T6730] netlink: 3 bytes leftover after parsing attributes in process `syz.1.271'. [ 139.061514][ T6729] tipc: Started in network mode [ 139.084421][ T6729] tipc: Node identity 3a1724c152a, cluster identity 4711 [ 139.102418][ T6729] tipc: Enabled bearer , priority 0 [ 139.131154][ T6722] tipc: Resetting bearer [ 140.124746][ T5942] tipc: Node number set to 1756832961 [ 141.276915][ T6722] tipc: Disabling bearer [ 141.417607][ T6758] syz.0.280[6758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.417869][ T6758] syz.0.280[6758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.627200][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.283'. [ 142.062636][ T6782] syz.3.292[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.062893][ T6782] syz.3.292[6782] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.090115][ T6780] syzkaller0: entered promiscuous mode [ 142.110921][ T6780] syzkaller0: entered allmulticast mode [ 142.408724][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 142.447750][ T6790] tipc: Started in network mode [ 142.457735][ T6790] tipc: Node identity 323fe9893055, cluster identity 4711 [ 142.492354][ T6790] tipc: Enabled bearer , priority 0 [ 142.512672][ T6795] syzkaller0: entered promiscuous mode [ 142.573128][ T6795] syzkaller0: entered allmulticast mode [ 142.600148][ T6790] tipc: Resetting bearer [ 142.632364][ T6789] tipc: Resetting bearer [ 142.671147][ T6789] tipc: Disabling bearer [ 142.886222][ T6805] syz.1.302[6805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.886475][ T6805] syz.1.302[6805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.493165][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 143.619616][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.309'. [ 143.815784][ T6832] syz.1.312[6832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.816036][ T6832] syz.1.312[6832] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.214778][ T6842] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 144.253932][ T6842] syzkaller0: entered promiscuous mode [ 144.259588][ T6842] syzkaller0: entered allmulticast mode [ 144.267375][ T6844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 144.287054][ T6844] vlan2: entered promiscuous mode [ 144.292961][ T6844] gretap0: entered promiscuous mode [ 144.646620][ T6854] syz.1.321[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.646881][ T6854] syz.1.321[6854] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.736190][ T6857] ieee802154 phy0 wpan0: encryption failed: -22 [ 144.768304][ T6857] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.536936][ T6872] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 146.660469][ T6878] syz.3.330[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.660741][ T6878] syz.3.330[6878] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.474973][ T6905] syz.0.341[6905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.514190][ T6905] syz.0.341[6905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 147.761275][ T6910] tipc: Enabled bearer , priority 0 [ 147.786980][ T6910] syzkaller0: entered promiscuous mode [ 147.794091][ T6910] syzkaller0: entered allmulticast mode [ 147.822091][ T6910] tipc: Resetting bearer [ 147.843909][ T6908] tipc: Resetting bearer [ 147.945746][ T6908] tipc: Disabling bearer [ 148.219722][ T6924] netlink: 292 bytes leftover after parsing attributes in process `syz.0.347'. [ 148.719138][ T6937] syz.1.352[6937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.719397][ T6937] syz.1.352[6937] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.166049][ T6949] tipc: Enabled bearer , priority 0 [ 149.216899][ T6949] syzkaller0: entered promiscuous mode [ 149.233331][ T6949] syzkaller0: entered allmulticast mode [ 149.271255][ T6949] tipc: Resetting bearer [ 149.281042][ T6948] tipc: Resetting bearer [ 149.341741][ T6948] tipc: Disabling bearer [ 149.741931][ T6965] netlink: 28 bytes leftover after parsing attributes in process `syz.0.361'. [ 149.778865][ T6967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.362'. [ 149.978026][ T6970] syz.0.364[6970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.978282][ T6970] syz.0.364[6970] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 150.192612][ T6980] netlink: 292 bytes leftover after parsing attributes in process `syz.3.363'. [ 150.298203][ T6984] tipc: Started in network mode [ 150.323254][ T6984] tipc: Node identity 5e6d049a4dfa, cluster identity 4711 [ 150.331228][ T6984] tipc: Enabled bearer , priority 0 [ 150.354746][ T6987] syzkaller0: entered promiscuous mode [ 150.368479][ T6987] syzkaller0: entered allmulticast mode [ 150.395541][ T6984] tipc: Resetting bearer [ 150.416146][ T6983] tipc: Resetting bearer [ 150.447110][ T6983] tipc: Disabling bearer [ 150.723277][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.372'. [ 150.778167][ T7005] netlink: 28 bytes leftover after parsing attributes in process `syz.3.373'. [ 151.056379][ T7017] syz.2.377[7017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.056572][ T7017] syz.2.377[7017] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.413564][ T7027] tipc: Enabled bearer , priority 0 [ 151.439748][ T7027] syzkaller0: entered promiscuous mode [ 151.452584][ T7027] syzkaller0: entered allmulticast mode [ 151.502897][ T7027] tipc: Resetting bearer [ 151.524453][ T7025] tipc: Resetting bearer [ 151.557101][ T7025] tipc: Disabling bearer [ 151.578768][ T7035] netlink: 28 bytes leftover after parsing attributes in process `syz.3.384'. [ 151.778860][ T7041] syz.3.387[7041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.779109][ T7041] syz.3.387[7041] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.819622][ T7073] syz.1.398[7073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.847795][ T7073] syz.1.398[7073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.995033][ T7081] trusted_key: encrypted_key: insufficient parameters specified [ 153.111094][ T7085] Invalid ELF header magic: != ELF [ 153.929203][ T7093] syzkaller0: entered promiscuous mode [ 153.935011][ T7093] syzkaller0: entered allmulticast mode [ 154.288521][ T7105] syz.0.411[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.288794][ T7105] syz.0.411[7105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 154.313447][ T7100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 154.472365][ T7112] trusted_key: encrypted_key: insufficient parameters specified [ 154.558782][ T7113] Invalid ELF header magic: != ELF [ 155.409661][ T7120] syzkaller0: entered promiscuous mode [ 155.418142][ T7120] syzkaller0: entered allmulticast mode [ 155.538596][ T7122] syzkaller0: entered promiscuous mode [ 155.554621][ T7122] syzkaller0: entered allmulticast mode [ 155.688444][ T7129] syz.1.420[7129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.688704][ T7129] syz.1.420[7129] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.836294][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.3.422'. [ 156.110093][ T7142] trusted_key: encrypted_key: insufficient parameters specified [ 156.193546][ T7144] Invalid ELF header magic: != ELF [ 157.178752][ T7147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.427'. [ 157.211224][ T7149] syz.0.429[7149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.211480][ T7149] syz.0.429[7149] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.277583][ T7153] syzkaller0: entered promiscuous mode [ 157.300688][ T7153] syzkaller0: entered allmulticast mode [ 157.428816][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 157.680110][ T7170] trusted_key: encrypted_key: insufficient parameters specified [ 157.783329][ T7173] Invalid ELF header magic: != ELF [ 158.791379][ T7178] tipc: Enabled bearer , priority 0 [ 158.816409][ T7183] syz.3.440[7183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.816574][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.441'. [ 158.816753][ T7183] syz.3.440[7183] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 158.829924][ T7181] 8021q: VLANs not supported on caif0 [ 158.865700][ T7178] syzkaller0: entered promiscuous mode [ 158.871249][ T7178] syzkaller0: entered allmulticast mode [ 158.905575][ T7184] tipc: Resetting bearer [ 158.918772][ T7177] tipc: Resetting bearer [ 158.975593][ T7177] tipc: Disabling bearer [ 159.034453][ T7186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.442'. [ 159.065956][ T7188] syzkaller0: entered promiscuous mode [ 159.071724][ T7188] syzkaller0: entered allmulticast mode [ 159.236742][ T7194] trusted_key: encrypted_key: insufficient parameters specified [ 159.353573][ T7195] Invalid ELF header magic: != ELF [ 160.204310][ T7203] netlink: 92 bytes leftover after parsing attributes in process `syz.3.450'. [ 160.295887][ T7206] tipc: Enabled bearer , priority 0 [ 160.306070][ T7206] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 160.335860][ T7206] syzkaller0: entered promiscuous mode [ 160.341423][ T7206] syzkaller0: entered allmulticast mode [ 160.371911][ T7205] tipc: Resetting bearer [ 160.897830][ T7210] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 161.082882][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 161.363857][ T5977] tipc: Node number set to 901587864 [ 162.457658][ T7205] tipc: Disabling bearer [ 162.477283][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.0.453'. [ 162.688857][ T7233] netlink: 92 bytes leftover after parsing attributes in process `syz.2.459'. [ 162.721494][ T7235] syz.1.461[7235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.721749][ T7235] syz.1.461[7235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 162.746680][ T7238] netlink: 3 bytes leftover after parsing attributes in process `syz.0.458'. [ 163.147415][ T7247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.464'. [ 163.498732][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 163.650761][ T7260] netlink: 92 bytes leftover after parsing attributes in process `syz.3.470'. [ 163.780561][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.472'. [ 163.790843][ T7264] syz.0.471[7264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.791106][ T7264] syz.0.471[7264] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.806358][ T7263] 8021q: VLANs not supported on nlmon0 [ 163.818841][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.473'. [ 164.130393][ T7275] syzkaller0: entered promiscuous mode [ 164.141143][ T7275] syzkaller0: entered allmulticast mode [ 164.179424][ T7278] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 164.416769][ T7288] syz.0.482[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.417049][ T7288] syz.0.482[7288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.798513][ T7301] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 164.926201][ T7305] 8021q: VLANs not supported on caif0 [ 165.449774][ T7311] syz.2.492[7311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.457593][ T7311] syz.2.492[7311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.246888][ T7326] __nla_validate_parse: 6 callbacks suppressed [ 168.246905][ T7326] netlink: 36 bytes leftover after parsing attributes in process `syz.0.497'. [ 168.458597][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.500'. [ 168.482310][ T7330] 8021q: VLANs not supported on caif0 [ 168.634125][ T7338] netlink: 3 bytes leftover after parsing attributes in process `syz.0.499'. [ 168.995900][ T7349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 172.069060][ T7355] syzkaller0: entered promiscuous mode [ 172.076307][ T7355] syzkaller0: entered allmulticast mode [ 172.092685][ T7364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.507'. [ 172.537478][ T7382] netlink: 3 bytes leftover after parsing attributes in process `syz.3.513'. [ 174.229161][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.510'. [ 174.238830][ T7370] 8021q: VLANs not supported on caif0 [ 174.478251][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.516'. [ 174.627444][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.0.517'. [ 177.581250][ T7406] netlink: 36 bytes leftover after parsing attributes in process `syz.1.520'. [ 177.623802][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.522'. [ 177.634106][ T7411] 8021q: VLANs not supported on vxcan0 [ 177.779428][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.526'. [ 177.884672][ T7418] syzkaller0: entered promiscuous mode [ 177.898088][ T7418] syzkaller0: entered allmulticast mode [ 177.924640][ T7425] netlink: 3 bytes leftover after parsing attributes in process `syz.1.524'. [ 178.157927][ T7432] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.528'. [ 179.821267][ T7439] netlink: 12 bytes leftover after parsing attributes in process `syz.2.531'. [ 179.950302][ T7445] netlink: 36 bytes leftover after parsing attributes in process `syz.1.532'. [ 180.014540][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.533'. [ 180.035524][ T7447] 8021q: VLANs not supported on vxcan0 [ 180.149610][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.535'. [ 180.360132][ T7465] trusted_key: encrypted_key: insufficient parameters specified [ 180.444103][ T7468] Invalid ELF header magic: != ELF [ 180.765199][ T7467] netlink: 3 bytes leftover after parsing attributes in process `syz.3.540'. [ 181.485243][ T7472] syzkaller0: entered promiscuous mode [ 181.491185][ T7472] syzkaller0: entered allmulticast mode [ 181.498217][ T7475] netlink: 12 bytes leftover after parsing attributes in process `syz.1.543'. [ 181.653582][ T7486] netlink: 9472 bytes leftover after parsing attributes in process `syz.3.546'. [ 183.231304][ T7477] netlink: 36 bytes leftover after parsing attributes in process `syz.2.544'. [ 183.324280][ T7492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.547'. [ 183.509007][ T7500] tipc: Enabled bearer , priority 0 [ 183.521638][ T7500] syzkaller0: entered promiscuous mode [ 183.527820][ T7500] syzkaller0: entered allmulticast mode [ 183.564514][ T7503] trusted_key: encrypted_key: insufficient parameters specified [ 183.579792][ T7497] tipc: Resetting bearer [ 183.651286][ T7506] Invalid ELF header magic: != ELF [ 183.718541][ T7497] tipc: Disabling bearer [ 184.350224][ T7509] netlink: 3 bytes leftover after parsing attributes in process `syz.2.553'. [ 184.574345][ T7517] tipc: Enabled bearer , priority 0 [ 184.583768][ T7517] syzkaller0: entered promiscuous mode [ 184.589344][ T7517] syzkaller0: entered allmulticast mode [ 184.606630][ T7517] tipc: Resetting bearer [ 184.647081][ T7516] tipc: Resetting bearer [ 184.747187][ T7516] tipc: Disabling bearer [ 184.838138][ T7527] netlink: 20 bytes leftover after parsing attributes in process `syz.2.558'. [ 184.954309][ T7526] syzkaller0: entered promiscuous mode [ 184.976303][ T7526] syzkaller0: entered allmulticast mode [ 186.988391][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.559'. [ 186.997584][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 187.136117][ T7547] tipc: Enabled bearer , priority 0 [ 187.145126][ T7547] syzkaller0: entered promiscuous mode [ 187.150825][ T7547] syzkaller0: entered allmulticast mode [ 187.212098][ T7549] trusted_key: encrypted_key: insufficient parameters specified [ 187.306342][ T7546] tipc: Resetting bearer [ 187.326755][ T7552] Invalid ELF header magic: != ELF [ 187.580913][ T7546] tipc: Disabling bearer [ 188.321283][ T7556] syzkaller0: entered promiscuous mode [ 188.328994][ T7556] syzkaller0: entered allmulticast mode [ 188.404559][ T7560] syzkaller0: entered promiscuous mode [ 188.415794][ T7560] syzkaller0: entered allmulticast mode [ 190.318164][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.572'. [ 190.327622][ T7570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 190.567836][ T7576] syzkaller0: entered promiscuous mode [ 190.573537][ T7576] syzkaller0: entered allmulticast mode [ 190.614760][ T7584] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 192.427840][ T7579] tipc: Enabled bearer , priority 0 [ 192.436585][ T7582] syzkaller0: entered promiscuous mode [ 192.443540][ T7582] syzkaller0: entered allmulticast mode [ 192.468900][ T7589] tipc: Resetting bearer [ 192.488361][ T7577] tipc: Resetting bearer [ 192.541134][ T7577] tipc: Disabling bearer [ 192.557355][ T7591] trusted_key: encrypted_key: insufficient parameters specified [ 192.650099][ T7594] Invalid ELF header magic: != ELF [ 193.820871][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 193.899595][ T7611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 194.171516][ T7617] syzkaller0: entered promiscuous mode [ 194.185446][ T7617] syzkaller0: entered allmulticast mode [ 194.631789][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.639873][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.129846][ T7619] tipc: Enabled bearer , priority 0 [ 196.144240][ T7621] syzkaller0: entered promiscuous mode [ 196.149856][ T7621] syzkaller0: entered allmulticast mode [ 196.170904][ T7627] tipc: Resetting bearer [ 196.185162][ T7628] netlink: 48 bytes leftover after parsing attributes in process `syz.1.587'. [ 196.217708][ T7618] tipc: Resetting bearer [ 196.284252][ T7618] tipc: Disabling bearer [ 196.551827][ T7636] netlink: 292 bytes leftover after parsing attributes in process `syz.1.589'. [ 196.934863][ T7652] tipc: Enabled bearer , priority 0 [ 196.970649][ T7652] tipc: Resetting bearer [ 196.990691][ T7651] tipc: Disabling bearer [ 197.162162][ T7656] syzkaller0: entered promiscuous mode [ 197.168571][ T7656] syzkaller0: entered allmulticast mode [ 200.810878][ T5795] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.852140][ T5795] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.871393][ T5795] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.899996][ T5795] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.912855][ T5795] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 200.922256][ T5795] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.270645][ T7663] tipc: Enabling of bearer rejected, failed to enable media [ 201.765475][ T7694] netlink: 292 bytes leftover after parsing attributes in process `syz.1.601'. [ 201.811337][ T7696] trusted_key: encrypted_key: insufficient parameters specified [ 201.936355][ T7700] Invalid ELF header magic: != ELF [ 203.022446][ T50] Bluetooth: hci4: command tx timeout [ 203.219890][ T7678] chnl_net:caif_netlink_parms(): no params data found [ 203.336174][ T7709] tipc: Enabled bearer , priority 0 [ 