last executing test programs: 7.247276004s ago: executing program 0 (id=353): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 7.247081334s ago: executing program 3 (id=354): socket$inet(0x2, 0x4000000000000001, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000200)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 7.010172481s ago: executing program 2 (id=357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020600) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) 6.904926069s ago: executing program 0 (id=358): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x0, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000180)=0x30) 6.806805833s ago: executing program 2 (id=360): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 6.618558198s ago: executing program 2 (id=362): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6", 0xd}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 6.50328605s ago: executing program 0 (id=364): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfff1, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xf}, {0xffff, 0xfff1}, {0xffea, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x800) 6.119716791s ago: executing program 3 (id=365): socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce2200302b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 5.921791354s ago: executing program 1 (id=367): bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000800)="f8", 0x1) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000002840)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x68, 0x0, 0x3, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 5.71695846s ago: executing program 1 (id=368): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 5.276665675s ago: executing program 4 (id=371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 4.539117998s ago: executing program 1 (id=372): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) 4.47111017s ago: executing program 2 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x16, 0x0, 0x4, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="7a0af8ff"], 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 4.423850053s ago: executing program 3 (id=374): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) recvmmsg(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x22, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xe5a01e6e238456fc) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 4.39445197s ago: executing program 0 (id=375): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000a00)="1b", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$cgroup_pid(r5, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r5, 0x0, 0x80, 0x6) write(r3, 0x0, 0x0) 3.120132582s ago: executing program 4 (id=376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000740)={0x0, 0x2, 0x2, 0x8000000000400}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x13, r0, 0x7ca8e000) writev(r1, &(0x7f0000000080)=[{0x0}], 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000880) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, 0x0, 0x0) ioctl$int_in(r0, 0x0, 0x0) 3.058383704s ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$packet(0x11, 0x3, 0x300) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r2, &(0x7f0000001cc0)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000140)=""/36, 0x24}], 0x1}}], 0x1, 0x40010000, 0x0) 3.057320125s ago: executing program 0 (id=387): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}}, 0x0) 3.056861994s ago: executing program 1 (id=378): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x5, 0x2}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.675640198s ago: executing program 3 (id=379): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)=r1}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x1000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040086dd0000ffff"}}}}}, 0x0) 2.353243635s ago: executing program 4 (id=380): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000340)=[{&(0x7f0000002000)="f838b39ffa3563660f9814b4227413e01fae8c141a89fc121c5f52b430714dbfc5ba621390d85264f9f52ca984710f2881e3212a01c3034108a0c02d4e919f4ee18f640d365b63ac188f41180848d0d665f4579b93862a15f7b4b028f4cde79106a7d282246ac8139032e3c2b4b18924f0edb1a8bd986355a2cbad0104572adf7a986e927e0db561b8f711c7e23bbc1a5623b3704c55b2692a59ccb07d2a2de3321a476d3603ede9dbf268e67a43b491d980dbaa47e4e23c1f84379261076492f0a46598b1c2913db95ece9a9707d220f22aa438f29329ffef4cd6ebfd65ef97015949009f057d45c159173d7cb724e10037930e6674b18b607ef8d9a31fffa75579b4946adda7aaef92c894dea722960f333e0091f1f5119cfa9b4bef09d038545b640136210c93c329ed414e9dd66d3fe95ccca9ad614a1a97ca69c24fbeba68b23b2e00f86112e449979f4c982d2979740ff35eab13b861a6fb82c4cc90cf90275bf3029088558f16ca95d0056f0896131b4d62a85b6e3934bc9cef4824ca26d4a3042eb245243cc85a3c0fd1a477f4d22e55df0552f741d66995b0aac6115b7b9a455cd63d72ccd475eaaffd61bd680c9f3c622ca346afd8d8fc0097b61ad9ab12334f087a67c7db8010f7c096ac58b249dc453e705e6b70b9716f2b25be92b1eb2ea4059a580075ebeb08638351a23d7b00a8c28b989904e77edb5ac8824d97efec33916d5b90b359072a96490a2debe5f1b32fc52376a9168bd5407e6ca04ea62810ed78d584756600c738c189cd84c53ba8c86ba3340486e57e79c5068ca821e5e5622a977810e7536fe2d1bfe4125ffbdd0ad9f9b83266cd64570926612d130929c2112250755a1df6d8adb07d1d3b757cfea3a4b5e1cbfb061ec435c3f827ac25b40c556365dd410eff71a6ad47ffa5c832f44dc5fcf6a8cdae20850759df64b043b16a8782ee71de81812b06b2162dcc87eb34277dfd6ab7978e67653a8ec3a72a403478929a8cad89bba6088b54cfcbb25d1c3274dc8568229f1145c645c7e9fa9f28567d379bad2b467ce245223784576ec5b1cc2568153646b56ceaabb10396ab678b01ea61c28feba102284136d015cd8ce0c745ba0e8e2839ae928396b3446d7f824443ae92a8607196458799bc39ed67215a616366b7cfc2e216846441260d2dfd4c42039ca35bc53e1fb7885996ee8a1570e98a726e8a263898a6c9d885b4c88b81c6457587ed1959a02da5fb1ed3ae1decc14927c610010ce21f7297899167cea2231a99dc8b031e20c4d05987ff27ec2ecf9f90ccbad959e976ff9d2945d8975c9c4241fbd89af9164d3d0fc3fb12108304b33d6f50115362a518be54dd7b4bf213cd6f27a0257b8087f16b03997a68342