last executing test programs: 3.026015918s ago: executing program 2 (id=657): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {}, {0xb, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2.803328852s ago: executing program 2 (id=662): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$SEG6(&(0x7f0000001840), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000006c0)="89e7ee127cdad9b4b47380c988ca611811ef27538a34a1bc8b16b55bef2b9e3e2951a5383e95d8220f2e389c8573f879", 0x30}], 0x1) 2.520126043s ago: executing program 1 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x2c, 0x64, 0xf31, 0xfffffffb, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@TCA_CHAIN={0x8, 0xb, 0xc40}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001c40)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0xfff3}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.009786215s ago: executing program 3 (id=672): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) 909.854053ms ago: executing program 0 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x2022, 0x0, 0xffffffffffffffff, 0x10001}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000002080)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="04"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) close(r0) 909.094201ms ago: executing program 4 (id=684): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x28}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) 897.103252ms ago: executing program 2 (id=674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010031bd7004ffdbdf25180000005c0030802400030022f966ca04c513cfedc686d31c4cb10dca3076ddee336d012142827183252c6e1c0003009f845ee64d94e9d14b3cd6b515a792c0e651a1fad348c48d8cc1965e6b93e3ea100001800c000500010000000000000008000300", @ANYRES32=r5], 0x78}, 0x1, 0x0, 0x0, 0x854}, 0x8014) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0xc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x2040000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003b1528bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000300000000000500110001"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 896.307193ms ago: executing program 3 (id=675): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r0, 0x0, 0x11) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00^\x00'], 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 822.61051ms ago: executing program 1 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r1}, 0x10) 700.131415ms ago: executing program 4 (id=677): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000380)=r3, 0x4) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r2, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 668.013905ms ago: executing program 0 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000"], 0x64}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40) 617.779406ms ago: executing program 1 (id=680): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) 617.284364ms ago: executing program 3 (id=681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r1, 0x0, 0x0}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, 0x0, &(0x7f0000000040)=""/177}, 0x20) 544.949863ms ago: executing program 4 (id=682): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582a, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x30, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x800000000008}, 0x4}}, 0xb8}}, 0x40) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00"/27], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000020ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 538.584513ms ago: executing program 2 (id=683): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1fc0}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x6, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 449.921161ms ago: executing program 0 (id=685): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) 425.995967ms ago: executing program 1 (id=686): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000004006c000500e3ffffffffff07000700ac1414aa08000800ac1434"], 0x54}}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01400000000200000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000280)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x2, 0x4, &(0x7f0000000180)=@framed={{0xffffffb4, 0x9, 0x0, 0x0, 0x0, 0x69, 0x10, 0xae}, [@call={0x85, 0x0, 0x0, 0xa7}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x9, 0x405}, 0x8}, 0x94) 425.621865ms ago: executing program 3 (id=687): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f0000000100)="92034724033eea403a", 0x9}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) 408.884808ms ago: executing program 4 (id=688): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r1, r3, 0x4, r4}, 0x10) 324.008899ms ago: executing program 0 (id=689): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 312.70548ms ago: executing program 2 (id=690): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x0, 0x28}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x5}, &(0x7f0000000100)=0x8) 297.885573ms ago: executing program 3 (id=691): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="130000001000000008"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r3, &(0x7f0000000240), 0x0}, 0x20) 294.343844ms ago: executing program 1 (id=701): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000017c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}}, 0x8000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x8, 0x8}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 240.0407ms ago: executing program 4 (id=692): socket(0x40000000015, 0x5, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x60, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x80, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 171.807501ms ago: executing program 1 (id=693): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 165.129525ms ago: executing program 2 (id=694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="019f0700"]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 147.700378ms ago: executing program 0 (id=695): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)='?', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r3, &(0x7f0000000200)=""/189, 0xbd, 0x0, 0x0, 0x0) 83.506124ms ago: executing program 3 (id=696): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) connect$rose(r3, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @null]}, 0x40) 74.751746ms ago: executing program 4 (id=697): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) socket$inet6(0xa, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) 0s ago: executing program 0 (id=698): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x70, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xd, 0x9}, {}, {0x2, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x15, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x404c0c0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.200' (ED25519) to the list of known hosts. [ 65.162397][ T5820] cgroup: Unknown subsys name 'net' [ 65.347527][ T5820] cgroup: Unknown subsys name 'cpuset' [ 65.356637][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.673919][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.599167][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.607347][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.615515][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.622975][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.630966][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.655222][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.663199][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.672881][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.680636][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.680927][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.695885][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.697051][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.703977][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.710972][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.717555][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.724401][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.731975][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.738269][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.748424][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.752279][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.759908][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.767333][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.780659][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.788213][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.801501][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.276119][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 