203.399519][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.450877][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.458533][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.466278][ T7678] bridge_slave_0: entered allmulticast mode [ 203.475171][ T7678] bridge_slave_0: entered promiscuous mode [ 203.488833][ T7709] tipc: Resetting bearer [ 203.503669][ T7706] tipc: Disabling bearer [ 203.529007][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.551638][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.560768][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.575473][ T7678] bridge_slave_1: entered allmulticast mode [ 203.588882][ T7678] bridge_slave_1: entered promiscuous mode [ 203.667438][ T7715] syzkaller0: entered promiscuous mode [ 203.673061][ T7715] syzkaller0: entered allmulticast mode [ 203.695962][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.102226][ T50] Bluetooth: hci4: command tx timeout [ 205.849345][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.894421][ T7724] tipc: Enabling of bearer rejected, failed to enable media [ 205.932547][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.961574][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.208228][ T7678] team0: Port device team_slave_0 added [ 206.269547][ T7678] team0: Port device team_slave_1 added [ 206.385628][ T12] tipc: Left network mode [ 206.394191][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.422902][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.478320][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.507821][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.520626][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.554362][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.781625][ T7678] hsr_slave_0: entered promiscuous mode [ 206.799504][ T7678] hsr_slave_1: entered promiscuous mode [ 206.817920][ T7678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.825864][ T7678] Cannot create hsr debugfs directory [ 207.182519][ T50] Bluetooth: hci4: command tx timeout [ 207.641534][ T7784] syzkaller0: entered promiscuous mode [ 207.654592][ T7784] syzkaller0: entered allmulticast mode [ 207.703376][ T7789] tipc: Enabled bearer , priority 0 [ 209.267839][ T50] Bluetooth: hci4: command tx timeout [ 209.741230][ T7793] syzkaller0: entered promiscuous mode [ 209.748353][ T7793] syzkaller0: entered allmulticast mode [ 209.811217][ T7795] tipc: Resetting bearer [ 209.841093][ T7785] tipc: Resetting bearer [ 209.871691][ T7785] tipc: Disabling bearer [ 210.514102][ T7678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 210.587354][ T7678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 210.920417][ T7678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 210.997333][ T7678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 211.188835][ T12] hsr_slave_0: left promiscuous mode [ 211.215085][ T12] hsr_slave_1: left promiscuous mode [ 211.236017][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.263845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.284601][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.293566][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.320282][ T12] bridge_slave_1: left allmulticast mode [ 211.326857][ T12] bridge_slave_1: left promiscuous mode [ 211.338288][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.426136][ T12] veth1_vlan: left promiscuous mode [ 211.431832][ T12] veth0_vlan: left promiscuous mode [ 212.068005][ T5797] Bluetooth: hci1: command 0x0406 tx timeout [ 212.075772][ T5794] Bluetooth: hci2: command 0x0406 tx timeout [ 212.085498][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 212.180839][ T12] team0 (unregistering): Port device team_slave_1 removed [ 212.234192][ T12] team0 (unregistering): Port device team_slave_0 removed [ 213.064012][ T7861] tipc: Enabled bearer , priority 0 [ 213.079390][ T7860] tipc: Enabled bearer , priority 0 [ 213.088070][ T7860] syzkaller0: entered promiscuous mode [ 213.095411][ T7860] syzkaller0: entered allmulticast mode [ 213.125743][ T7861] syzkaller0: entered promiscuous mode [ 213.141043][ T7861] syzkaller0: entered allmulticast mode [ 213.197675][ T7861] tipc: Resetting bearer [ 213.208249][ T7860] tipc: Resetting bearer [ 213.244402][ T7857] tipc: Resetting bearer [ 213.276028][ T7857] tipc: Disabling bearer [ 213.297529][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.305251][ T7858] tipc: Resetting bearer [ 213.363427][ T7858] tipc: Disabling bearer [ 213.460134][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.507325][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.515429][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.540605][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.547887][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.314159][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.960387][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.645'. [ 214.978152][ T7921] 8021q: VLANs not supported on caif0 [ 215.097432][ T7678] veth0_vlan: entered promiscuous mode [ 215.164592][ T7678] veth1_vlan: entered promiscuous mode [ 215.300129][ T7678] veth0_macvtap: entered promiscuous mode [ 215.339191][ T7678] veth1_macvtap: entered promiscuous mode [ 215.378908][ T7933] tipc: Enabled bearer , priority 0 [ 215.405255][ T7933] syzkaller0: entered promiscuous mode [ 215.438054][ T7933] syzkaller0: entered allmulticast mode [ 215.534274][ T7933] tipc: Resetting bearer [ 215.549788][ T7937] tipc: Enabled bearer , priority 0 [ 215.584474][ T7937] syzkaller0: entered promiscuous mode [ 215.590025][ T7937] syzkaller0: entered allmulticast mode [ 215.616019][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.628877][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.646669][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.657754][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.671797][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.707589][ T7932] tipc: Resetting bearer [ 215.762646][ T7932] tipc: Disabling bearer [ 215.821892][ T7941] tipc: Resetting bearer [ 215.831677][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.856397][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.868348][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.886959][ T7678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.901919][ T7678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.914973][ T7678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.924793][ T7678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.977310][ T7936] tipc: Resetting bearer [ 216.021827][ T7936] tipc: Disabling bearer [ 216.251799][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.284852][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.358670][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.372786][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.795341][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.655'. [ 216.818571][ T7965] 8021q: VLANs not supported on caif0 [ 217.421567][ T7983] tipc: Enabled bearer , priority 0 [ 217.452262][ T7983] syzkaller0: entered promiscuous mode [ 217.462124][ T7983] syzkaller0: entered allmulticast mode [ 217.610588][ T7988] tipc: Resetting bearer [ 217.655231][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz.4.662'. [ 217.670315][ T7989] tipc: Enabled bearer , priority 0 [ 217.679217][ T7982] tipc: Resetting bearer [ 217.721528][ T7982] tipc: Disabling bearer [ 217.758338][ T7989] syzkaller0: entered promiscuous mode [ 217.764095][ T7989] syzkaller0: entered allmulticast mode [ 217.808899][ T7989] tipc: Resetting bearer [ 217.839017][ T7987] tipc: Resetting bearer [ 217.941704][ T7987] tipc: Disabling bearer [ 217.961114][ T8005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.664'. [ 217.970865][ T8005] 8021q: VLANs not supported on caif0 [ 219.173378][ T8043] tipc: Enabled bearer , priority 0 [ 219.191713][ T8043] syzkaller0: entered promiscuous mode [ 219.210968][ T8043] syzkaller0: entered allmulticast mode [ 219.271885][ T8043] tipc: Resetting bearer [ 219.283531][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.4.675'. [ 219.298434][ T8048] vlan2: entered promiscuous mode [ 219.304692][ T8048] batadv0: entered promiscuous mode [ 219.340166][ T8042] tipc: Resetting bearer [ 219.357564][ T8042] tipc: Disabling bearer [ 219.602543][ T8057] tipc: Started in network mode [ 219.613489][ T8057] tipc: Node identity 9618b9fdbc43, cluster identity 4711 [ 219.636161][ T8057] tipc: Enabled bearer , priority 0 [ 219.659981][ T8057] syzkaller0: entered promiscuous mode [ 219.679288][ T8057] syzkaller0: entered allmulticast mode [ 219.715904][ T8057] tipc: Resetting bearer [ 219.739797][ T8055] tipc: Resetting bearer [ 219.814791][ T8055] tipc: Disabling bearer [ 220.936562][ T8106] netlink: 3 bytes leftover after parsing attributes in process `syz.4.685'. [ 220.977629][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.687'. [ 221.007102][ T8108] vlan2: entered promiscuous mode [ 221.019165][ T8108] batadv0: entered promiscuous mode [ 221.318204][ T8116] tipc: Enabled bearer , priority 0 [ 221.344017][ T8116] syzkaller0: entered promiscuous mode [ 221.362904][ T8116] syzkaller0: entered allmulticast mode [ 221.410688][ T8116] tipc: Resetting bearer [ 221.428902][ T8114] tipc: Resetting bearer [ 