f8ad5d253e27bab8f838211d79ae58cb0eb560c9994e3731c25cc3bf2e0ffbf13e746733da1f77c8b7f0ec2c93a9a27b7d56577f4aec10c270ddea7dc5b3f64feebf979aac54d155b903e4a7c946860d83d7aa53b80ecf86ec8d524a3d9ef3bb6b3d9b867f32282742b9e5792eddc0d466ac6e90971005d172d27cdbfa731e4cb1e5d6426a85d2d0bea19c7f27e3e6f781420bb79b7111e8959f99ea92b72a10c9c86f4f38e6700c93d9274f4572483ec8982e84fde86d11dc73a032cc66b5488a2945ee317ac4005aa33831e7737d3813e82618b9eecb8e454097622fd0bfd2a00994a223ac70d1f76ff21e64c886ba1fb8cea1fce2f8fd7221762f8925d17ee19eb345c631ea22cada57858fddf46753d894778012a7a5058b5765f9c96db357e9a7791a1edc2d7cd687ea67a63ed30f269c89f44530eaa5707faf6f1b897916e6df4df59e950d0ce371fdb54eedaf1ac74b51fb250a1e527439c67ae0945e5405f1ab6804732bf58c3744df95727d763de1f354a3945b9f8830c1c44ba02755ca10c9f765cab0f1bc3d3344aa91c468ead490629d19e64dcffe653d246832987a348f4284a95b53d9e661d2b6fb6509f45e7658ad3ef9985777fdc16b285e7534051ab31f50b365fee48302a13ae582446ef24213763c85f41210e34e8215ef3ad0d88c4369282bddabe3fae7ed243a08887647cdaf5b21b95d2cf03384ab5c9c19cec2bb04e016faba9c9c735803187f677377b84e3738635a49f452baee5060a4421d1eaa17aee81fa4ff6f9321d777a73128ab73affe7916491b6fd68a16e61b9d9f3a6f92769abe47542e4cb6501960d1a5ada70413cd2d19944891e65c67ec8979b5ee02468391a364d3bba313c4cf9ae99f364578c94b5554cb86a0f1ed71cc12cc6c4c4c8ba4d47b76c71d8dbd495bb608283b8edc2a02e74aea7073f07580e533e", 0x681}], 0x1, 0xa) close(r1) r2 = socket(0x1e, 0x4, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) writev(r3, &(0x7f0000000380)=[{&(0x7f00000003c0)="ea78", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r3, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f0000006cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400122a0, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 2.077592917s ago: executing program 4 (id=381): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0x2}, 0xff32, 0x0}, 0xe07e872420dfefca) sendmsg$kcm(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x4000800) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) close(r1) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x2400c000) 2.076461243s ago: executing program 1 (id=382): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.914496521s ago: executing program 4 (id=383): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="9c00000014", @ANYRES32, @ANYBLOB="08000400ffffffff08000200e0000001140003000000000000000000000000000000000008000a000300000008000400"], 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x41, 0x0, 0x10820, 0x400}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}]}, 0x34}}, 0x4084) 649.65934ms ago: executing program 0 (id=384): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @random="e5db029ea53c"}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6", 0xd}], 0x1, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 649.470339ms ago: executing program 2 (id=385): bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x20000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) socket(0x14, 0x1, 0x4) 17.224319ms ago: executing program 2 (id=386): syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) 16.927154ms ago: executing program 3 (id=388): socket$netlink(0x10, 0x3, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002d0021"], 0x1c}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 16.739695ms ago: executing program 1 (id=389): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x40000) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 0s ago: executing program 4 (id=390): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 65.389428][ T5822] cgroup: Unknown subsys name 'net' [ 65.476817][ T5822] cgroup: Unknown subsys name 'cpuset' [ 65.485401][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.889565][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.329632][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.347226][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.355639][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.363158][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.370624][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.378076][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.387656][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.410244][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.419586][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.426680][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.429250][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.435203][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.441278][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.448747][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.455287][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.464738][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.470173][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.476723][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.482990][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.491203][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.504434][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.510481][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.520852][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.523585][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.537719][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.144826][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 70.198309][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 70.211150][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 70.366893][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 70.395011][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 70.508431][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.517805][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.525221][ T5838] bridge_slave_0: entered allmulticast mode [ 70.532172][ T5838] bridge_slave_0: entered promiscuous mode [ 70.582004][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.589261][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.596531][ T5838] bridge_slave_1: entered allmulticast mode [ 70.603902][ T5838] bridge_slave_1: entered promiscuous mode [ 70.622733][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.629918][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.637174][ T5833] bridge_slave_0: entered allmulticast mode [ 70.644949][ T5833] bridge_slave_0: entered promiscuous mode [ 70.657784][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.664964][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.672084][ T5834] bridge_slave_0: entered allmulticast mode [ 70.680154][ T5834] bridge_slave_0: entered promiscuous mode [ 70.710255][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.719313][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.726572][ T5833] bridge_slave_1: entered allmulticast mode [ 70.733669][ T5833] bridge_slave_1: entered promiscuous mode [ 70.745070][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.752171][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.759859][ T5834] bridge_slave_1: entered allmulticast mode [ 70.766976][ T5834] bridge_slave_1: entered promiscuous mode [ 70.836202][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.846372][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.853736][ T5832] bridge_slave_0: entered allmulticast mode [ 70.860708][ T5832] bridge_slave_0: entered promiscuous mode [ 70.871361][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.884623][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.930992][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.940262][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.947897][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.956003][ T5832] bridge_slave_1: entered allmulticast mode [ 70.962865][ T5832] bridge_slave_1: entered promiscuous mode [ 70.995264][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.005205][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.012313][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.021146][ T5839] bridge_slave_0: entered allmulticast mode [ 71.028796][ T5839] bridge_slave_0: entered promiscuous mode [ 71.039333][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.063175][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.086397][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.099451][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.107135][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.114410][ T5839] bridge_slave_1: entered allmulticast mode [ 71.121327][ T5839] bridge_slave_1: entered promiscuous mode [ 71.141812][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.163705][ T5838] team0: Port device team_slave_0 added [ 71.241594][ T5838] team0: Port device team_slave_1 added [ 71.252700][ T5833] team0: Port device team_slave_0 added [ 71.261087][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.274385][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.286866][ T5834] team0: Port device team_slave_0 added [ 71.295332][ T5832] team0: Port device team_slave_0 added [ 71.328944][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.330173][ T5833] team0: Port device team_slave_1 added [ 71.335441][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.365633][ T5834] team0: Port device team_slave_1 added [ 71.372955][ T5832] team0: Port device team_slave_1 added [ 71.379984][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.387319][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.413387][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.491651][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.498642][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.525355][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.545241][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.552183][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.564382][ T5837] Bluetooth: hci2: command tx timeout [ 71.578972][ T5853] Bluetooth: hci0: command tx timeout [ 71.589291][ T5841] Bluetooth: hci3: command tx timeout [ 71.595074][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.595794][ T5851] Bluetooth: hci1: command tx timeout [ 71.611767][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.618811][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.645338][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.648521][ T5851] Bluetooth: hci4: command tx timeout [ 71.660413][ T5839] team0: Port device team_slave_0 added [ 71.668418][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.675598][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.701646][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.736498][ T5839] team0: Port device team_slave_1 added [ 71.742891][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.749887][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.776029][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.787657][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.794765][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.820792][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.863607][ T5838] hsr_slave_0: entered promiscuous mode [ 71.870430][ T5838] hsr_slave_1: entered promiscuous mode [ 71.896758][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.904018][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.930018][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.969733][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.976862][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.003191][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.064194][ T5833] hsr_slave_0: entered promiscuous mode [ 72.070626][ T5833] hsr_slave_1: entered promiscuous mode [ 72.077539][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.085549][ T5833] Cannot create hsr debugfs directory [ 72.091748][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.098746][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.124878][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.196092][ T5832] hsr_slave_0: entered promiscuous mode [ 72.202415][ T5832] hsr_slave_1: entered promiscuous mode [ 72.208770][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.216410][ T5832] Cannot create hsr debugfs directory [ 72.265913][ T5834] hsr_slave_0: entered promiscuous mode [ 72.272163][ T5834] hsr_slave_1: entered promiscuous mode [ 72.278947][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.287029][ T5834] Cannot create hsr debugfs directory [ 72.376981][ T5839] hsr_slave_0: entered promiscuous mode [ 72.383156][ T5839] hsr_slave_1: entered promiscuous mode [ 72.389434][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.397703][ T5839] Cannot create hsr debugfs directory [ 72.829340][ T5838] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.843022][ T5838] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.855841][ T5838] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.876782][ T5838] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.932205][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.949748][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.962382][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.973176][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.078369][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.105350][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.130349][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.140276][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.216030][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.271503][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.310286][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.317985][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.330554][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.340276][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.358154][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.410086][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.417676][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.428736][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.435844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.478975][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.498498][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.517208][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.529366][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.552238][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.562270][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.569422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.579247][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.619649][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.626750][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.644668][ T5851] Bluetooth: hci1: command tx timeout [ 73.650446][ T5841] Bluetooth: hci2: command tx timeout [ 73.657255][ T5853] Bluetooth: hci3: command tx timeout [ 73.657265][ T5837] Bluetooth: hci0: command tx timeout [ 73.700081][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.724052][ T5853] Bluetooth: hci4: command tx timeout [ 73.746423][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.753621][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.764232][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.771322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.859294][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.962808][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.081872][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.109950][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.127493][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.135000][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.177500][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.184676][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.259365][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.331343][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.361352][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.402282][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.409449][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.477395][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.484576][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.503198][ T5838] veth0_vlan: entered promiscuous mode [ 74.559133][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.592007][ T5838] veth1_vlan: entered promiscuous mode [ 74.649607][ T5833] veth0_vlan: entered promiscuous mode [ 74.721780][ T5833] veth1_vlan: entered promiscuous mode [ 74.736930][ T5838] veth0_macvtap: entered promiscuous mode [ 74.760096][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.770896][ T5838] veth1_macvtap: entered promiscuous mode [ 74.841156][ T5834] veth0_vlan: entered promiscuous mode [ 74.878540][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.927472][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.944271][ T5834] veth1_vlan: entered promiscuous mode [ 75.000414][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.012513][ T5833] veth0_macvtap: entered promiscuous mode [ 75.029952][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.053749][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.062498][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.130872][ T5833] veth1_macvtap: entered promiscuous mode [ 75.179051][ T5834] veth0_macvtap: entered promiscuous mode [ 75.215571][ T5834] veth1_macvtap: entered promiscuous mode [ 75.274992][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.284459][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.297652][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.307961][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.340836][ T61] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365980][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.369587][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.380702][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.397377][ T61] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.410764][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.422772][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.440924][ T61] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469865][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.501424][ T5832] veth0_vlan: entered promiscuous mode [ 75.521646][ T5838] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.551129][ T5832] veth1_vlan: entered promiscuous mode [ 75.558982][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.614102][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.649586][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.668537][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.712403][ T5839] veth0_vlan: entered promiscuous mode [ 75.724761][ T5853] Bluetooth: hci0: command tx timeout [ 75.730574][ T5841] Bluetooth: hci3: command tx timeout [ 75.736404][ T5851] Bluetooth: hci2: command tx timeout [ 75.736457][ T5837] Bluetooth: hci1: command tx timeout [ 75.787263][ T5832] veth0_macvtap: entered promiscuous mode [ 75.793400][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.797492][ T5832] veth1_macvtap: entered promiscuous mode [ 75.801216][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.820948][ T5837] Bluetooth: hci4: command tx timeout [ 75.841788][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.860954][ T5839] veth1_vlan: entered promiscuous mode [ 75.896969][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.898998][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.906299][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.955497][ T70] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.967326][ T70] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.992797][ T70] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.001928][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.012139][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.020552][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.109400][ T5839] veth0_macvtap: entered promiscuous mode [ 76.123157][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.151644][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.168416][ T5839] veth1_macvtap: entered promiscuous mode [ 76.332416][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.349210][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.362573][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.420478][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.436681][ T3558] af_packet: tpacket_rcv: packet too big, clamped from 90 to 4294967286. macoff=82 [ 76.474476][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.484011][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.498550][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.524039][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.583622][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.607031][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.826022][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.860762][ T5968] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10'. [ 76.861096][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.962028][ T5968] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10'. [ 77.027993][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.065689][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.189708][ T5976] netlink: 'syz.0.13': attribute type 3 has an invalid length. [ 77.448020][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.475009][ T5979] syzkaller0: entered promiscuous mode [ 77.482197][ T5979] syzkaller0: entered allmulticast mode [ 77.806410][ T5837] Bluetooth: hci1: command tx timeout [ 77.815394][ T5841] Bluetooth: hci2: command tx timeout [ 77.820808][ T5841] Bluetooth: hci0: command tx timeout [ 77.826360][ T5837] Bluetooth: hci3: command tx timeout [ 77.883951][ T5837] Bluetooth: hci4: command tx timeout [ 79.512105][ T6007] Zero length message leads to an empty skb [ 80.218014][ T6051] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 81.099421][ T6069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.45'. [ 83.001451][ T6117] netlink: 'syz.1.61': attribute type 10 has an invalid length. [ 83.982881][ T6130] netlink: 'syz.4.65': attribute type 3 has an invalid length. [ 84.007329][ T6130] netlink: 'syz.4.65': attribute type 3 has an invalid length. [ 86.700484][ T3082] cfg80211: failed to load regulatory.db [ 88.626449][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030a40800: rx timeout, send abort [ 88.635650][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888030a40800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.121200][ T6219] macvlan0: entered allmulticast mode [ 89.149624][ T6219] netlink: 96 bytes leftover after parsing attributes in process `syz.1.87'. [ 89.759687][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597dcc00: rx timeout, send abort [ 89.768079][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880597dc800: rx timeout, send abort [ 89.777255][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597dcc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 89.791635][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880597dc800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 90.370718][ T6255] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 91.699507][ T6290] netlink: 'syz.2.111': attribute type 10 has an invalid length. [ 91.763406][ T6290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.111'. [ 91.945711][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.953987][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.974570][ T6300] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 91.988023][ T6298] bridge0: entered allmulticast mode [ 92.043634][ T6298] bridge_slave_1: left allmulticast mode [ 92.051345][ T6298] bridge_slave_1: left promiscuous mode [ 92.058392][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.076876][ T6298] bridge_slave_0: left allmulticast mode [ 92.090991][ T6298] bridge_slave_0: left promiscuous mode [ 92.117512][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.316719][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030ef3000: rx timeout, send abort [ 92.824982][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030ef3000: abort rx timeout. Force session deactivation [ 92.871979][ T6322] netlink: 12 bytes leftover after parsing attributes in process `syz.2.123'. [ 93.188835][ T6332] netlink: 'syz.1.128': attribute type 39 has an invalid length. [ 95.560854][ T6389] netlink: 'syz.1.149': attribute type 7 has an invalid length. [ 95.593325][ T6389] netlink: 32 bytes leftover after parsing attributes in process `syz.1.149'. [ 96.187133][ T6415] netlink: 'syz.1.158': attribute type 8 has an invalid length. [ 96.874893][ T6425] syz.2.163 (6425) used greatest stack depth: 19520 bytes left [ 98.227008][ T6455] netlink: 240 bytes leftover after parsing attributes in process `syz.2.171'. [ 98.474101][ T6457] scsi_nl_rcv_msg: discarding partial skb [ 100.131213][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.1.177'. [ 100.149428][ T6491] syz_tun: entered promiscuous mode [ 100.163459][ T6491] macsec1: entered promiscuous mode [ 100.177200][ T6491] syz_tun: left promiscuous mode [ 100.261702][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 100.272235][ T6493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.187'. [ 100.326326][ T6493] vlan2: entered allmulticast mode [ 100.331533][ T6493] hsr0: entered allmulticast mode [ 100.354272][ T6493] hsr_slave_0: entered allmulticast mode [ 100.362824][ T6493] hsr_slave_1: entered allmulticast mode [ 100.752419][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 101.461914][ T6531] netlink: 12 bytes leftover after parsing attributes in process `syz.4.203'. [ 102.165539][ T6555] tipc: Started in network mode [ 102.182790][ T6555] tipc: Node identity 8ae6cf8aa21b, cluster identity 4711 [ 102.224651][ T6555] tipc: Enabled bearer , priority 0 [ 102.361142][ T6555] syzkaller0: entered promiscuous mode [ 102.369297][ T6555] syzkaller0: entered allmulticast mode [ 102.377120][ T6555] tipc: Resetting bearer [ 102.450791][ T36] tipc: Resetting bearer [ 102.460808][ T6554] tipc: Resetting bearer [ 103.327887][ T9] tipc: Node number set to 687722378 [ 104.038366][ T6554] tipc: Disabling bearer [ 104.051803][ T6580] tipc: Started in network mode [ 104.058512][ T6580] tipc: Node identity 4, cluster identity 4711 [ 104.065513][ T6580] tipc: Node number set to 4 [ 104.070701][ T6582] netlink: 96 bytes leftover after parsing attributes in process `syz.0.224'. [ 104.272671][ T6601] netlink: 24 bytes leftover after parsing attributes in process `syz.4.232'. [ 104.857585][ T6626] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 105.252211][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.244'. [ 106.441503][ T6661] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 106.464474][ T6659] xt_CT: No such helper "pptp" [ 106.979527][ T6674] tipc: Enabled bearer , priority 10 [ 107.158965][ T6668] tipc: Resetting bearer [ 107.192439][ T6678] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 107.277933][ T6667] tipc: Resetting bearer [ 109.997057][ T6667] tipc: Disabling bearer [ 110.007579][ T6685] netlink: 'syz.0.261': attribute type 5 has an invalid length. [ 110.050534][ T6711] syz_tun: entered promiscuous mode [ 110.057915][ T6711] macsec1: entered promiscuous mode [ 110.089785][ T6711] syz_tun: left promiscuous mode [ 110.518091][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.276'. [ 110.609317][ T6726] tipc: Enabled bearer , priority 0 [ 110.728873][ T6734] syzkaller0: entered promiscuous mode [ 110.734555][ T6734] syzkaller0: entered allmulticast mode [ 110.742578][ T6734] tipc: Resetting bearer [ 110.810911][ T6725] tipc: Resetting bearer [ 112.230825][ T6725] tipc: Disabling bearer [ 113.140323][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.292'. [ 113.550892][ T6786] netlink: 'syz.0.303': attribute type 8 has an invalid length. [ 115.023752][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 115.233794][ T6828] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.241542][ T6828] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.253680][ T6828] bridge0: entered allmulticast mode [ 115.294942][ T6834] bridge_slave_1: left allmulticast mode [ 115.300609][ T6834] bridge_slave_1: left promiscuous mode [ 115.324503][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.336024][ T6834] bridge_slave_0: left allmulticast mode [ 115.341797][ T6834] bridge_slave_0: left promiscuous mode [ 115.349961][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.535906][ T6838] netlink: 44 bytes leftover after parsing attributes in process `syz.2.309'. [ 116.718306][ T6872] tipc: Enabled bearer , priority 10 [ 116.951551][ T6872] tipc: Resetting bearer [ 117.109821][ T6871] tipc: Resetting bearer [ 118.604332][ T6871] tipc: Disabling bearer [ 118.613763][ T6890] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.621336][ T6890] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.631950][ T6890] bridge0: entered allmulticast mode [ 118.640021][ T6891] bridge_slave_1: left allmulticast mode [ 118.653264][ T6891] bridge_slave_1: left promiscuous mode [ 118.659022][ T6891] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.680516][ T6891] bridge_slave_0: left allmulticast mode [ 118.696687][ T6891] bridge_slave_0: left promiscuous mode [ 118.708921][ T6891] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.985412][ T6937] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.013700][ T6940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.341'. [ 120.249368][ T6946] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.256885][ T6946] IPv6: NLM_F_CREATE should be set when creating new route [ 120.257560][ T6937] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.411141][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 120.426361][ T6937] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.010359][ T6937] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.782888][ T6978] tipc: Failed to remove unknown binding: 66,1,1/687722378:1185680911/1185680912 [ 121.796042][ T6978] tipc: Failed to remove unknown binding: 66,1,1/687722378:1185680911/1185680912 [ 122.586414][ T3558] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.650589][ T36] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.730835][ T3558] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.890025][ T154] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.519035][ T7001] syzkaller0: entered promiscuous mode [ 123.536898][ T7001] syzkaller0: entered allmulticast mode [ 127.903260][ T7080] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 127.957150][ T7082] netlink: 'syz.1.382': attribute type 4 has an invalid length. [ 129.401575][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.421806][ T7071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.756309][ T7094] syzkaller0: entered promiscuous mode [ 129.761925][ T7094] syzkaller0: entered allmulticast mode [ 129.769147][ T61] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.808599][ T61] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.838683][ T7100] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 129.851736][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.388'. [ 129.968985][ T7107] ================================================================== [ 129.977078][ T7107] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 129.984737][ T7107] Read of size 1 at addr ffff8880596a2030 by task syz.2.386/7107 [ 129.992459][ T7107] [ 129.994820][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.2.386 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 129.994845][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 129.994863][ T7107] Call Trace: [ 129.994876][ T7107] [ 129.994886][ T7107] dump_stack_lvl+0x189/0x250 [ 129.994914][ T7107] ? __virt_addr_valid+0x1c8/0x5c0 [ 129.994931][ T7107] ? rcu_is_watching+0x15/0xb0 [ 129.994953][ T7107] ? __kasan_check_byte+0x12/0x40 [ 129.994971][ T7107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.994993][ T7107] ? rcu_is_watching+0x15/0xb0 [ 129.995015][ T7107] ? lock_release+0x4b/0x3e0 [ 129.995037][ T7107] ? __virt_addr_valid+0x1c8/0x5c0 [ 129.995053][ T7107] ? __virt_addr_valid+0x4a5/0x5c0 [ 129.995070][ T7107] print_report+0xd2/0x2b0 [ 129.995091][ T7107] ? rose_get_neigh+0x391/0x990 [ 129.995107][ T7107] kasan_report+0x118/0x150 [ 129.995125][ T7107] ? rose_get_neigh+0x391/0x990 [ 129.995145][ T7107] rose_get_neigh+0x391/0x990 [ 129.995164][ T7107] rose_connect+0x416/0x10a0 [ 129.995185][ T7107] ? __pfx_current_check_access_socket+0x10/0x10 [ 129.995209][ T7107] ? aa_sk_perm+0x81e/0x950 [ 129.995226][ T7107] ? __might_fault+0xb0/0x130 [ 129.995240][ T7107] ? __pfx_rose_connect+0x10/0x10 [ 129.995259][ T7107] ? aa_af_perm+0x290/0x2b0 [ 129.995275][ T7107] ? tomoyo_socket_connect_permission+0x164/0x290 [ 129.995301][ T7107] ? bpf_lsm_socket_connect+0x9/0x20 [ 129.995322][ T7107] __sys_connect+0x313/0x440 [ 129.995343][ T7107] ? __pfx___sys_connect+0x10/0x10 [ 129.995367][ T7107] ? rcu_is_watching+0x15/0xb0 [ 129.995392][ T7107] __x64_sys_connect+0x7a/0x90 [ 129.995411][ T7107] do_syscall_64+0xfa/0x3b0 [ 129.995428][ T7107] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.995444][ T7107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.995459][ T7107] ? clear_bhb_loop+0x60/0xb0 [ 129.995473][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.995487][ T7107] RIP: 0033:0x7fa24d38e929 [ 129.995511][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.995523][ T7107] RSP: 002b:00007fa24e1dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 129.995540][ T7107] RAX: ffffffffffffffda RBX: 00007fa24d5b6080 RCX: 00007fa24d38e929 [ 129.995552][ T7107] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 129.995563][ T7107] RBP: 00007fa24d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 129.995573][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.995581][ T7107] R13: 0000000000000000 R14: 00007fa24d5b6080 R15: 00007fff6d0474a8 [ 129.995599][ T7107] [ 129.995606][ T7107] [ 130.254556][ T7107] Allocated by task 6988: [ 130.258864][ T7107] kasan_save_track+0x3e/0x80 [ 130.263531][ T7107] __kasan_kmalloc+0x93/0xb0 [ 130.268099][ T7107] __kmalloc_cache_noprof+0x230/0x3d0 [ 130.273447][ T7107] rose_add_node+0x23a/0xde0 [ 130.278019][ T7107] rose_rt_ioctl+0xa48/0xfb0 [ 130.282584][ T7107] rose_ioctl+0x3ce/0x8b0 [ 130.286904][ T7107] sock_do_ioctl+0xd9/0x300 [ 130.291385][ T7107] sock_ioctl+0x576/0x790 [ 130.295692][ T7107] __se_sys_ioctl+0xfc/0x170 [ 130.300274][ T7107] do_syscall_64+0xfa/0x3b0 [ 130.304761][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.310631][ T7107] [ 130.312934][ T7107] Freed by task 7050: [ 130.316889][ T7107] kasan_save_track+0x3e/0x80 [ 130.321547][ T7107] kasan_save_free_info+0x46/0x50 [ 130.326552][ T7107] __kasan_slab_free+0x62/0x70 [ 130.331291][ T7107] kfree+0x18e/0x440 [ 130.335167][ T7107] rose_rt_device_down+0x66d/0x6c0 [ 130.340260][ T7107] rose_device_event+0x603/0x6a0 [ 130.345178][ T7107] notifier_call_chain+0x1b3/0x3e0 [ 130.350273][ T7107] __dev_notify_flags+0x18d/0x2e0 [ 130.355281][ T7107] netif_change_flags+0xe8/0x1a0 [ 130.360199][ T7107] dev_change_flags+0x130/0x260 [ 130.365029][ T7107] dev_ioctl+0x7b4/0x1150 [ 130.369338][ T7107] sock_do_ioctl+0x22c/0x300 [ 130.373909][ T7107] sock_ioctl+0x576/0x790 [ 130.378217][ T7107] __se_sys_ioctl+0xfc/0x170 [ 130.382790][ T7107] do_syscall_64+0xfa/0x3b0 [ 130.387278][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.393150][ T7107] [ 130.395454][ T7107] The buggy address belongs to the object at ffff8880596a2000 [ 130.395454][ T7107] which belongs to the cache kmalloc-512 of size 512 [ 130.409485][ T7107] The buggy address is located 48 bytes inside of [ 130.409485][ T7107] freed 512-byte region [ffff8880596a2000, ffff8880596a2200) [ 130.423175][ T7107] [ 130.425481][ T7107] The buggy address belongs to the