71.300541][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.307040][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.424442][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 71.529490][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.537718][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.546054][ T5836] bridge_slave_0: entered allmulticast mode [ 71.553384][ T5836] bridge_slave_0: entered promiscuous mode [ 71.627203][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.634446][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.641609][ T5836] bridge_slave_1: entered allmulticast mode [ 71.650775][ T5836] bridge_slave_1: entered promiscuous mode [ 71.691951][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 71.737897][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 71.758678][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.771069][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.865911][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.873062][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.880683][ T5835] bridge_slave_0: entered allmulticast mode [ 71.888720][ T5835] bridge_slave_0: entered promiscuous mode [ 71.895670][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 71.929077][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.936394][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.943477][ T5835] bridge_slave_1: entered allmulticast mode [ 71.951579][ T5835] bridge_slave_1: entered promiscuous mode [ 71.966868][ T5836] team0: Port device team_slave_0 added [ 72.023994][ T5836] team0: Port device team_slave_1 added [ 72.066276][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.101950][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.109401][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.117125][ T5831] bridge_slave_0: entered allmulticast mode [ 72.124601][ T5831] bridge_slave_0: entered promiscuous mode [ 72.149722][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.171563][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.178805][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.186402][ T5831] bridge_slave_1: entered allmulticast mode [ 72.193286][ T5831] bridge_slave_1: entered promiscuous mode [ 72.211336][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.218612][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.225973][ T5830] bridge_slave_0: entered allmulticast mode [ 72.232842][ T5830] bridge_slave_0: entered promiscuous mode [ 72.257627][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.264966][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.291061][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.319580][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.330047][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.337668][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.345018][ T5830] bridge_slave_1: entered allmulticast mode [ 72.351884][ T5830] bridge_slave_1: entered promiscuous mode [ 72.374471][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.381418][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.407692][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.428380][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.474122][ T5835] team0: Port device team_slave_0 added [ 72.483087][ T5835] team0: Port device team_slave_1 added [ 72.505152][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.550827][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.557868][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.584736][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.608703][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.628703][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.636480][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.643632][ T5839] bridge_slave_0: entered allmulticast mode [ 72.650685][ T5839] bridge_slave_0: entered promiscuous mode [ 72.669822][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.677144][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.703296][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.716804][ T5831] team0: Port device team_slave_0 added [ 72.736669][ T5830] team0: Port device team_slave_0 added [ 72.742703][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.749928][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.757211][ T5839] bridge_slave_1: entered allmulticast mode [ 72.764160][ T5839] bridge_slave_1: entered promiscuous mode [ 72.799397][ T5836] hsr_slave_0: entered promiscuous mode [ 72.806019][ T5836] hsr_slave_1: entered promiscuous mode [ 72.815110][ T50] Bluetooth: hci4: command tx timeout [ 72.820783][ T50] Bluetooth: hci3: command tx timeout [ 72.823200][ T5831] team0: Port device team_slave_1 added [ 72.826606][ T50] Bluetooth: hci2: command tx timeout [ 72.849668][ T5830] team0: Port device team_slave_1 added [ 72.882726][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.894418][ T50] Bluetooth: hci0: command tx timeout [ 72.904408][ T50] Bluetooth: hci1: command tx timeout [ 72.945423][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.978828][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.986010][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.012205][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.023911][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.031445][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.057681][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.101818][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.109030][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.135008][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.147814][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.155111][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.181405][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.206107][ T5839] team0: Port device team_slave_0 added [ 73.235967][ T5835] hsr_slave_0: entered promiscuous mode [ 73.242157][ T5835] hsr_slave_1: entered promiscuous mode [ 73.248439][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.257431][ T5835] Cannot create hsr debugfs directory [ 73.291730][ T5839] team0: Port device team_slave_1 added [ 73.377260][ T5831] hsr_slave_0: entered promiscuous mode [ 73.383672][ T5831] hsr_slave_1: entered promiscuous mode [ 73.390202][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.397976][ T5831] Cannot create hsr debugfs directory [ 73.414164][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.422915][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.449551][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.462195][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.471191][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.497298][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.514115][ T5830] hsr_slave_0: entered promiscuous mode [ 73.520534][ T5830] hsr_slave_1: entered promiscuous mode [ 73.526604][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.534147][ T5830] Cannot create hsr debugfs directory [ 73.748017][ T5839] hsr_slave_0: entered promiscuous mode [ 73.754197][ T5839] hsr_slave_1: entered promiscuous mode [ 73.760362][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.768005][ T5839] Cannot create hsr debugfs directory [ 74.041982][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.068773][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.091699][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.114282][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.160963][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.170631][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.191636][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.213747][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.298085][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.315807][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.341698][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.361274][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.434644][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.469010][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.477224][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.488806][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.517735][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.565198][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.601838][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.613253][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.639433][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.651646][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.677027][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.699894][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.723350][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.730519][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.773899][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.781060][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.790309][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.797412][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.813778][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.820924][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.895481][ T5842] Bluetooth: hci4: command tx timeout [ 74.895558][ T5153] Bluetooth: hci2: command tx timeout [ 74.900949][ T50] Bluetooth: hci3: command tx timeout [ 74.930248][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.976916][ T50] Bluetooth: hci1: command tx timeout [ 74.976925][ T5153] Bluetooth: hci0: command tx timeout [ 75.010502][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.030407][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.052801][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.078279][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.092862][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.100052][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.152764][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.159918][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.169874][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.176971][ T3517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.194111][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.220627][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.227788][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.237250][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.244441][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.289639][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.296773][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.434033][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.709712][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.749128][ T5831] veth0_vlan: entered promiscuous mode [ 75.832109][ T5831] veth1_vlan: entered promiscuous mode [ 75.938581][ T5831] veth0_macvtap: entered promiscuous mode [ 75.966394][ T5836] veth0_vlan: entered promiscuous mode [ 75.990289][ T5831] veth1_macvtap: entered promiscuous mode [ 76.074088][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.088934][ T5836] veth1_vlan: entered promiscuous mode [ 76.105663][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.121496][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.140465][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.152482][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.170582][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.181495][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.200155][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.209456][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309255][ T5836] veth0_macvtap: entered promiscuous mode [ 76.353728][ T5836] veth1_macvtap: entered promiscuous mode [ 76.368244][ T5830] veth0_vlan: entered promiscuous mode [ 76.379111][ T5835] veth0_vlan: entered promiscuous mode [ 76.393125][ T5830] veth1_vlan: entered promiscuous mode [ 76.481742][ T5835] veth1_vlan: entered promiscuous mode [ 76.512448][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.526007][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.533920][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.567709][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.593347][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.603800][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.612970][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.621758][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.657736][ T5830] veth0_macvtap: entered promiscuous mode [ 76.681673][ T5835] veth0_macvtap: entered promiscuous mode [ 76.693620][ T5835] veth1_macvtap: entered promiscuous mode [ 76.702224][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.703355][ T5830] veth1_macvtap: entered promiscuous mode [ 76.716059][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.731297][ T5839] veth0_vlan: entered promiscuous mode [ 76.776178][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.798318][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.821797][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.823057][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.851628][ T5839] veth1_vlan: entered promiscuous mode [ 76.871668][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.902093][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.911589][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920976][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.930572][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.958992][ T5830] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.972835][ T5830] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.983081][ T5153] Bluetooth: hci2: command tx timeout [ 76.988806][ T5153] Bluetooth: hci3: command tx timeout [ 76.994220][ T5153] Bluetooth: hci4: command tx timeout [ 77.000319][ T5830] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.010062][ T5830] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.055371][ T5842] Bluetooth: hci1: command tx timeout [ 77.060892][ T5153] Bluetooth: hci0: command tx timeout [ 77.064487][ T3467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.082678][ T3467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.277447][ T5839] veth0_macvtap: entered promiscuous mode [ 77.289477][ T5839] veth1_macvtap: entered promiscuous mode [ 77.319293][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.336652][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.382486][ T3517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.410905][ T3517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.503132][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.567213][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.573916][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.601567][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.629571][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644280][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.653997][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.663026][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.742037][ T3467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.766623][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.782390][ T3467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.790708][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.141963][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 78.150401][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2'. [ 78.266878][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.286908][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.366952][ T5975] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.378456][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.416160][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.521841][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.923640][ T5991] syzkaller1: entered promiscuous mode [ 78.930275][ T5991] syzkaller1: entered allmulticast mode [ 79.058536][ T5153] Bluetooth: hci4: command tx timeout [ 79.063983][ T5153] Bluetooth: hci3: command tx timeout [ 79.069641][ T5842] Bluetooth: hci2: command tx timeout [ 79.124138][ T5997] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 79.138420][ T5153] Bluetooth: hci0: command tx timeout [ 79.148725][ T5842] Bluetooth: hci1: command tx timeout [ 79.449939][ T6007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 79.677759][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.25'. [ 80.066500][ T6021] pim6reg1: entered promiscuous mode [ 80.070550][ T6026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.29'. [ 80.071814][ T6021] pim6reg1: entered allmulticast mode [ 80.116006][ T6026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 80.936413][ T6035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 81.463539][ T6065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.672883][ T6068] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 81.710059][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.43'. [ 82.064538][ T6081] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 82.326040][ T6090] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 82.343844][ T6092] trusted_key: syz.2.49 sent an empty control message without MSG_MORE. [ 82.598972][ T6097] Zero length message leads to an empty skb [ 82.913873][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 83.159994][ T6122] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 83.231488][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 83.253343][ T6127] netlink: 16 bytes leftover after parsing attributes in process `syz.1.63'. [ 83.572541][ T6134] tipc: Failed to remove unknown binding: 66,1,1/0:2664181490/2664181492 [ 83.618280][ T6134] tipc: Failed to remove unknown binding: 66,1,1/0:2664181490/2664181492 [ 83.658856][ T6134] tipc: Failed to remove unknown binding: 66,1,1/0:2664181490/2664181492 [ 85.296874][ T5153] Bluetooth: hci4: command tx timeout [ 85.385079][ T6178] netlink: 'syz.4.77': attribute type 12 has an invalid length. [ 85.392878][ T6178] netlink: 'syz.4.77': attribute type 29 has an invalid length. [ 85.411155][ T6178] netlink: 148 bytes leftover after parsing attributes in process `syz.4.77'. [ 85.430719][ T6178] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 85.470154][ T6178] netlink: 'syz.4.77': attribute type 2 has an invalid length. [ 85.488543][ T6178] netlink: 39 bytes leftover after parsing attributes in process `syz.4.77'. [ 85.632865][ T6189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'. [ 86.013711][ T6202] tipc: Failed to remove unknown binding: 66,1,1/0:3205333929/3205333931 [ 86.123533][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.87'. [ 86.345553][ T6219] netlink: 'syz.3.91': attribute type 5 has an invalid length. [ 86.431730][ T6222] netlink: 12 bytes leftover after parsing attributes in process `syz.1.92'. [ 86.622468][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 86.640656][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 86.673141][ T24] cfg80211: failed to load regulatory.db [ 86.823430][ T6201] tipc: Failed to remove unknown binding: 66,1,1/0:3205333929/3205333931 [ 86.854378][ T6201] tipc: Failed to remove unknown binding: 66,1,1/0:3205333929/3205333931 [ 88.291702][ T6278] __nla_validate_parse: 2 callbacks suppressed [ 88.291721][ T6278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.114'. [ 88.333602][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.409962][ T6278] bridge_slave_1 (unregistering): left allmulticast mode [ 88.422533][ T6278] bridge_slave_1 (unregistering): left promiscuous mode [ 88.460706][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.289236][ T6313] netlink: 24 bytes leftover after parsing attributes in process `syz.2.128'. [ 89.322382][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.129'. [ 89.491062][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.132'. [ 89.623218][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.133'. [ 89.763795][ T6331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.817191][ T6331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 89.943801][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 90.338474][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.146'. [ 90.366604][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.146'. [ 90.695750][ T6372] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 90.754082][ T6377] netlink: 'syz.1.153': attribute type 4 has an invalid length. [ 91.831762][ T6420] tipc: Started in network mode [ 91.852556][ T6420] tipc: Node identity f282f53c4e2e, cluster identity 4711 [ 91.885822][ T6420] tipc: Enabled bearer , priority 0 [ 91.947659][ T6420] +: renamed from syzkaller0 [ 92.049510][ T6420] tipc: Disabling bearer [ 92.124560][ T6425] bridge: RTM_NEWNEIGH with invalid ether address [ 92.404034][ T6433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.411527][ T6433] IPv6: NLM_F_CREATE should be set when creating new route [ 92.450441][ T6433] lo: entered allmulticast mode [ 92.475415][ T6433] tunl0: entered allmulticast mode [ 92.482880][ T6433] gre0: entered allmulticast mode [ 92.568765][ T6433] gretap0: entered allmulticast mode [ 92.581604][ T6433] erspan0: entered allmulticast mode [ 92.593449][ T6433] ip_vti0: entered allmulticast mode [ 92.627186][ T6433] ip6_vti0: entered allmulticast mode [ 92.658736][ T6433] sit0: entered allmulticast mode [ 92.693393][ T6433] ip6tnl0: entered allmulticast mode [ 92.712297][ T6433] ip6gre0: entered allmulticast mode [ 92.728168][ T6433] syz_tun: entered allmulticast mode [ 92.739648][ T6433] ip6gretap0: entered allmulticast mode [ 92.751587][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.759762][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.771460][ T6433] bridge0: entered allmulticast mode [ 92.780219][ T6433] vcan0: entered allmulticast mode [ 92.796538][ T6433] bond0: entered allmulticast mode [ 92.811939][ T6433] bond_slave_0: entered allmulticast mode [ 92.818964][ T6433] bond_slave_1: entered allmulticast mode [ 92.858398][ T6433] team0: entered allmulticast mode [ 92.863552][ T6433] team_slave_0: entered allmulticast mode [ 92.901925][ T6433] team_slave_1: entered allmulticast mode [ 92.915631][ T6433] dummy0: entered allmulticast mode [ 92.942428][ T6433] nlmon0: entered allmulticast mode [ 92.962407][ T6433] caif0: entered allmulticast mode [ 92.975277][ T6433] batadv0: entered allmulticast mode [ 92.998589][ T6433] vxcan0: entered allmulticast mode [ 93.005721][ T6433] vxcan1: entered allmulticast mode [ 93.022232][ T6433] veth0: entered allmulticast mode [ 93.053224][ T6433] veth1: entered allmulticast mode [ 93.100038][ T6433] wg0: entered allmulticast mode [ 93.114992][ T6433] wg1: entered allmulticast mode [ 93.127808][ T6433] wg2: entered allmulticast mode [ 93.148330][ T6433] veth0_to_bridge: entered allmulticast mode [ 93.179786][ T6433] veth1_to_bridge: entered allmulticast mode [ 93.199511][ T6433] veth0_to_bond: entered allmulticast mode [ 93.250098][ T6433] veth1_to_bond: entered allmulticast mode [ 93.288515][ T6433] veth0_to_team: entered allmulticast mode [ 93.299982][ T6433] veth1_to_team: entered allmulticast mode [ 93.320073][ T6433] veth0_to_batadv: entered allmulticast mode [ 93.337362][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.350643][ T6433] batadv_slave_0: entered allmulticast mode [ 93.361537][ T6433] veth1_to_batadv: entered allmulticast mode [ 93.376991][ T6433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.389068][ T6433] batadv_slave_1: entered allmulticast mode [ 93.413582][ T6433] xfrm0: entered allmulticast mode [ 93.423956][ T6433] veth0_to_hsr: entered allmulticast mode [ 93.440529][ T6433] hsr_slave_0: entered allmulticast mode [ 93.455635][ T6433] veth1_to_hsr: entered allmulticast mode [ 93.468031][ T6433] hsr_slave_1: entered allmulticast mode [ 93.480135][ T6433] hsr0: entered allmulticast mode [ 93.492073][ T6433] veth1_virt_wifi: entered allmulticast mode [ 93.502586][ T6433] veth0_virt_wifi: entered allmulticast mode [ 93.518185][ T6433] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 93.530472][ T6433] veth1_vlan: entered allmulticast mode [ 93.560839][ T6433] veth0_vlan: entered allmulticast mode [ 93.579711][ T6433] vlan0: entered allmulticast mode [ 93.585169][ T6433] vlan1: entered allmulticast mode [ 93.608949][ T6433] macvlan0: entered allmulticast mode [ 93.645304][ T6433] macvlan1: entered allmulticast mode [ 93.672343][ T6433] ipvlan0: entered allmulticast mode [ 93.688143][ T6433] ipvlan1: entered allmulticast mode [ 93.696893][ T6433] veth1_macvtap: entered allmulticast mode [ 93.706948][ T6433] veth0_macvtap: entered allmulticast mode [ 93.721870][ T6433] macvtap0: entered allmulticast mode [ 93.731306][ T6433] macsec0: entered allmulticast mode [ 93.751189][ T6433] geneve0: entered allmulticast mode [ 93.762776][ T6433] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.773538][ T6433] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.784220][ T6433] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.793390][ T6433] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.803635][ T6433] geneve1: entered allmulticast mode [ 93.812639][ T6433] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 93.820470][ T6433] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 93.828822][ T6433] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 93.839246][ T6433] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 93.849882][ T6433] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 93.877660][ T6433] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 93.899115][ T6433] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 93.912645][ T6433] bridge1: entered allmulticast mode [ 93.921120][ T6433] gre1: entered allmulticast mode [ 93.932111][ T6433] gre2: entered allmulticast mode [ 95.933389][ T6391] Set syz1 is full, maxelem 65536 reached [ 96.324060][ T6471] __nla_validate_parse: 8 callbacks suppressed [ 96.324076][ T6471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.185'. [ 96.559737][ T6487] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 96.608469][ T6487] netlink: 'syz.3.190': attribute type 3 has an invalid length. [ 96.650759][ T6490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 97.834413][ T6532] netlink: 'syz.3.202': attribute type 4 has an invalid length. [ 97.879954][ T6538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 98.067238][ T6547] netlink: 168 bytes leftover after parsing attributes in process `syz.3.207'. [ 98.080619][ T6547] netlink: 168 bytes leftover after parsing attributes in process `syz.3.207'. [ 98.093132][ T6549] tipc: Started in network mode [ 98.099957][ T6549] tipc: Node identity 7f000001, cluster identity 4711 [ 98.119103][ T6549] tipc: Enabled bearer , priority 10 [ 98.774983][ T6577] syzkaller0: entered promiscuous mode [ 98.783542][ T6577] syzkaller0: entered allmulticast mode [ 99.065303][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.224'. [ 99.225836][ T24] tipc: Node number set to 2130706433 [ 99.879463][ T5910] IPVS: starting estimator thread 0... [ 99.881975][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 99.886068][ T6601] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 99.925543][ T6608] netlink: 22 bytes leftover after parsing attributes in process `syz.1.233'. [ 99.953461][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.234'. [ 99.994851][ T6606] IPVS: using max 37 ests per chain, 88800 per kthread [ 100.162824][ T6616] warning: `syz.3.237' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.280208][ T6623] netlink: 'syz.1.240': attribute type 12 has an invalid length. [ 100.395658][ T6627] lo: entered allmulticast mode [ 100.648599][ T6639] netlink: 96 bytes leftover after parsing attributes in process `syz.2.246'. [ 100.789137][ T6626] lo: left allmulticast mode [ 101.149759][ T6660] netlink: 'syz.2.255': attribute type 12 has an invalid length. [ 102.192323][ T6701] netlink: 'syz.3.271': attribute type 12 has an invalid length. [ 102.363377][ T6709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.274'. [ 102.464145][ T6713] tipc: Started in network mode [ 102.469908][ T6713] tipc: Node identity 72f9578cf19f, cluster identity 4711 [ 102.483654][ T6713] tipc: Enabled bearer , priority 0 [ 102.620842][ T6707] syzkaller0: entered promiscuous mode [ 102.626804][ T6707] syzkaller0: entered allmulticast mode [ 102.632952][ T6707] tipc: Resetting bearer [ 102.673951][ T65] tipc: Resetting bearer [ 102.680985][ T6719] tipc: Started in network mode [ 102.686181][ T6719] tipc: Node identity ac1414aa, cluster identity 4711 [ 102.693385][ T6719] tipc: Enabled bearer , priority 10 [ 102.700152][ T6706] tipc: Resetting bearer [ 103.546509][ T5910] tipc: Node number set to 2204522380 [ 103.678317][ T6706] tipc: Disabling bearer [ 103.698268][ T6719] tipc: Enabled bearer , priority 0 [ 103.877388][ T6737] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 104.566275][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.289'. [ 104.804771][ T5910] tipc: Node number set to 2886997162 [ 104.911901][ T6765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 105.107794][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.298'. [ 105.514673][ T6780] af_packet: tpacket_rcv: packet too big, clamped from 56412 to 4294967272. macoff=96 [ 105.572561][ T6782] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 105.578902][ T6788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 105.637941][ T6789] netlink: 'syz.3.303': attribute type 4 has an invalid length. [ 105.801377][ T6797] tipc: Started in network mode [ 105.810569][ T6797] tipc: Node identity 62098b465639, cluster identity 4711 [ 105.845386][ T6797] tipc: Enabled bearer , priority 0 [ 105.886963][ T6792] syzkaller0: MTU too low for tipc bearer [ 105.893316][ T6792] tipc: Disabling bearer [ 105.970210][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880441f4800: rx timeout, send abort [ 105.980845][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df31000: rx timeout, send abort [ 106.285991][ T6816] netlink: 44 bytes leftover after parsing attributes in process `syz.1.313'. [ 106.417741][ T6825] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 106.463729][ T6825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.479277][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880441f4800: abort rx timeout. Force session deactivation [ 106.489584][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805df31000: abort rx timeout. Force session deactivation [ 106.517257][ T6825] ip6erspan0: entered promiscuous mode [ 106.528209][ T6825] bond1: (slave ip6erspan0): making interface the new active one [ 106.538028][ T6825] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 106.827497][ T6840] syz_tun: entered allmulticast mode [ 106.849956][ T6839] syz_tun: left allmulticast mode [ 107.031355][ T6855] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 107.269562][ T6865] syzkaller0: entered promiscuous mode [ 107.276500][ T6865] syzkaller0: entered allmulticast mode [ 107.289348][ T6865] tipc: Enabled bearer , priority 0 [ 107.301551][ T6864] tipc: Resetting bearer [ 107.322133][ T6864] tipc: Disabling bearer [ 108.184978][ T6893] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 108.199086][ T6893] syzkaller0: Linktype set failed because interface is up [ 109.402119][ T6927] bridge_slave_0: left allmulticast mode [ 109.412881][ T6927] bridge_slave_0: left promiscuous mode [ 109.421226][ T6927] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.459181][ T6927] bridge_slave_1: left allmulticast mode [ 109.476933][ T6927] bridge_slave_1: left promiscuous mode [ 109.500464][ T6927] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.531535][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 109.550192][ T6927] bond0: (slave bond_slave_0): Releasing backup interface [ 109.566768][ T6927] bond0: (slave bond_slave_1): Releasing backup interface [ 109.596463][ T6927] team0: Port device team_slave_0 removed [ 109.621773][ T6927] team0: Port device team_slave_1 removed [ 109.628691][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.637198][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.651720][ T6927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.659825][ T6927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.710697][ T6930] bridge0: port 1(vlan2) entered blocking state [ 109.721198][ T6930] bridge0: port 1(vlan2) entered disabled state [ 109.729697][ T6930] vlan2: entered allmulticast mode [ 109.740519][ T6930] bond0: entered allmulticast mode [ 109.750217][ T6930] vlan2: entered promiscuous mode [ 109.758236][ T6930] bond0: entered promiscuous mode [ 109.882098][ T6944] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 109.897478][ T6947] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 109.969344][ T6956] netlink: 'syz.1.360': attribute type 13 has an invalid length. [ 110.263065][ T6956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 110.332705][ T6970] bridge: RTM_NEWNEIGH with invalid ether address [ 110.576015][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.644229][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.709084][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.190380][ T7004] netlink: 24 bytes leftover after parsing attributes in process `syz.3.380'. [ 111.213492][ T7004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 111.311579][ T7007] netlink: 4 bytes leftover after parsing attributes in process `syz.1.382'. [ 111.524170][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.388'. [ 111.533257][ T7021] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'. [ 111.784034][ T7031] netlink: 88 bytes leftover after parsing attributes in process `syz.3.393'. [ 111.946574][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043c94400: rx timeout, send abort [ 111.955068][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b6b000: rx timeout, send abort [ 111.969768][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.394'. [ 112.281308][ T5910] IPVS: starting estimator thread 0... [ 112.287725][ T7055] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 112.374685][ T7060] IPVS: using max 28 ests per chain, 67200 per kthread [ 112.401421][ T7065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 112.412843][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.1.406'. [ 112.454836][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043c94400: abort rx timeout. Force session deactivation [ 112.465190][ C0] vcan0: j1939_tp_rxtimer: 0xffff888043b6b000: abort rx timeout. Force session deactivation [ 112.819795][ T7080] batman_adv: batadv0: Adding interface: dummy0 [ 112.826239][ T7080] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.852886][ T7080] batman_adv: batadv0: Interface activated: dummy0 [ 112.893260][ T7077] batadv0: mtu less than device minimum [ 112.902625][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.914691][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.926636][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.938504][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.950404][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.962348][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.974205][ T7077] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 113.086286][ T7086] tipc: Enabled bearer , priority 0 [ 113.199577][ T7086] syzkaller0: entered promiscuous mode [ 113.208957][ T7086] syzkaller0: entered allmulticast mode [ 113.231905][ T7086] tipc: Resetting bearer [ 113.347162][ T7085] tipc: Resetting bearer [ 114.716677][ T7085] tipc: Disabling bearer [ 114.865592][ T7139] __nla_validate_parse: 1 callbacks suppressed [ 114.865609][ T7139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.429'. [ 115.791053][ T7184] lo: entered allmulticast mode [ 115.800571][ T7182] lo: left allmulticast mode [ 116.125148][ T7197] syzkaller0: entered promiscuous mode [ 116.130665][ T7197] syzkaller0: entered allmulticast mode [ 116.673954][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcd3400: rx timeout, send abort [ 117.185773][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805dcd3400: abort rx timeout. Force session deactivation [ 117.724051][ T7239] syz_tun: entered allmulticast mode [ 117.789636][ T7245] syzkaller0: entered promiscuous mode [ 117.817651][ T7245] syzkaller0: entered allmulticast mode [ 117.846234][ T7236] syz_tun: left allmulticast mode [ 118.209436][ T7268] netlink: 'syz.0.463': attribute type 4 has an invalid length. [ 118.236405][ T7268] netlink: 'syz.0.463': attribute type 4 has an invalid length. [ 120.391326][ T7285] batman_adv: batadv0: Adding interface: dummy0 [ 120.398389][ T7285] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.424011][ T7285] batman_adv: batadv0: Interface activated: dummy0 [ 120.448416][ T7286] net_ratelimit: 13 callbacks suppressed [ 120.448431][ T7286] batadv0: mtu less than device minimum [ 120.471436][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.483348][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.495284][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.507111][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.518393][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.529521][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.540656][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.551769][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.562888][ T7286] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 120.683542][ T7292] bridge: RTM_NEWNEIGH with invalid ether address [ 121.046842][ T9] IPVS: starting estimator thread 0... [ 121.146457][ T7314] bridge_slave_0: left promiscuous mode [ 121.155915][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.172463][ T7314] bridge_slave_1: left promiscuous mode [ 121.180091][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.184530][ T7309] IPVS: using max 31 ests per chain, 74400 per kthread [ 121.203268][ T7314] bond0: (slave bond_slave_0): Releasing backup interface [ 121.213423][ T7314] bond0: (slave bond_slave_1): Releasing backup interface [ 121.235749][ T7314] team0: Port device team_slave_0 removed [ 121.243967][ T7314] team0: Port device team_slave_1 removed [ 121.260565][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.273954][ T7314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.289791][ T7314] bond1: (slave ip6erspan0): Releasing active interface [ 121.322908][ T7316] bridge0: port 1(vlan2) entered blocking state [ 121.333311][ T7316] bridge0: port 1(vlan2) entered disabled state [ 121.339858][ T7316] vlan2: entered allmulticast mode [ 121.351126][ T7323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 121.353408][ T7316] vlan2: entered promiscuous mode [ 121.368674][ T7316] bond0: entered promiscuous mode [ 121.529598][ T7327] netlink: 88 bytes leftover after parsing attributes in process `syz.4.485'. [ 122.308323][ T7359] batman_adv: batadv0: Interface deactivated: dummy0 [ 122.319074][ T7359] batman_adv: batadv0: Removing interface: dummy0 [ 122.407477][ T7359] bridge_slave_0: left allmulticast mode [ 122.430468][ T7359] bridge_slave_0: left promiscuous mode [ 122.441068][ T7359] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.472009][ T7359] bond0: (slave bond_slave_0): Releasing backup interface [ 122.496291][ T7359] bond0: (slave bond_slave_1): Releasing backup interface [ 122.545319][ T7359] team0: Port device team_slave_0 removed [ 122.597307][ T7366] nbd1: detected capacity change from 0 to 63 [ 122.611163][ T7359] team0: Port device team_slave_1 removed [ 122.623824][ T7367] block nbd1: NBD_DISCONNECT [ 122.625303][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.635564][ T7367] block nbd1: Disconnected due to user request. [ 122.642922][ T7367] block nbd1: shutting down sockets [ 122.652599][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.699130][ T7359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.711633][ T7359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.783993][ T7362] bridge0: port 1(vlan2) entered blocking state [ 122.799583][ T7362] bridge0: port 1(vlan2) entered disabled state [ 122.808360][ T7362] vlan2: entered allmulticast mode [ 122.813624][ T7362] bond0: entered allmulticast mode [ 122.822319][ T7362] vlan2: entered promiscuous mode [ 122.827523][ T7362] bond0: entered promiscuous mode [ 122.993953][ T7387] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 123.007468][ T7387] netlink: 40 bytes leftover after parsing attributes in process `syz.2.507'. [ 123.054773][ T7387] team0: Port device geneve0 added [ 123.257788][ T7397] tipc: Enabled bearer , priority 0 [ 123.310430][ T7397] syzkaller0: entered promiscuous mode [ 123.316100][ T7397] syzkaller0: entered allmulticast mode [ 123.322409][ T7397] tipc: Resetting bearer [ 123.341318][ T7396] tipc: Resetting bearer [ 124.565084][ T7396] tipc: Disabling bearer [ 124.614245][ T7414] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 124.621950][ T7414] syzkaller0: Linktype set failed because interface is up [ 126.003602][ T7428] bridge_slave_0: left allmulticast mode [ 126.011046][ T7428] bridge_slave_0: left promiscuous mode [ 126.017238][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.027202][ T7428] bridge_slave_1: left allmulticast mode [ 126.033014][ T7428] bridge_slave_1: left promiscuous mode [ 126.041402][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.059527][ T7428] bond0: (slave bond_slave_0): Releasing backup interface [ 126.070566][ T7428] bond0: (slave bond_slave_1): Releasing backup interface [ 126.109051][ T7428] team0: Port device team_slave_0 removed [ 126.123626][ T7428] team0: Port device team_slave_1 removed [ 126.142284][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.153317][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.177359][ T7428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.210474][ T7428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.252855][ T7432] bridge0: port 1(vlan2) entered blocking state [ 126.259571][ T7432] bridge0: port 1(vlan2) entered disabled state [ 126.267909][ T7432] vlan2: entered allmulticast mode [ 126.273141][ T7432] bond0: entered allmulticast mode [ 126.280972][ T7432] vlan2: entered promiscuous mode [ 126.287670][ T7432] bond0: entered promiscuous mode [ 126.372568][ T65] tipc: Resetting bearer [ 126.850698][ T7464] net_ratelimit: 11 callbacks suppressed [ 126.850716][ T7464] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 127.681163][ T7483] sit0: entered promiscuous mode [ 127.727224][ T7483] netlink: 'syz.1.551': attribute type 1 has an invalid length. [ 127.735099][ T7483] netlink: 1 bytes leftover after parsing attributes in process `syz.1.551'. [ 129.493191][ T7520] syzkaller0: entered promiscuous mode [ 129.500717][ T7520] syzkaller0: entered allmulticast mode [ 130.381108][ T7446] Set syz1 is full, maxelem 65536 reached [ 131.322258][ T7552] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.427828][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 131.470187][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.2.569'. [ 131.571812][ T7564] tipc: Enabled bearer , priority 0 [ 131.589929][ T7567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 131.771257][ T7564] syzkaller0: entered promiscuous mode [ 131.782434][ T7564] syzkaller0: entered allmulticast mode [ 131.788811][ T7564] tipc: Resetting bearer [ 131.837294][ T7563] tipc: Resetting bearer [ 132.031774][ T7578] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 132.411657][ T7586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.580'. [ 132.739364][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746022][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.760842][ T7563] tipc: Disabling bearer [ 134.888000][ T7586] macvlan2: entered promiscuous mode [ 134.893335][ T7586] macvlan2: entered allmulticast mode [ 134.927535][ T7586] batadv0: entered promiscuous mode [ 134.932937][ T7586] batadv0: entered allmulticast mode [ 134.948453][ T7586] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.979275][ T7586] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 135.129851][ T7598] vlan3: entered promiscuous mode [ 135.141435][ T7598] vlan3: entered allmulticast mode [ 135.148005][ T7598] hsr_slave_1: entered allmulticast mode [ 135.160577][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 135.542009][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.586'. [ 135.566482][ T7612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.587'. [ 135.581200][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.586'. [ 135.999961][ T7562] Set syz1 is full, maxelem 65536 reached [ 136.119536][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.3.599'. [ 136.169834][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.4.600'. [ 136.418568][ T7654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 136.484087][ T7655] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 137.822812][ T7683] netlink: 'syz.3.615': attribute type 10 has an invalid length. [ 137.839074][ T7678] nbd2: detected capacity change from 0 to 63 [ 137.848185][ T7683] netlink: 40 bytes leftover after parsing attributes in process `syz.3.615'. [ 137.862552][ T7685] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 137.870823][ T7686] block nbd2: NBD_DISCONNECT [ 137.878487][ T7683] geneve0: left allmulticast mode [ 137.884752][ T7683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.894426][ T7686] block nbd2: Disconnected due to user request. [ 137.900685][ T7686] block nbd2: shutting down sockets [ 137.906208][ T7683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.915653][ T7683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.931132][ T7691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.932207][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 137.949805][ T7683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.969953][ T7683] geneve0: entered allmulticast mode [ 137.976146][ T7683] team0: Port device geneve0 added [ 138.023917][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.101511][ T7689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.445026][ T7715] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 138.657675][ T7721] sit0: entered promiscuous mode [ 138.662768][ T7721] sit0: left allmulticast mode [ 138.668681][ T7721] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 138.798228][ T7729] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 139.270448][ T7738] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.281548][ T7738] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.294409][ T7738] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.303296][ T7738] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.354268][ T7738] batadv0: left allmulticast mode [ 139.381798][ T7749] tipc: Enabled bearer , priority 0 [ 139.483207][ T7752] syzkaller0: entered promiscuous mode [ 139.488897][ T7752] syzkaller0: entered allmulticast mode [ 139.495331][ T7752] tipc: Resetting bearer [ 139.555895][ T7740] tipc: Resetting bearer [ 139.650735][ T7764] xt_ecn: cannot match TCP bits for non-tcp packets [ 140.414999][ T9] tipc: Node number set to 3165451580 [ 140.705986][ T7740] tipc: Disabling bearer [ 140.872434][ T7789] __nla_validate_parse: 2 callbacks suppressed [ 140.872452][ T7789] netlink: 24 bytes leftover after parsing attributes in process `syz.3.648'. [ 140.932786][ T7787] syzkaller0: entered allmulticast mode [ 140.944198][ T7793] netlink: 24 bytes leftover after parsing attributes in process `syz.1.650'. [ 140.946177][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.648'. [ 141.006739][ T7787] syzkaller0 (unregistering): left allmulticast mode [ 141.222656][ T7801] netlink: 44 bytes leftover after parsing attributes in process `syz.2.657'. [ 141.510173][ T7819] tipc: Enabled bearer , priority 0 [ 141.520240][ T7821] netlink: 12 bytes leftover after parsing attributes in process `syz.4.665'. [ 141.593776][ T7819] syzkaller0: entered promiscuous mode [ 141.620803][ T7819] syzkaller0: entered allmulticast mode [ 141.642450][ T7819] tipc: Resetting bearer [ 141.716187][ T7834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.668'. [ 141.728056][ T7832] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 141.748637][ T7821] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 141.827062][ T7818] tipc: Resetting bearer [ 141.907535][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 141.960721][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.670'. [ 143.129189][ T7818] tipc: Disabling bearer [ 143.597903][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.679'. [ 143.621920][ T7869] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 143.953006][ T7888] tipc: Enabled bearer , priority 10 [ 143.966429][ T7888] tipc: Enabled bearer , priority 0 [ 144.100331][ T7896] syzkaller0: entered promiscuous mode [ 144.109791][ T7894] netlink: 'syz.1.693': attribute type 1 has an invalid length. [ 144.117687][ T7896] syzkaller0: entered allmulticast mode [ 144.175955][ T7894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.195808][ T7904] ip6erspan0: entered promiscuous mode [ 144.208023][ T7904] bond1: (slave ip6erspan0): making interface the new active one [ 144.226042][ T7904] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 144.235908][ T7896] tipc: Enabled bearer , priority 0 [ 144.256429][ T7903] ================================================================== [ 144.264513][ T7903] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 144.272178][ T7903] Read of size 1 at addr ffff8880347ef830 by task syz.3.696/7903 [ 144.279895][ T7903] [ 144.282233][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.3.696 Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 144.282252][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.282267][ T7903] Call Trace: [ 144.282273][ T7903] [ 144.282281][ T7903] dump_stack_lvl+0x189/0x250 [ 144.282305][ T7903] ? __virt_addr_valid+0x1c8/0x5c0 [ 144.282320][ T7903] ? rcu_is_watching+0x15/0xb0 [ 144.282340][ T7903] ? __kasan_check_byte+0x12/0x40 [ 144.282355][ T7903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.282374][ T7903] ? rcu_is_watching+0x15/0xb0 [ 144.282394][ T7903] ? lock_release+0x4b/0x3e0 [ 144.282414][ T7903] ? __virt_addr_valid+0x1c8/0x5c0 [ 144.282427][ T7903] ? __virt_addr_valid+0x4a5/0x5c0 [ 144.282442][ T7903] print_report+0xd2/0x2b0 [ 144.282459][ T7903] ? rose_get_neigh+0x391/0x990 [ 144.282478][ T7903] kasan_report+0x118/0x150 [ 144.282492][ T7903] ? rose_get_neigh+0x391/0x990 [ 144.282514][ T7903] rose_get_neigh+0x391/0x990 [ 144.282536][ T7903] rose_connect+0x416/0x10a0 [ 144.282553][ T7903] ? __pfx_current_check_access_socket+0x10/0x10 [ 144.282572][ T7903] ? aa_sk_perm+0x81e/0x950 [ 144.282587][ T7903] ? __might_fault+0xb0/0x130 [ 144.282599][ T7903] ? __pfx_rose_connect+0x10/0x10 [ 144.282615][ T7903] ? aa_af_perm+0x210/0x2b0 [ 144.282629][ T7903] ? tomoyo_socket_connect_permission+0x164/0x290 [ 144.282651][ T7903] ? bpf_lsm_socket_connect+0x9/0x20 [ 144.282670][ T7903] __sys_connect+0x313/0x440 [ 144.282686][ T7903] ? __pfx___sys_connect+0x10/0x10 [ 144.282705][ T7903] ? rcu_is_watching+0x15/0xb0 [ 144.282727][ T7903] __x64_sys_connect+0x7a/0x90 [ 144.282741][ T7903] do_syscall_64+0xfa/0x3b0 [ 144.282761][ T7903] ? lockdep_hardirqs_on+0x9c/0x150 [ 144.282780][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.282794][ T7903] ? clear_bhb_loop+0x60/0xb0 [ 144.282809][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.282823][ T7903] RIP: 0033:0x7f80f1f8e929 [ 144.282840][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.282855][ T7903] RSP: 002b:00007f80f2eb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 144.282872][ T7903] RAX: ffffffffffffffda RBX: 00007f80f21b5fa0 RCX: 00007f80f1f8e929 [ 144.282883][ T7903] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 