221.503112][ T8114] tipc: Disabling bearer [ 222.139895][ T8142] tap0: tun_chr_ioctl cmd 1074025677 [ 222.156593][ T8142] tap0: linktype set to 805 [ 222.452372][ T8152] trusted_key: encrypted_key: insufficient parameters specified [ 222.550702][ T8153] Invalid ELF header magic: != ELF [ 223.745060][ T8175] netlink: 3 bytes leftover after parsing attributes in process `syz.4.699'. [ 224.991681][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 225.021906][ T8203] 8021q: VLANs not supported on caif0 [ 225.179782][ T8205] tipc: Enabled bearer , priority 0 [ 225.205327][ T8205] syzkaller0: entered promiscuous mode [ 225.232191][ T8205] syzkaller0: entered allmulticast mode [ 225.258246][ T8205] tipc: Resetting bearer [ 225.274446][ T8204] tipc: Resetting bearer [ 225.321651][ T8204] tipc: Disabling bearer [ 225.761770][ T8223] netlink: 292 bytes leftover after parsing attributes in process `syz.3.711'. [ 226.219072][ T8240] trusted_key: encrypted_key: insufficient parameters specified [ 226.322110][ T8242] Invalid ELF header magic: != ELF [ 227.652936][ T8253] netlink: 8 bytes leftover after parsing attributes in process `syz.3.723'. [ 227.677767][ T8253] netlink: 'syz.3.723': attribute type 5 has an invalid length. [ 227.691183][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 227.718476][ T8253] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.728027][ T8253] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.737086][ T8253] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 227.746196][ T8253] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.914716][ T8287] trusted_key: encrypted_key: insufficient parameters specified [ 229.001463][ T8290] Invalid ELF header magic: != ELF [ 230.255088][ T8314] tipc: Enabled bearer , priority 0 [ 230.268232][ T8314] syzkaller0: entered promiscuous mode [ 230.276817][ T8314] syzkaller0: entered allmulticast mode [ 230.307953][ T8314] tipc: Resetting bearer [ 230.382462][ T8311] tipc: Resetting bearer [ 230.427349][ T8311] tipc: Disabling bearer [ 230.565745][ T8323] trusted_key: encrypted_key: insufficient parameters specified [ 230.664944][ T8324] Invalid ELF header magic: != ELF [ 231.450582][ T8328] tipc: Enabled bearer , priority 0 [ 231.519388][ T8328] syzkaller0: entered promiscuous mode [ 231.552296][ T8328] syzkaller0: entered allmulticast mode [ 231.581534][ T8327] tipc: Resetting bearer [ 231.664917][ T8327] tipc: Disabling bearer [ 232.269213][ T8355] netlink: 'syz.2.751': attribute type 16 has an invalid length. [ 232.280081][ T8355] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 232.290808][ T8355] netlink: 64066 bytes leftover after parsing attributes in process `syz.2.751'. [ 233.266423][ T8387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.760'. [ 233.309211][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.760'. [ 233.511068][ T8390] tipc: Enabled bearer , priority 0 [ 233.555201][ T8390] syzkaller0: entered promiscuous mode [ 233.560750][ T8390] syzkaller0: entered allmulticast mode [ 233.701544][ T8390] tipc: Resetting bearer [ 233.770042][ T8389] tipc: Resetting bearer [ 233.823954][ T8389] tipc: Disabling bearer [ 234.237713][ T8415] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 234.863294][ T8433] tipc: Enabling of bearer rejected, failed to enable media [ 234.962500][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.771'. [ 235.006179][ T8437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.771'. [ 235.662829][ T8461] tipc: Enabled bearer , priority 0 [ 235.695775][ T8461] syzkaller0: entered promiscuous mode [ 235.701315][ T8461] syzkaller0: entered allmulticast mode [ 235.868500][ T8472] netlink: 292 bytes leftover after parsing attributes in process `syz.3.777'. [ 235.933982][ T8476] tipc: Resetting bearer [ 235.992556][ T8458] tipc: Resetting bearer [ 236.134676][ T8458] tipc: Disabling bearer [ 236.305330][ T8491] netlink: 3 bytes leftover after parsing attributes in process `syz.4.779'. [ 236.573291][ T8494] syzkaller0: entered promiscuous mode [ 236.603199][ T8494] syzkaller0: entered allmulticast mode [ 236.665737][ T8502] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 238.610054][ T8502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.781'. [ 238.823885][ T8515] tipc: Enabling of bearer rejected, failed to enable media [ 238.853838][ T8519] trusted_key: encrypted_key: insufficient parameters specified [ 238.985821][ T8529] Invalid ELF header magic: != ELF [ 240.390655][ T8559] netlink: 292 bytes leftover after parsing attributes in process `syz.4.790'. [ 240.444482][ T8557] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 240.483572][ T8557] netlink: 14 bytes leftover after parsing attributes in process `syz.3.794'. [ 240.735028][ T8570] syzkaller0: entered promiscuous mode [ 240.740671][ T8570] syzkaller0: entered allmulticast mode [ 241.208424][ T8597] netlink: 3 bytes leftover after parsing attributes in process `syz.1.800'. [ 243.164731][ T8578] tipc: Enabling of bearer rejected, failed to enable media [ 243.592670][ T8621] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 243.635047][ T8621] netlink: 14 bytes leftover after parsing attributes in process `syz.2.804'. [ 244.046453][ T8637] syzkaller0: entered promiscuous mode [ 244.081417][ T8637] syzkaller0: entered allmulticast mode [ 244.115507][ T8647] netlink: 292 bytes leftover after parsing attributes in process `syz.3.808'. [ 244.444067][ T8662] netlink: 3 bytes leftover after parsing attributes in process `syz.1.811'. [ 246.411731][ T8667] tipc: Enabling of bearer rejected, failed to enable media [ 246.798806][ T8691] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 246.842584][ T8691] netlink: 14 bytes leftover after parsing attributes in process `syz.1.817'. [ 247.013399][ T8698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.819'. [ 247.050455][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 247.073810][ T8704] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.082890][ T8704] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.091657][ T8704] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.100591][ T8704] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.120806][ T8704] batman_adv: batadv0: Adding interface: vxlan0 [ 247.130880][ T8704] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.163404][ T8704] batman_adv: batadv0: Interface activated: vxlan0 [ 247.273070][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.2.822'. [ 247.368229][ T8712] tipc: Enabled bearer , priority 0 [ 247.410458][ T8712] syzkaller0: entered promiscuous mode [ 247.448911][ T8712] syzkaller0: entered allmulticast mode [ 247.512153][ T8712] tipc: Resetting bearer [ 247.529925][ T8711] tipc: Resetting bearer [ 247.593104][ T8711] tipc: Disabling bearer [ 247.903453][ T8733] netlink: 28 bytes leftover after parsing attributes in process `syz.2.830'. [ 247.929861][ T8736] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 247.971064][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.830'. [ 248.061407][ T8741] bond0: (slave gretap0): Opening slave failed [ 248.654739][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 251.637380][ T8769] netlink: 84 bytes leftover after parsing attributes in process `syz.4.838'. [ 251.659592][ T8774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.840'. [ 251.722501][ T8776] netlink: 28 bytes leftover after parsing attributes in process `syz.3.841'. [ 251.801772][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.841'. [ 252.131612][ T8793] netlink: 40 bytes leftover after parsing attributes in process `syz.1.846'. [ 252.177696][ T8795] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.193272][ T8795] ieee802154 phy0 wpan0: encryption failed: -22 [ 252.280666][ T8799] netlink: 36 bytes leftover after parsing attributes in process `syz.1.849'. [ 252.378576][ T8805] netlink: 3 bytes leftover after parsing attributes in process `syz.3.848'. [ 252.478932][ T8806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.850'. [ 255.298078][ T8811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.852'. [ 255.375939][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.852'. [ 255.805437][ T8813] netlink: 292 bytes leftover after parsing attributes in process `syz.3.853'. [ 255.815550][ T8830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.858'. [ 256.016063][ T8842] netlink: 3 bytes leftover after parsing attributes in process `syz.1.861'. [ 256.068382][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.075384][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.098383][ T8844] netlink: 36 bytes leftover after parsing attributes in process `syz.4.859'. [ 256.433382][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 256.810964][ T8854] syzkaller0: entered promiscuous mode [ 256.899252][ T8854] syzkaller0: entered allmulticast mode [ 259.374414][ T8859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.867'. [ 259.475967][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.867'. [ 259.500567][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.870'. [ 260.489294][ T8898] tipc: Enabled bearer , priority 0 [ 260.499887][ T8898] syzkaller0: entered promiscuous mode [ 260.509094][ T8898] syzkaller0: entered allmulticast mode [ 260.530099][ T8900] __nla_validate_parse: 3 callbacks suppressed [ 260.530116][ T8900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.880'. [ 260.571264][ T8900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 260.599652][ T8898] tipc: Resetting bearer [ 260.652825][ T8897] tipc: Resetting bearer [ 260.749813][ T8897] tipc: Disabling bearer [ 260.930407][ T8909] netlink: 36 bytes leftover after parsing attributes in process `syz.1.885'. [ 261.120342][ T8913] syzkaller0: entered promiscuous mode [ 261.135549][ T8913] syzkaller0: entered allmulticast mode [ 261.388675][ T8924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 261.488843][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 261.508513][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 261.577769][ T8929] netlink: 292 bytes leftover after parsing attributes in process `syz.4.888'. [ 261.870790][ T8943] netlink: 3 bytes leftover after parsing attributes in process `syz.1.891'. [ 262.124746][ T8947] netlink: 36 bytes leftover after parsing attributes in process `syz.4.895'. [ 262.469230][ T8955] syzkaller0: entered promiscuous mode [ 262.486303][ T8955] syzkaller0: entered allmulticast mode [ 262.656566][ T8960] netlink: 68 bytes leftover after parsing attributes in process `syz.1.900'. [ 263.090260][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 263.580065][ T8981] netlink: 'syz.3.905': attribute type 2 has an invalid length. [ 263.962620][ T8992] tipc: Enabled bearer , priority 0 [ 263.991480][ T8992] syzkaller0: entered promiscuous mode [ 264.022857][ T8992] syzkaller0: entered allmulticast mode [ 264.152990][ T8992] tipc: Resetting bearer [ 264.185294][ T8988] tipc: Resetting bearer [ 264.220794][ T8988] tipc: Disabling bearer [ 265.245562][ T9033] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 265.666637][ T9043] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 265.714546][ T9043] __nla_validate_parse: 8 callbacks suppressed [ 265.714564][ T9043] netlink: 14 bytes leftover after parsing attributes in process `syz.4.924'. [ 266.216489][ T9043] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.267058][ T9043] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.306533][ T9043] bond0 (unregistering): Released all slaves [ 266.472453][ T9055] tipc: Enabled bearer , priority 0 [ 266.543876][ T9057] syzkaller0: entered promiscuous mode [ 266.549436][ T9057] syzkaller0: entered allmulticast mode [ 266.592900][ T9052] tipc: Resetting bearer [ 266.657911][ T9051] tipc: Resetting bearer [ 266.713471][ T9051] tipc: Disabling bearer [ 266.874955][ T9072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.931'. [ 266.902185][ T9072] 8021q: VLANs not supported on caif0 [ 267.025098][ T9077] syzkaller0: entered promiscuous mode [ 267.030655][ T9077] syzkaller0: entered allmulticast mode [ 267.363515][ T9089] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 267.375329][ T9089] netlink: 14 bytes leftover after parsing attributes in process `syz.3.937'. [ 268.588089][ T9117] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 268.606020][ T9117] netlink: 14 bytes leftover after parsing attributes in process `syz.4.946'. [ 268.805333][ T9120] syzkaller0: entered promiscuous mode [ 268.821317][ T9120] syzkaller0: entered allmulticast mode [ 269.884779][ T9142] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 269.922543][ T9142] netlink: 14 bytes leftover after parsing attributes in process `syz.1.955'. [ 270.492679][ T9157] netlink: 292 bytes leftover after parsing attributes in process `syz.2.959'. [ 270.945672][ T9170] tipc: Enabled bearer , priority 0 [ 270.960510][ T9170] syzkaller0: entered promiscuous mode [ 270.993424][ T9170] syzkaller0: entered allmulticast mode [ 271.126186][ T9170] tipc: Resetting bearer [ 271.164180][ T9169] tipc: Resetting bearer [ 271.242570][ T9169] tipc: Disabling bearer [ 271.295680][ T9175] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 271.341461][ T9175] netlink: 14 bytes leftover after parsing attributes in process `syz.4.965'. [ 272.754809][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.972'. [ 272.778738][ T9208] 8021q: VLANs not supported on caif0 [ 272.933252][ T9216] netlink: 292 bytes leftover after parsing attributes in process `syz.4.973'. [ 273.224966][ T9223] tipc: Enabled bearer , priority 0 [ 273.255220][ T9223] syzkaller0: entered promiscuous mode [ 273.267823][ T9223] syzkaller0: entered allmulticast mode [ 273.377468][ T9222] tipc: Resetting bearer [ 273.445622][ T9222] tipc: Disabling bearer [ 273.467891][ T9226] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 273.493699][ T9226] netlink: 14 bytes leftover after parsing attributes in process `syz.3.977'. [ 274.376067][ T9250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.984'. [ 274.423463][ T9250] 8021q: VLANs not supported on caif0 [ 274.639984][ T9255] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 274.653225][ T9255] netlink: 14 bytes leftover after parsing attributes in process `syz.3.986'. [ 275.332162][ T9262] netlink: 292 bytes leftover after parsing attributes in process `syz.3.988'. [ 275.423372][ T9277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.992'. [ 278.752661][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.994'. [ 278.776618][ T9288] 8021q: VLANs not supported on caif0 [ 278.895953][ T9296] netlink: 3 bytes leftover after parsing attributes in process `syz.1.997'. [ 278.968331][ T9299] syzkaller0: entered promiscuous mode [ 278.991557][ T9299] syzkaller0: entered allmulticast mode [ 280.055695][ T9320] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1004'. [ 280.376089][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1005'. [ 284.183339][ T9332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1008'. [ 284.217703][ T9332] 8021q: VLANs not supported on caif0 [ 284.547181][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 284.662331][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1014'. [ 285.083070][ T9359] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1016'. [ 285.388170][ T9369] syzkaller0: entered promiscuous mode [ 285.417226][ T9369] syzkaller0: entered allmulticast mode [ 286.265030][ T9390] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.274172][ T9390] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.283041][ T9390] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.291799][ T9390] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 286.328720][ T9390] batman_adv: batadv0: Adding interface: vxlan0 [ 286.335199][ T9390] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.397046][ T9390] batman_adv: batadv0: Interface activated: vxlan0 [ 286.815614][ T9411] tipc: Enabled bearer , priority 0 [ 286.838651][ T9411] syzkaller0: entered promiscuous mode [ 286.848349][ T9411] syzkaller0: entered allmulticast mode [ 286.873046][ T9412] syzkaller0: entered promiscuous mode [ 286.878636][ T9412] syzkaller0: entered allmulticast mode [ 286.960239][ T9411] tipc: Resetting bearer [ 287.037156][ T9409] tipc: Resetting bearer [ 287.101898][ T9409] tipc: Disabling bearer [ 287.425079][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1039'. [ 287.452262][ T9423] 8021q: VLANs not supported on caif0 [ 287.994698][ T9442] tipc: Enabled bearer , priority 0 [ 288.015580][ T9442] syzkaller0: entered promiscuous mode [ 288.021124][ T9442] syzkaller0: entered allmulticast mode [ 288.104261][ T9442] tipc: Resetting bearer [ 288.140870][ T9441] tipc: Resetting bearer [ 288.220612][ T9441] tipc: Disabling bearer [ 288.507747][ T9451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1053'. [ 288.528330][ T9451] 8021q: VLANs not supported on nlmon0 [ 288.986326][ T9459] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 289.008699][ T9459] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1059'. [ 289.345489][ T9474] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1064'. [ 289.382248][ T9474] 8021q: VLANs not supported on nlmon0 [ 289.464559][ T9478] syzkaller0: entered promiscuous mode [ 289.481765][ T9478] syzkaller0: entered allmulticast mode [ 289.963876][ T9488] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 290.016254][ T9491] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1069'. [ 290.694352][ T9508] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1076'. [ 290.883511][ T9513] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 290.924202][ T9513] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1080'. [ 290.992895][ T9516] tipc: Enabled bearer , priority 0 [ 291.024318][ T9516] syzkaller0: entered promiscuous mode [ 291.036724][ T9516] syzkaller0: entered allmulticast mode [ 291.080364][ T9516] tipc: Resetting bearer [ 291.103754][ T9515] tipc: Resetting bearer [ 291.195251][ T9515] tipc: Disabling bearer [ 291.339503][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1085'. [ 291.523540][ T9529] syzkaller0: entered promiscuous mode [ 291.529112][ T9529] syzkaller0: entered allmulticast mode [ 291.919190][ T9538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1089'. [ 292.302879][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 292.320511][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 292.372659][ T9550] tipc: Enabled bearer , priority 0 [ 292.391386][ T9550] syzkaller0: entered promiscuous mode [ 292.397233][ T9550] syzkaller0: entered allmulticast mode [ 292.435280][ T9550] tipc: Resetting bearer [ 292.463325][ T9549] tipc: Resetting bearer [ 292.523014][ T9549] tipc: Disabling bearer [ 292.663682][ T9557] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1091'. [ 292.790644][ T9560] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 292.852440][ T9560] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1097'. [ 292.983583][ T9566] syzkaller0: entered promiscuous mode [ 292.999287][ T9566] syzkaller0: entered allmulticast mode [ 293.554000][ T9582] tipc: Enabled bearer , priority 0 [ 293.567648][ T9582] syzkaller0: entered promiscuous mode [ 293.580172][ T9582] syzkaller0: entered allmulticast mode [ 293.607004][ T9582] tipc: Resetting bearer [ 293.625529][ T9581] tipc: Resetting bearer [ 293.686397][ T9581] tipc: Disabling bearer [ 294.744334][ T9609] tipc: Enabled bearer , priority 0 [ 294.765654][ T9609] syzkaller0: entered promiscuous mode [ 294.771198][ T9609] syzkaller0: entered allmulticast mode [ 294.848119][ T9609] tipc: Resetting bearer [ 294.883312][ T9608] tipc: Resetting bearer [ 294.945635][ T9608] tipc: Disabling bearer [ 295.051606][ T9616] __nla_validate_parse: 2 callbacks suppressed [ 295.051625][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1119'. [ 295.427672][ T9634] syzkaller0: entered promiscuous mode [ 295.445376][ T9634] syzkaller0: entered allmulticast mode [ 296.592632][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1135'. [ 296.793617][ T9659] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 297.020830][ T9667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 297.237042][ T9671] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 297.248596][ T9671] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1142'. [ 297.476469][ T9679] syzkaller0: entered promiscuous mode [ 297.485608][ T9679] syzkaller0: entered allmulticast mode [ 297.902153][ T9694] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1152'. [ 297.991270][ T9696] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 298.005644][ T9696] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1153'. [ 298.218920][ T9700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1156'. [ 298.414553][ T9710] syzkaller0: entered promiscuous mode [ 298.432431][ T9710] syzkaller0: entered allmulticast mode [ 298.613684][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1164'. [ 298.673667][ T9720] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 298.738065][ T9725] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1165'. [ 299.027834][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1171'. [ 299.400534][ T9749] tipc: Enabling of bearer rejected, failed to enable media [ 299.452881][ T9749] syzkaller0: entered promiscuous mode [ 299.456177][ T9747] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 299.458404][ T9749] syzkaller0: entered allmulticast mode [ 300.172936][ T9774] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 300.218986][ T9774] __nla_validate_parse: 3 callbacks suppressed [ 300.219002][ T9774] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1190'. [ 300.263950][ T9781] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1189'. [ 300.491688][ T9785] tipc: Enabling of bearer rejected, failed to enable media [ 300.516256][ T9785] syzkaller0: entered promiscuous mode [ 300.517001][ T9789] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1196'. [ 300.531457][ T9785] syzkaller0: entered allmulticast mode [ 301.281760][ T9811] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1206'. [ 301.545332][ T9818] tipc: Enabling of bearer rejected, failed to enable media [ 301.565364][ T9818] syzkaller0: entered promiscuous mode [ 301.570911][ T9818] syzkaller0: entered allmulticast mode [ 302.143021][ T9830] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1212'. [ 302.497287][ T9840] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1216'. [ 303.095240][ T9854] tipc: Enabling of bearer rejected, failed to enable media [ 303.111403][ T9854] syzkaller0: entered promiscuous mode [ 303.117630][ T9854] syzkaller0: entered allmulticast mode [ 303.787180][ T9872] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1229'. [ 304.051852][ T9883] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1230'. [ 304.549485][ T9890] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 304.883599][ T9893] tipc: Enabling of bearer rejected, failed to enable media [ 304.901806][ T9893] syzkaller0: entered promiscuous mode [ 304.912523][ T9893] syzkaller0: entered allmulticast mode [ 305.413943][ T9906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1241'. [ 305.428432][ T9908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1243'. [ 305.454644][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 305.777790][ T9922] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1247'. [ 305.916609][ T9925] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 305.938280][ T9927] tipc: Enabling of bearer rejected, failed to enable media [ 305.979375][ T9927] syzkaller0: entered promiscuous mode [ 305.985272][ T9927] syzkaller0: entered allmulticast mode [ 306.636410][ T9932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1251'. [ 306.694771][ T9932] vlan2: entered promiscuous mode [ 306.724575][ T9932] batadv0: entered promiscuous mode [ 306.987042][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1257'. [ 307.002929][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1257'. [ 307.036439][ T9946] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.045411][ T9946] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.054377][ T9946] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.063219][ T9946] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.204938][ T9957] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 307.225453][ T9958] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1260'. [ 307.669982][ T9963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1262'. [ 307.723804][ T9965] tipc: Enabling of bearer rejected, failed to enable media [ 307.733985][ T9965] syzkaller0: entered promiscuous mode [ 307.739519][ T9965] syzkaller0: entered allmulticast mode [ 307.899855][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1266'. [ 308.382693][ T9985] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 308.475383][ T9991] tipc: Enabling of bearer rejected, failed to enable media [ 308.503427][ T9991] syzkaller0: entered promiscuous mode [ 308.522211][ T9991] syzkaller0: entered allmulticast mode [ 308.993879][T10003] vlan2: entered promiscuous mode [ 309.012122][T10003] batadv0: entered promiscuous mode [ 309.571212][T10021] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 309.713489][T10024] tipc: Enabling of bearer rejected, failed to enable media [ 309.733182][T10024] syzkaller0: entered promiscuous mode [ 309.738734][T10024] syzkaller0: entered allmulticast mode [ 310.444128][T10046] __nla_validate_parse: 10 callbacks suppressed [ 310.444147][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 310.479721][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1299'. [ 310.549986][T10050] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 310.553436][T10048] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1300'. [ 310.677610][T10053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1302'. [ 311.128551][T10064] syzkaller0: entered promiscuous mode [ 311.134367][T10064] syzkaller0: entered allmulticast mode [ 311.521874][T10074] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1311'. [ 311.643137][T10076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1312'. [ 311.680900][T10076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 311.718312][T10079] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 311.886334][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1315'. [ 312.382877][T10097] syzkaller0: entered promiscuous mode [ 312.389310][T10097] syzkaller0: entered allmulticast mode [ 312.654264][T10105] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1323'. [ 312.807799][T10111] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 313.156113][T10123] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1326'. [ 314.078462][T10140] syzkaller0: entered promiscuous mode [ 314.092716][T10140] syzkaller0: entered allmulticast mode [ 314.315005][T10150] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 314.774086][T10159] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 315.457219][T10171] tipc: Enabled bearer , priority 0 [ 315.489934][T10176] syzkaller0: entered promiscuous mode [ 315.522093][T10176] syzkaller0: entered allmulticast mode [ 315.556415][ T5801] Bluetooth: hci4: link tx timeout [ 315.562480][ T5801] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 315.572903][ T5801] Bluetooth: hci4: link tx timeout [ 315.578076][ T5801] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 315.620047][T10176] tipc: Resetting bearer [ 315.713281][T10170] tipc: Resetting bearer [ 315.770972][T10170] tipc: Disabling bearer [ 316.933681][T10199] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 317.208428][T10206] __nla_validate_parse: 3 callbacks suppressed [ 