physical page: [ 130.431881][ T7107] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x596a0 [ 130.440618][ T7107] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.449091][ T7107] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 130.456627][ T7107] page_type: f5(slab) [ 130.460589][ T7107] raw: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 130.469150][ T7107] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 130.477716][ T7107] head: 00fff00000000040 ffff88801a441c80 dead000000000100 dead000000000122 [ 130.486369][ T7107] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 130.495019][ T7107] head: 00fff00000000002 ffffea000165a801 00000000ffffffff 00000000ffffffff [ 130.503668][ T7107] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 130.512320][ T7107] page dumped because: kasan: bad access detected [ 130.518719][ T7107] page_owner tracks the page as allocated [ 130.524411][ T7107] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5838, tgid 5838 (syz-executor), ts 73254974950, free_ts 21050508617 [ 130.545747][ T7107] post_alloc_hook+0x240/0x2a0 [ 130.550496][ T7107] get_page_from_freelist+0x21e4/0x22c0 [ 130.556020][ T7107] __alloc_frozen_pages_noprof+0x181/0x370 [ 130.561803][ T7107] alloc_pages_mpol+0x232/0x4a0 [ 130.566631][ T7107] allocate_slab+0x8a/0x3b0 [ 130.571114][ T7107] ___slab_alloc+0xbfc/0x1480 [ 130.575772][ T7107] __kmalloc_noprof+0x305/0x4f0 [ 130.580603][ T7107] fib6_info_alloc+0x30/0xf0 [ 130.585176][ T7107] ip6_route_info_create+0x142/0x860 [ 130.590448][ T7107] ip6_route_add+0x49/0x1b0 [ 130.594932][ T7107] addrconf_add_dev+0x24f/0x340 [ 130.599762][ T7107] inet6_addr_add+0x1a1/0xc00 [ 130.604418][ T7107] inet6_rtm_newaddr+0x93d/0xd20 [ 130.609341][ T7107] rtnetlink_rcv_msg+0x7cc/0xb70 [ 130.614262][ T7107] netlink_rcv_skb+0x205/0x470 [ 130.619010][ T7107] netlink_unicast+0x758/0x8d0 [ 130.623756][ T7107] page last free pid 1 tgid 1 stack trace: [ 130.629620][ T7107] __free_frozen_pages+0xc71/0xe70 [ 130.634713][ T7107] free_contig_range+0x1bd/0x4a0 [ 130.639633][ T7107] destroy_args+0x7e/0x5d0 [ 130.644061][ T7107] debug_vm_pgtable+0x412/0x450 [ 130.648892][ T7107] do_one_initcall+0x233/0x820 [ 130.653638][ T7107] do_initcall_level+0x137/0x1f0 [ 130.658556][ T7107] do_initcalls+0x69/0xd0 [ 130.662863][ T7107] kernel_init_freeable+0x3d9/0x570 [ 130.668042][ T7107] kernel_init+0x1d/0x1d0 [ 130.672352][ T7107] ret_from_fork+0x3f9/0x770 [ 130.676923][ T7107] ret_from_fork_asm+0x1a/0x30 [ 130.681674][ T7107] [ 130.683976][ T7107] Memory state around the buggy address: [ 130.689582][ T7107] ffff8880596a1f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.697620][ T7107] ffff8880596a1f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.705687][ T7107] >ffff8880596a2000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.713733][ T7107] ^ [ 130.719347][ T7107] ffff8880596a2080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.727388][ T7107] ffff8880596a2100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 130.735424][ T7107] ================================================================== [ 130.743627][ T7107] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.750832][ T7107] CPU: 1 UID: 0 PID: 7107 Comm: syz.2.386 Not tainted 6.16.0-rc2-syzkaller-00850-gab4eb6a25de2 #0 PREEMPT(full) [ 130.762722][ T7107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.772796][ T7107] Call Trace: [ 130.776085][ T7107] [ 130.779022][ T7107] dump_stack_lvl+0x99/0x250 [ 130.783628][ T7107] ? __asan_memcpy+0x40/0x70 [ 130.788253][ T7107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.793464][ T7107] ? __pfx__printk+0x10/0x10 [ 130.798063][ T7107] panic+0x2db/0x790 [ 130.801973][ T7107] ? __pfx_panic+0x10/0x10 [ 130.806401][ T7107] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 130.812301][ T7107] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 130.818198][ T7107] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 130.824529][ T7107] ? print_memory_metadata+0x314/0x400 [ 130.830002][ T7107] ? rose_get_neigh+0x391/0x990 [ 130.834857][ T7107] check_panic_on_warn+0x89/0xb0 [ 130.839841][ T7107] ? rose_get_neigh+0x391/0x990 [ 130.844701][ T7107] end_report+0x78/0x160 [ 130.848945][ T7107] kasan_report+0x129/0x150 [ 130.853447][ T7107] ? rose_get_neigh+0x391/0x990 [ 130.858296][ T7107] rose_get_neigh+0x391/0x990 [ 130.862965][ T7107] rose_connect+0x416/0x10a0 [ 130.867550][ T7107] ? __pfx_current_check_access_socket+0x10/0x10 [ 130.873869][ T7107] ? aa_sk_perm+0x81e/0x950 [ 130.878354][ T7107] ? __might_fault+0xb0/0x130 [ 130.883010][ T7107] ? __pfx_rose_connect+0x10/0x10 [ 130.888019][ T7107] ? aa_af_perm+0x290/0x2b0 [ 130.892509][ T7107] ? tomoyo_socket_connect_permission+0x164/0x290 [ 130.898920][ T7107] ? bpf_lsm_socket_connect+0x9/0x20 [ 130.904204][ T7107] __sys_connect+0x313/0x440 [ 130.908796][ T7107] ? __pfx___sys_connect+0x10/0x10 [ 130.913902][ T7107] ? rcu_is_watching+0x15/0xb0 [ 130.918662][ T7107] __x64_sys_connect+0x7a/0x90 [ 130.923417][ T7107] do_syscall_64+0xfa/0x3b0 [ 130.927905][ T7107] ? lockdep_hardirqs_on+0x9c/0x150 [ 130.933087][ T7107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.939131][ T7107] ? clear_bhb_loop+0x60/0xb0 [ 130.943789][ T7107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.949662][ T7107] RIP: 0033:0x7fa24d38e929 [ 130.954059][ T7107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.973645][ T7107] RSP: 002b:00007fa24e1dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 130.982042][ T7107] RAX: ffffffffffffffda RBX: 00007fa24d5b6080 RCX: 00007fa24d38e929 [ 130.989992][ T7107] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000009 [ 130.997943][ T7107] RBP: 00007fa24d410b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.005897][ T7107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.013871][ T7107] R13: 0000000000000000 R14: 00007fa24d5b6080 R15: 00007fff6d0474a8 [ 131.021834][ T7107] [ 131.025073][ T7107] Kernel Offset: disabled [ 131.029381][ T7107] Rebooting in 86400 seconds..