144.282892][ T7903] RBP: 00007f80f2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 144.282901][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 144.282910][ T7903] R13: 0000000000000000 R14: 00007f80f21b5fa0 R15: 00007ffed6b68c58 [ 144.282927][ T7903] [ 144.282932][ T7903] [ 144.542022][ T7903] Allocated by task 7562: [ 144.546336][ T7903] kasan_save_track+0x3e/0x80 [ 144.551011][ T7903] __kasan_kmalloc+0x93/0xb0 [ 144.555595][ T7903] __kmalloc_noprof+0x27a/0x4f0 [ 144.560429][ T7903] hash_netnet4_add+0x1f5d/0x2770 [ 144.565440][ T7903] hash_netnet4_uadt+0xb0b/0xe40 [ 144.570364][ T7903] call_ad+0x383/0xb00 [ 144.574417][ T7903] ip_set_ad+0x791/0x930 [ 144.578644][ T7903] nfnetlink_rcv_msg+0xb4d/0x1130 [ 144.583662][ T7903] netlink_rcv_skb+0x205/0x470 [ 144.588411][ T7903] nfnetlink_rcv+0x26a/0x2520 [ 144.593075][ T7903] netlink_unicast+0x758/0x8d0 [ 144.597828][ T7903] netlink_sendmsg+0x805/0xb30 [ 144.602590][ T7903] __sock_sendmsg+0x219/0x270 [ 144.607269][ T7903] ____sys_sendmsg+0x505/0x830 [ 144.612021][ T7903] ___sys_sendmsg+0x21f/0x2a0 [ 144.616686][ T7903] __x64_sys_sendmsg+0x19b/0x260 [ 144.621613][ T7903] do_syscall_64+0xfa/0x3b0 [ 144.626111][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.631993][ T7903] [ 144.634310][ T7903] Freed by task 7562: [ 144.638273][ T7903] kasan_save_track+0x3e/0x80 [ 144.642945][ T7903] kasan_save_free_info+0x46/0x50 [ 144.647962][ T7903] __kasan_slab_free+0x62/0x70 [ 144.652716][ T7903] kfree+0x18e/0x440 [ 144.656609][ T7903] hash_netnet4_resize+0x196d/0x1c20 [ 144.661883][ T7903] call_ad+0x44b/0xb00 [ 144.666029][ T7903] ip_set_ad+0x791/0x930 [ 144.670258][ T7903] nfnetlink_rcv_msg+0xb4d/0x1130 [ 144.675276][ T7903] netlink_rcv_skb+0x205/0x470 [ 144.680550][ T7903] nfnetlink_rcv+0x26a/0x2520 [ 144.685222][ T7903] netlink_unicast+0x758/0x8d0 [ 144.689971][ T7903] netlink_sendmsg+0x805/0xb30 [ 144.694726][ T7903] __sock_sendmsg+0x219/0x270 [ 144.699397][ T7903] ____sys_sendmsg+0x505/0x830 [ 144.704148][ T7903] ___sys_sendmsg+0x21f/0x2a0 [ 144.708812][ T7903] __x64_sys_sendmsg+0x19b/0x260 [ 144.713739][ T7903] do_syscall_64+0xfa/0x3b0 [ 144.718235][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.724114][ T7903] [ 144.726425][ T7903] The buggy address belongs to the object at ffff8880347ef800 [ 144.726425][ T7903] which belongs to the cache kmalloc-512 of size 512 [ 144.740461][ T7903] The buggy address is located 48 bytes inside of [ 144.740461][ T7903] freed 512-byte region [ffff8880347ef800, ffff8880347efa00) [ 144.754156][ T7903] [ 144.756466][ T7903] The buggy address belongs to the physical page: [ 144.762861][ T7903] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x347ec [ 144.771620][ T7903] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 144.780274][ T7903] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 144.788247][ T7903] page_type: f5(slab) [ 144.792218][ T7903] raw: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 144.800787][ T7903] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 144.809356][ T7903] head: 00fff00000000040 ffff88801a441c80 0000000000000000 dead000000000001 [ 144.818013][ T7903] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 144.826667][ T7903] head: 00fff00000000002 ffffea0000d1fb01 00000000ffffffff 00000000ffffffff [ 144.835324][ T7903] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 144.843978][ T7903] page dumped because: kasan: bad access detected [ 144.850467][ T7903] page_owner tracks the page as allocated [ 144.856166][ T7903] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 41755653922, free_ts 35888658625 [ 144.876902][ T7903] post_alloc_hook+0x240/0x2a0 [ 144.881658][ T7903] get_page_from_freelist+0x21e4/0x22c0 [ 144.887191][ T7903] __alloc_frozen_pages_noprof+0x181/0x370 [ 144.892988][ T7903] alloc_pages_mpol+0x232/0x4a0 [ 144.897824][ T7903] allocate_slab+0x8a/0x3b0 [ 144.902358][ T7903] ___slab_alloc+0xbfc/0x1480 [ 144.907058][ T7903] __kmalloc_cache_noprof+0x296/0x3d0 [ 144.912423][ T7903] kernfs_fop_open+0x397/0xca0 [ 144.917188][ T7903] do_dentry_open+0xdf0/0x1970 [ 144.921947][ T7903] vfs_open+0x3b/0x340 [ 144.926010][ T7903] path_openat+0x2ee5/0x3830 [ 144.930602][ T7903] do_filp_open+0x1fa/0x410 [ 144.935113][ T7903] do_sys_openat2+0x121/0x1c0 [ 144.939893][ T7903] __x64_sys_openat+0x138/0x170 [ 144.944757][ T7903] do_syscall_64+0xfa/0x3b0 [ 144.949267][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.955153][ T7903] page last free pid 5215 tgid 5215 stack trace: [ 144.961466][ T7903] __free_frozen_pages+0xc71/0xe70 [ 144.966568][ T7903] __slab_free+0x326/0x400 [ 144.970977][ T7903] qlist_free_all+0x97/0x140 [ 144.975564][ T7903] kasan_quarantine_reduce+0x148/0x160 [ 144.981018][ T7903] __kasan_slab_alloc+0x22/0x80 [ 144.985857][ T7903] __kmalloc_noprof+0x224/0x4f0 [ 144.990695][ T7903] tomoyo_realpath_from_path+0xe3/0x5d0 [ 144.996236][ T7903] tomoyo_path_perm+0x213/0x4b0 [ 145.001080][ T7903] security_inode_getattr+0x12f/0x330 [ 145.006444][ T7903] __x64_sys_newfstat+0xfc/0x200 [ 145.011371][ T7903] do_syscall_64+0xfa/0x3b0 [ 145.015871][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.021751][ T7903] [ 145.024058][ T7903] Memory state around the buggy address: [ 145.029685][ T7903] ffff8880347ef700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.037761][ T7903] ffff8880347ef780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 145.045813][ T7903] >ffff8880347ef800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.053856][ T7903] ^ [ 145.059472][ T7903] ffff8880347ef880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.067524][ T7903] ffff8880347ef900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.075568][ T7903] ================================================================== [ 145.083797][ T7903] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 145.091009][ T7903] CPU: 0 UID: 0 PID: 7903 Comm: syz.3.696 Not tainted 6.16.0-rc3-syzkaller-00117-g8550821a1535 #0 PREEMPT(full) [ 145.102910][ T7903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.112983][ T7903] Call Trace: [ 145.116275][ T7903] [ 145.119216][ T7903] dump_stack_lvl+0x99/0x250 [ 145.123828][ T7903] ? __asan_memcpy+0x40/0x70 [ 145.128438][ T7903] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.133658][ T7903] ? __pfx__printk+0x10/0x10 [ 145.138266][ T7903] panic+0x2db/0x790 [ 145.142185][ T7903] ? __pfx_panic+0x10/0x10 [ 145.146614][ T7903] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 145.152497][ T7903] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 145.158376][ T7903] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 145.164687][ T7903] ? print_memory_metadata+0x314/0x400 [ 145.170140][ T7903] ? rose_get_neigh+0x391/0x990 [ 145.174976][ T7903] check_panic_on_warn+0x89/0xb0 [ 145.179899][ T7903] ? rose_get_neigh+0x391/0x990 [ 145.184752][ T7903] end_report+0x78/0x160 [ 145.188990][ T7903] kasan_report+0x129/0x150 [ 145.193477][ T7903] ? rose_get_neigh+0x391/0x990 [ 145.198324][ T7903] rose_get_neigh+0x391/0x990 [ 145.203008][ T7903] rose_connect+0x416/0x10a0 [ 145.207583][ T7903] ? __pfx_current_check_access_socket+0x10/0x10 [ 145.213893][ T7903] ? aa_sk_perm+0x81e/0x950 [ 145.218378][ T7903] ? __might_fault+0xb0/0x130 [ 145.223038][ T7903] ? __pfx_rose_connect+0x10/0x10 [ 145.228047][ T7903] ? aa_af_perm+0x210/0x2b0 [ 145.232535][ T7903] ? tomoyo_socket_connect_permission+0x164/0x290 [ 145.238960][ T7903] ? bpf_lsm_socket_connect+0x9/0x20 [ 145.244262][ T7903] __sys_connect+0x313/0x440 [ 145.248854][ T7903] ? __pfx___sys_connect+0x10/0x10 [ 145.253954][ T7903] ? rcu_is_watching+0x15/0xb0 [ 145.258715][ T7903] __x64_sys_connect+0x7a/0x90 [ 145.263479][ T7903] do_syscall_64+0xfa/0x3b0 [ 145.267980][ T7903] ? lockdep_hardirqs_on+0x9c/0x150 [ 145.273192][ T7903] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.279270][ T7903] ? clear_bhb_loop+0x60/0xb0 [ 145.283964][ T7903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.289871][ T7903] RIP: 0033:0x7f80f1f8e929 [ 145.294292][ T7903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.313899][ T7903] RSP: 002b:00007f80f2eb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 145.322298][ T7903] RAX: ffffffffffffffda RBX: 00007f80f21b5fa0 RCX: 00007f80f1f8e929 [ 145.330253][ T7903] RDX: 000000000000001c RSI: 0000200000000040 RDI: 0000000000000008 [ 145.338206][ T7903] RBP: 00007f80f2010b39 R08: 0000000000000000 R09: 0000000000000000 [ 145.346158][ T7903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.354111][ T7903] R13: 0000000000000000 R14: 00007f80f21b5fa0 R15: 00007ffed6b68c58 [ 145.362068][ T7903] [ 145.365310][ T7903] Kernel Offset: disabled [ 145.369622][ T7903] Rebooting in 86400 seconds..