317.208446][T10206] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1352'. [ 317.508732][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.517021][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.662782][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 317.972378][T10219] syzkaller0: entered promiscuous mode [ 317.977970][T10219] syzkaller0: entered allmulticast mode [ 319.579708][T10237] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1361'. [ 319.610353][T10239] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 319.752007][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 320.091703][T10251] syzkaller0: entered promiscuous mode [ 320.116079][T10251] syzkaller0: entered allmulticast mode [ 321.352324][T10264] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1372'. [ 321.572338][T10272] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 323.241540][T10288] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1382'. [ 324.165744][T10295] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 324.380588][T10300] syzkaller0: entered promiscuous mode [ 324.400206][T10300] syzkaller0: entered allmulticast mode [ 324.735684][T10316] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1389'. [ 326.844063][T10342] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 326.874091][T10344] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1396'. [ 327.044809][T10348] syzkaller0: entered promiscuous mode [ 327.052350][T10347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 327.066400][T10348] syzkaller0: entered allmulticast mode [ 327.979147][T10359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1402'. [ 328.177935][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1402'. [ 328.547876][T10374] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1407'. [ 328.780598][T10382] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1409'. [ 329.157875][T10391] syzkaller0: entered promiscuous mode [ 329.172062][T10391] syzkaller0: entered allmulticast mode [ 329.501235][T10397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1415'. [ 329.570810][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 329.719354][T10405] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1417'. [ 330.527478][T10423] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20001 [ 330.634083][T10427] syzkaller0: entered promiscuous mode [ 330.654608][T10427] syzkaller0: entered allmulticast mode [ 330.808006][T10429] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1425'. [ 330.844465][T10429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1425'. [ 331.030685][T10432] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 331.514777][T10443] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1428'. [ 333.180960][T10457] sp0: Synchronizing with TNC [ 333.806367][T10452] [U] è [ 334.423603][T10462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1436'. [ 334.519610][T10467] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 334.765914][T10470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1436'. [ 336.102501][T10471] syzkaller0: entered promiscuous mode [ 336.128564][T10471] syzkaller0: entered allmulticast mode [ 336.700327][T10503] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 336.889205][T10507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 336.944010][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1448'. [ 337.119823][T10511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1449'. [ 337.129478][T10511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1449'. [ 337.493690][T10519] syzkaller0: entered promiscuous mode [ 337.503401][T10519] syzkaller0: entered allmulticast mode [ 337.986002][ C0] ================================================================== [ 337.994235][ C0] BUG: KASAN: slab-use-after-free in rose_timer_expiry+0x46a/0x4b0 [ 338.002209][ C0] Read of size 2 at addr ffff888031221c2a by task syz.2.1451/10520 [ 338.010287][ C0] [ 338.012665][ C0] CPU: 0 PID: 10520 Comm: syz.2.1451 Not tainted syzkaller #0 [ 338.020168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.030302][ C0] Call Trace: [ 338.033622][ C0] [ 338.036514][ C0] dump_stack_lvl+0x16c/0x230 [ 338.041242][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 338.046324][ C0] ? show_regs_print_info+0x20/0x20 [ 338.051564][ C0] ? load_image+0x3b0/0x3b0 [ 338.056121][ C0] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 338.061555][ C0] ? __virt_addr_valid+0x18c/0x540 [ 338.061583][ C0] ? __virt_addr_valid+0x469/0x540 [ 338.061603][ C0] print_report+0xac/0x220 [ 338.061621][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 338.061641][ C0] kasan_report+0x117/0x150 [ 338.061660][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 338.061683][ C0] rose_timer_expiry+0x46a/0x4b0 [ 338.061704][ C0] call_timer_fn+0x16e/0x530 [ 338.061719][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 338.061738][ C0] ? call_timer_fn+0xbf/0x530 [ 338.061752][ C0] ? __run_timers+0x7d0/0x7d0 [ 338.061770][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.061795][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 338.061817][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 338.061837][ C0] __run_timers+0x52d/0x7d0 [ 338.061857][ C0] ? detach_timer+0x2b0/0x2b0 [ 338.061874][ C0] ? lock_chain_count+0x20/0x20 [ 338.061898][ C0] run_timer_softirq+0x67/0xf0 [ 338.061929][ C0] handle_softirqs+0x280/0x820 [ 338.061950][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 338.061971][ C0] ? do_softirq+0x180/0x180 [ 338.061991][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 338.062015][ C0] __irq_exit_rcu+0xc7/0x190 [ 338.062030][ C0] ? irq_exit_rcu+0x20/0x20 [ 338.062048][ C0] irq_exit_rcu+0x9/0x20 [ 338.062061][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 338.062084][ C0] [ 338.062090][ C0] [ 338.062096][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.062114][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 338.062142][ C0] Code: 74 05 e8 ca 51 14 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 42 ca e3 f6 65 8b 05 b3 18 8c 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 338.062157][ C0] RSP: 0018:ffffc9000cc07580 EFLAGS: 00000206 [ 338.062173][ C0] RAX: 3e738f98cfca9000 RBX: 0000000000000a02 RCX: 3e738f98cfca9000 [ 338.062185][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: 0000000000000001 [ 338.062197][ C0] RBP: ffffc9000cc07618 R08: ffffffff90da55af R09: 1ffffffff21b4ab5 [ 338.062210][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ab6 R12: dffffc0000000000 [ 338.062222][ C0] R13: 1ffff110058fce46 R14: ffff88802c7e71d0 R15: 1ffff92001980eb0 [ 338.062243][ C0] ? _raw_spin_unlock+0x40/0x40 [ 338.062271][ C0] __skb_try_recv_datagram+0x17d/0x4d0 [ 338.062293][ C0] ? sock_load_diag_module+0x140/0x140 [ 338.062324][ C0] __unix_dgram_recvmsg+0x2d5/0xd60 [ 338.062349][ C0] ? unix_unhash+0x10/0x10 [ 338.062369][ C0] ? lock_chain_count+0x20/0x20 [ 338.062388][ C0] ? mark_lock+0x94/0x320 [ 338.062404][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 338.062424][ C0] ? unix_dgram_sendmsg+0x1720/0x1720 [ 338.062445][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 338.062467][ C0] ____sys_recvmsg+0x49b/0x5b0 [ 338.062495][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 338.062523][ C0] ? import_iovec+0x73/0xa0 [ 338.062547][ C0] ___sys_recvmsg+0x1b6/0x510 [ 338.062574][ C0] ? __sys_recvmsg+0x270/0x270 [ 338.062605][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 338.062624][ C0] ? __might_fault+0xc6/0x120 [ 338.062638][ C0] ? __might_fault+0xaa/0x120 [ 338.062653][ C0] do_recvmmsg+0x360/0x7d0 [ 338.062679][ C0] ? __sys_recvmmsg+0x280/0x280 [ 338.062706][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 338.062721][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 338.062744][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 338.062767][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 338.062791][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 338.062814][ C0] do_syscall_64+0x55/0xb0 [ 338.062831][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.062846][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.062861][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.062886][ C0] RIP: 0033:0x7fd76798ebe9 [ 338.062899][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.062912][ C0] RSP: 002b:00007fd7687fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 338.062928][ C0] RAX: ffffffffffffffda RBX: 00007fd767bc6090 RCX: 00007fd76798ebe9 [ 338.062939][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.062949][ C0] RBP: 00007fd767a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 338.062959][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 338.062968][ C0] R13: 00007fd767bc6128 R14: 00007fd767bc6090 R15: 00007ffd2e68ad68 [ 338.062986][ C0] [ 338.062991][ C0] [ 338.063005][ C0] Allocated by task 7117: [ 338.063013][ C0] kasan_set_track+0x4e/0x70 [ 338.063029][ C0] __kasan_kmalloc+0x8f/0xa0 [ 338.063044][ C0] rose_add_node+0x23a/0xdd0 [ 338.063060][ C0] rose_rt_ioctl+0xa42/0xfb0 [ 338.063077][ C0] rose_ioctl+0x3cf/0x8b0 [ 338.063091][ C0] sock_do_ioctl+0xd7/0x2f0 [ 338.063112][ C0] sock_ioctl+0x623/0x7a0 [ 338.063133][ C0] __se_sys_ioctl+0xfd/0x170 [ 338.063150][ C0] do_syscall_64+0x55/0xb0 [ 338.063166][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.063190][ C0] [ 338.063193][ C0] Last potentially related work creation: [ 338.063198][ C0] kasan_save_stack+0x3e/0x60 [ 338.063212][ C0] __kasan_record_aux_stack+0xaf/0xc0 [ 338.063231][ C0] call_rcu+0x158/0x930 [ 338.063250][ C0] sctp_destroy_sock+0x1ec/0x370 [ 338.063270][ C0] sk_common_release+0x6f/0x310 [ 338.063288][ C0] sctp_close+0x783/0x900 [ 338.063307][ C0] inet_release+0x13d/0x180 [ 338.063326][ C0] sock_close+0xbd/0x230 [ 338.063347][ C0] __fput+0x234/0x970 [ 338.063368][ C0] task_work_run+0x1ce/0x250 [ 338.063387][ C0] exit_to_user_mode_loop+0xe6/0x110 [ 338.063408][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 338.063427][ C0] syscall_exit_to_user_mode+0x1a/0x50 [ 338.063449][ C0] do_syscall_64+0x61/0xb0 [ 338.063465][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.063489][ C0] [ 338.063492][ C0] The buggy address belongs to the object at ffff888031221c00 [ 338.063492][ C0] which belongs to the cache kmalloc-512 of size 512 [ 338.063506][ C0] The buggy address is located 42 bytes inside of [ 338.063506][ C0] freed 512-byte region [ffff888031221c00, ffff888031221e00) [ 338.063523][ C0] [ 338.063526][ C0] The buggy address belongs to the physical page: [ 338.063541][ C0] page:ffffea0000c48800 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888031220000 pfn:0x31220 [ 338.063560][ C0] head:ffffea0000c48800 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 338.063576][ C0] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 338.063596][ C0] page_type: 0xffffffff() [ 338.063610][ C0] raw: 00fff00000000840 ffff888017841c80 ffffea0000b0df10 ffffea0000a28310 [ 338.063624][ C0] raw: ffff888031220000 000000000010000b 00000001ffffffff 0000000000000000 [ 338.063632][ C0] page dumped because: kasan: bad access detected [ 338.063643][ C0] page_owner tracks the page as allocated [ 338.063648][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5960, tgid 5959 (syz.0.22), ts 97947148647, free_ts 95158983684 [ 338.063675][ C0] post_alloc_hook+0x1cd/0x210 [ 338.063697][ C0] get_page_from_freelist+0x195c/0x19f0 [ 338.063719][ C0] __alloc_pages+0x1e3/0x460 [ 338.063740][ C0] alloc_slab_page+0x5d/0x170 [ 338.063762][ C0] new_slab+0x87/0x2e0 [ 338.063781][ C0] ___slab_alloc+0xc6d/0x12f0 [ 338.063801][ C0] __kmem_cache_alloc_node+0x1a2/0x260 [ 338.063821][ C0] __kmalloc+0xa4/0x240 [ 338.063839][ C0] fib6_info_alloc+0x32/0xe0 [ 338.063857][ C0] ip6_route_info_create+0x44f/0x1200 [ 338.063880][ C0] addrconf_f6i_alloc+0x1c6/0x400 [ 338.063902][ C0] ipv6_add_addr+0x576/0x1090 [ 338.063916][ C0] add_addr+0x8c/0x2c0 [ 338.063933][ C0] add_v4_addrs+0x70d/0xbc0 [ 338.063951][ C0] addrconf_init_auto_addrs+0x39b/0xaa0 [ 338.063969][ C0] addrconf_notify+0xb62/0x1010 [ 338.063987][ C0] page last free stack trace: [ 338.063992][ C0] free_unref_page_prepare+0x7ce/0x8e0 [ 338.064012][ C0] free_unref_page+0x32/0x2e0 [ 338.064032][ C0] __unfreeze_partials+0x1cf/0x210 [ 338.064054][ C0] put_cpu_partial+0x17c/0x250 [ 338.064075][ C0] __slab_free+0x31d/0x410 [ 338.064095][ C0] qlist_free_all+0x75/0xe0 [ 338.064114][ C0] kasan_quarantine_reduce+0x143/0x160 [ 338.064133][ C0] __kasan_slab_alloc+0x22/0x80 [ 338.064148][ C0] slab_post_alloc_hook+0x6e/0x4d0 [ 338.064173][ C0] kmem_cache_alloc+0x11e/0x2e0 [ 338.064196][ C0] getname_flags+0xbb/0x500 [ 338.064216][ C0] user_path_at_empty+0x2c/0x60 [ 338.064237][ C0] do_readlinkat+0xd8/0x480 [ 338.064252][ C0] __x64_sys_readlink+0x7f/0x90 [ 338.064267][ C0] do_syscall_64+0x55/0xb0 [ 338.064283][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.064306][ C0] [ 338.064680][ C0] Memory state around the buggy address: [ 338.064700][ C0] ffff888031221b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.064713][ C0] ffff888031221b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 338.064724][ C0] >ffff888031221c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.064732][ C0] ^ [ 338.064742][ C0] ffff888031221c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.064753][ C0] ffff888031221d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 338.064761][ C0] ================================================================== [ 338.064893][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 338.064904][ C0] CPU: 0 PID: 10520 Comm: syz.2.1451 Not tainted syzkaller #0 [ 338.064921][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 338.064932][ C0] Call Trace: [ 338.064945][ C0] [ 338.064955][ C0] dump_stack_lvl+0x16c/0x230 [ 338.064992][ C0] ? show_regs_print_info+0x20/0x20 [ 338.065022][ C0] ? load_image+0x3b0/0x3b0 [ 338.065052][ C0] panic+0x2c0/0x710 [ 338.065089][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 338.065121][ C0] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 338.065163][ C0] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 338.065199][ C0] ? _raw_spin_unlock+0x40/0x40 [ 338.065230][ C0] ? print_memory_metadata+0x314/0x400 [ 338.065264][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 338.065294][ C0] check_panic_on_warn+0x84/0xa0 [ 338.065322][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 338.065442][ C0] end_report+0x6f/0x140 [ 338.065524][ C0] kasan_report+0x128/0x150 [ 338.065553][ C0] ? rose_timer_expiry+0x46a/0x4b0 [ 338.065589][ C0] rose_timer_expiry+0x46a/0x4b0 [ 338.065619][ C0] call_timer_fn+0x16e/0x530 [ 338.065642][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 338.065669][ C0] ? call_timer_fn+0xbf/0x530 [ 338.065689][ C0] ? __run_timers+0x7d0/0x7d0 [ 338.065715][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 338.065752][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 338.065783][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 338.065811][ C0] __run_timers+0x52d/0x7d0 [ 338.065841][ C0] ? detach_timer+0x2b0/0x2b0 [ 338.065864][ C0] ? lock_chain_count+0x20/0x20 [ 338.065892][ C0] run_timer_softirq+0x67/0xf0 [ 338.065928][ C0] handle_softirqs+0x280/0x820 [ 338.065953][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 338.065977][ C0] ? do_softirq+0x180/0x180 [ 338.066001][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 338.066031][ C0] __irq_exit_rcu+0xc7/0x190 [ 338.066054][ C0] ? irq_exit_rcu+0x20/0x20 [ 338.066078][ C0] irq_exit_rcu+0x9/0x20 [ 338.066099][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 338.066131][ C0] [ 338.066138][ C0] [ 338.066146][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 338.066171][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa9/0x110 [ 338.066207][ C0] Code: 74 05 e8 ca 51 14 f7 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 42 ca e3 f6 65 8b 05 b3 18 8c 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 338.066221][ C0] RSP: 0018:ffffc9000cc07580 EFLAGS: 00000206 [ 338.066236][ C0] RAX: 3e738f98cfca9000 RBX: 0000000000000a02 RCX: 3e738f98cfca9000 [ 338.066248][ C0] RDX: dffffc0000000000 RSI: ffffffff8aaaba20 RDI: 0000000000000001 [ 338.066263][ C0] RBP: ffffc9000cc07618 R08: ffffffff90da55af R09: 1ffffffff21b4ab5 [ 338.066281][ C0] R10: dffffc0000000000 R11: fffffbfff21b4ab6 R12: dffffc0000000000 [ 338.066298][ C0] R13: 1ffff110058fce46 R14: ffff88802c7e71d0 R15: 1ffff92001980eb0 [ 338.066328][ C0] ? _raw_spin_unlock+0x40/0x40 [ 338.066367][ C0] __skb_try_recv_datagram+0x17d/0x4d0 [ 338.066397][ C0] ? sock_load_diag_module+0x140/0x140 [ 338.066433][ C0] __unix_dgram_recvmsg+0x2d5/0xd60 [ 338.066477][ C0] ? unix_unhash+0x10/0x10 [ 338.066506][ C0] ? lock_chain_count+0x20/0x20 [ 338.066534][ C0] ? mark_lock+0x94/0x320 [ 338.066557][ C0] ? unix_dgram_recvmsg+0xad/0xd0 [ 338.066586][ C0] ? unix_dgram_sendmsg+0x1720/0x1720 [ 338.066615][ C0] sock_recvmsg_nosec+0x82/0xd0 [ 338.066645][ C0] ____sys_recvmsg+0x49b/0x5b0 [ 338.066684][ C0] ? __sys_recvmsg_sock+0x50/0x50 [ 338.066723][ C0] ? import_iovec+0x73/0xa0 [ 338.066757][ C0] ___sys_recvmsg+0x1b6/0x510 [ 338.066792][ C0] ? __sys_recvmsg+0x270/0x270 [ 338.066833][ C0] ? __lock_acquire+0x7c80/0x7c80 [ 338.066862][ C0] ? __might_fault+0xc6/0x120 [ 338.066881][ C0] ? __might_fault+0xaa/0x120 [ 338.066902][ C0] do_recvmmsg+0x360/0x7d0 [ 338.066938][ C0] ? __sys_recvmmsg+0x280/0x280 [ 338.066976][ C0] ? __ia32_sys_get_robust_list+0x90/0x90 [ 338.066996][ C0] ? rcu_read_lock_sched_held+0x8a/0x100 [ 338.067030][ C0] __x64_sys_recvmmsg+0x191/0x240 [ 338.067068][ C0] ? do_recvmmsg+0x7d0/0x7d0 [ 338.067102][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 338.067134][ C0] do_syscall_64+0x55/0xb0 [ 338.067160][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.067181][ C0] ? clear_bhb_loop+0x40/0x90 [ 338.067203][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 338.067237][ C0] RIP: 0033:0x7fd76798ebe9 [ 338.067256][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.067275][ C0] RSP: 002b:00007fd7687fd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 338.067298][ C0] RAX: ffffffffffffffda RBX: 00007fd767bc6090 RCX: 00007fd76798ebe9 [ 338.067315][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.067329][ C0] RBP: 00007fd767a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 338.067343][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 338.067356][ C0] R13: 00007fd767bc6128 R14: 00007fd767bc6090 R15: 00007ffd2e68ad68 [ 338.067382][ C0] [ 338.070614][ C0] Kernel Offset: disabled