last executing test programs: 9.289830912s ago: executing program 0 (id=254): unshare(0x6a040000) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000005) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000001080)='cdg\x00', 0x4) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast2}}}], 0x20}, 0x80) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x91081000) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="b2", 0x1, 0x24008844, &(0x7f0000000040)={0xa, 0x2, 0x80398, @empty, 0xfffffffe}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xd, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', r1, 0xe}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000010c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001180)="009fc3e8a42c8d01fc4ebeb6c15e4b166c541d808cdd6524cc2319725dd45208cd8be28cb104e3d0f056240c324ba0", 0x2f) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700", @ANYRES32, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c001780"], 0x138}}, 0x0) shutdown(r2, 0x1) 5.809205642s ago: executing program 2 (id=265): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed", 0xd}, {0x0}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 4.734427839s ago: executing program 2 (id=268): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) recvmmsg(r0, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) close(0x4) 4.455917631s ago: executing program 1 (id=270): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x38, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x38}, 0x8, 0x3000000000002, 0x0, 0x20000}, 0x844) 4.405891485s ago: executing program 3 (id=271): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000400000000000f0400000000005f00"], 0x0, 0x28}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000002c0)={'rose0\x00', 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000021000000000800000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x14) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="4700000001003f", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000580)='syzkaller\x00'}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000480)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 4.335671461s ago: executing program 1 (id=272): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0x6) 4.240069958s ago: executing program 0 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, 0x0, 0x0) close(r0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$pptp(0x18, 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 4.125494338s ago: executing program 1 (id=274): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000e80)=ANY=[@ANYBLOB="44000000020103001e000000000000000a000009300002802c000180140003"], 0x44}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20040800) 4.124698988s ago: executing program 3 (id=275): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) syz_emit_ethernet(0x116b, &(0x7f0000002240)=ANY=[@ANYBLOB], 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, r0, 0x1}, 0x50) ioctl$TIOCSETD(r2, 0x5423, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0xdc) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) openat$vim2m(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) 4.074522332s ago: executing program 2 (id=276): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed", 0xd}, {0x0}], 0x2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) 3.390186807s ago: executing program 0 (id=277): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020400) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x23}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) 3.170125984s ago: executing program 1 (id=278): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x40881) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) shutdown(r4, 0x1) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000002030300"/19], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 2.681899994s ago: executing program 2 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 986.256ms ago: executing program 0 (id=280): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x44}, 0x8, 0x3000000000002, 0x0, 0x20000}, 0x844) 973.940951ms ago: executing program 1 (id=281): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$inet_mreq(r4, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) 813.886024ms ago: executing program 2 (id=282): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0d", 0x8c}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xc0002006}) 781.875957ms ago: executing program 3 (id=283): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000001f000000000000007e000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b3000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000400000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1, r0}, 0x6) 734.041421ms ago: executing program 2 (id=284): socket$netlink(0x10, 0x3, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000080) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, 0x0, 0x0) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x3, [@null, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, 0x2, 0x9, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_TUPLE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40d0) connect$rose(r6, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r6, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x40) 686.239075ms ago: executing program 0 (id=285): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 533.875127ms ago: executing program 3 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='mm_page_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000080)=0x20, &(0x7f00000001c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000180), &(0x7f0000000240)=r1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 481.216831ms ago: executing program 1 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = accept$alg(r0, 0x0, 0x0) recvmsg(r9, &(0x7f0000000800)={&(0x7f0000000140)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/204, 0xcc}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/72, 0x48}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000440)=""/82, 0x52}, {&(0x7f0000000080)=""/39, 0x27}, {&(0x7f00000004c0)=""/227, 0xe3}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/224, 0xe0}], 0x9, &(0x7f00000007c0)=""/25, 0x19}, 0x2002) sendmmsg$alg(r9, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x1, 0x8004) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$netrom_NETROM_N2(r10, 0x103, 0x3, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x4) accept4(r9, 0x0, 0x0, 0x800) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, 0xe, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20}, 0x94) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)}, 0x0) ioctl$SIOCGSTAMPNS(r11, 0x8907, &(0x7f0000000000)) 314.341385ms ago: executing program 3 (id=288): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.177386ms ago: executing program 3 (id=289): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000022657a6e8b48b9000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4044084}, 0x40881) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) shutdown(r4, 0x1) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000002030300"/19], 0x1c}}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) 0s ago: executing program 0 (id=290): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10820, 0x400}}, 0x20}}, 0x4084) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.180' (ED25519) to the list of known hosts. [ 83.057440][ T5771] cgroup: Unknown subsys name 'net' [ 83.190215][ T5771] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.862744][ T5771] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.448841][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.481290][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.491209][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.501871][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.513014][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.526437][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.561222][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.569664][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.581687][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.593716][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.602751][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.610512][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.651173][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.661796][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.669723][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.680440][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.688450][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.697395][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.721208][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.737421][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.747057][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.756007][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.768983][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.776559][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.119466][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 87.359320][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 87.454737][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 87.477478][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.488531][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.497678][ T5784] bridge_slave_0: entered allmulticast mode [ 87.508058][ T5784] bridge_slave_0: entered promiscuous mode [ 87.540901][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.550802][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.560269][ T5784] bridge_slave_1: entered allmulticast mode [ 87.570646][ T5784] bridge_slave_1: entered promiscuous mode [ 87.675089][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.689209][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.705220][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 87.815296][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.822731][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.829951][ T5789] bridge_slave_0: entered allmulticast mode [ 87.837317][ T5789] bridge_slave_0: entered promiscuous mode [ 87.860861][ T5784] team0: Port device team_slave_0 added [ 87.885704][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.893073][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.900269][ T5789] bridge_slave_1: entered allmulticast mode [ 87.907781][ T5789] bridge_slave_1: entered promiscuous mode [ 87.915420][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.923919][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.931718][ T5791] bridge_slave_0: entered allmulticast mode [ 87.938773][ T5791] bridge_slave_0: entered promiscuous mode [ 87.949520][ T5784] team0: Port device team_slave_1 added [ 88.005042][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.012438][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.019631][ T5791] bridge_slave_1: entered allmulticast mode [ 88.027087][ T5791] bridge_slave_1: entered promiscuous mode [ 88.047918][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.055044][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.081652][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.109412][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.148072][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.155578][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.181814][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.212325][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.236446][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.249913][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.260576][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.267882][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.276009][ T5795] bridge_slave_0: entered allmulticast mode [ 88.283048][ T5795] bridge_slave_0: entered promiscuous mode [ 88.339722][ T5791] team0: Port device team_slave_0 added [ 88.347583][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.354996][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.363249][ T5795] bridge_slave_1: entered allmulticast mode [ 88.370398][ T5795] bridge_slave_1: entered promiscuous mode [ 88.380675][ T5789] team0: Port device team_slave_0 added [ 88.390292][ T5789] team0: Port device team_slave_1 added [ 88.410644][ T5791] team0: Port device team_slave_1 added [ 88.488247][ T5784] hsr_slave_0: entered promiscuous mode [ 88.495902][ T5784] hsr_slave_1: entered promiscuous mode [ 88.517714][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.530516][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.561927][ T5098] Bluetooth: hci0: command tx timeout [ 88.570055][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.577558][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.603772][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.628314][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.635354][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.661509][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.674578][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.681655][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.707717][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.711599][ T5098] Bluetooth: hci1: command tx timeout [ 88.730075][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.737416][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.763438][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.791198][ T5098] Bluetooth: hci2: command tx timeout [ 88.814826][ T5795] team0: Port device team_slave_0 added [ 88.858568][ T5795] team0: Port device team_slave_1 added [ 88.877453][ T5098] Bluetooth: hci3: command tx timeout [ 88.908309][ T5789] hsr_slave_0: entered promiscuous mode [ 88.915188][ T5789] hsr_slave_1: entered promiscuous mode [ 88.921619][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.929583][ T5789] Cannot create hsr debugfs directory [ 88.976292][ T5791] hsr_slave_0: entered promiscuous mode [ 88.983834][ T5791] hsr_slave_1: entered promiscuous mode [ 88.990240][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.998278][ T5791] Cannot create hsr debugfs directory [ 89.005218][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.012249][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.039268][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.053580][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.060662][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.086960][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.266747][ T5795] hsr_slave_0: entered promiscuous mode [ 89.273677][ T5795] hsr_slave_1: entered promiscuous mode [ 89.280076][ T5795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.289011][ T5795] Cannot create hsr debugfs directory [ 89.550606][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.580306][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.590890][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.607777][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.690296][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.705558][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.717630][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.729701][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.813583][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.850754][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.863027][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.896309][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.962710][ T5795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.975097][ T5795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.988749][ T5795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.012642][ T5795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.069859][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.172477][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.202527][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.226014][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.233497][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.256219][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.275055][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.282252][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.299947][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.343548][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.358056][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.365266][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.379760][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.412704][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.419884][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.436765][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.444013][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.487381][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.494578][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.509042][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.559059][ T1298] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.566274][ T1298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.577532][ T1298] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.584733][ T1298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.631208][ T5098] Bluetooth: hci0: command tx timeout [ 90.690887][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.791317][ T5098] Bluetooth: hci1: command tx timeout [ 90.872488][ T5098] Bluetooth: hci2: command tx timeout [ 90.954558][ T5098] Bluetooth: hci3: command tx timeout [ 91.020552][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.155789][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.167597][ T5784] veth0_vlan: entered promiscuous mode [ 91.214456][ T5784] veth1_vlan: entered promiscuous mode [ 91.319869][ T5784] veth0_macvtap: entered promiscuous mode [ 91.349481][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.362535][ T5784] veth1_macvtap: entered promiscuous mode [ 91.386425][ T5791] veth0_vlan: entered promiscuous mode [ 91.402760][ T5791] veth1_vlan: entered promiscuous mode [ 91.450357][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.474735][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.508128][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.523207][ T5789] veth0_vlan: entered promiscuous mode [ 91.530380][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540808][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.549974][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.559992][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.590814][ T5791] veth0_macvtap: entered promiscuous mode [ 91.609542][ T5789] veth1_vlan: entered promiscuous mode [ 91.623846][ T5791] veth1_macvtap: entered promiscuous mode [ 91.675491][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.688598][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.702466][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.718465][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.729904][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.742068][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.774431][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.783380][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793859][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.803011][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.823847][ T5795] veth0_vlan: entered promiscuous mode [ 91.878790][ T5789] veth0_macvtap: entered promiscuous mode [ 91.889836][ T5795] veth1_vlan: entered promiscuous mode [ 91.940940][ T5789] veth1_macvtap: entered promiscuous mode [ 91.952324][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.960410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.051616][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.051717][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.059493][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.077808][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.088110][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.098638][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.110173][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.142416][ T5857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.150306][ T5857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.175253][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.185997][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.196533][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.207491][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.219508][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.245048][ T8] cfg80211: failed to load regulatory.db [ 92.286248][ T5795] veth0_macvtap: entered promiscuous mode [ 92.310922][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.314387][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.319791][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.330258][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.345411][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.355117][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.390705][ T5795] veth1_macvtap: entered promiscuous mode [ 92.500050][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.526067][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.540650][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.552991][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.563176][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.573928][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.586893][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.610599][ T5873] Zero length message leads to an empty skb [ 92.616792][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.636062][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.662747][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.688499][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.699591][ T5795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.710558][ T5795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.721779][ T5098] Bluetooth: hci0: command tx timeout [ 92.730792][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.786560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.790470][ T5795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.800023][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.815974][ T5795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.824967][ T5795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.833806][ T5795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.854683][ T5875] Bluetooth: MGMT ver 1.22 [ 92.868880][ T5875] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 92.883391][ T5098] Bluetooth: hci1: command tx timeout [ 92.907894][ T1298] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.917239][ T1298] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.920271][ T5875] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4'. [ 92.951536][ T5098] Bluetooth: hci2: command tx timeout [ 93.031607][ T5098] Bluetooth: hci3: command tx timeout [ 93.067613][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.086741][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.102792][ T5875] bond0 (unregistering): Released all slaves [ 93.309892][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.335135][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.388506][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.398050][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.658958][ T5882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6'. [ 93.699801][ T5884] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 94.144384][ T5894] bridge_slave_0: left allmulticast mode [ 94.166609][ T5897] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 94.183174][ T5894] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.215289][ T5894] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 94.259827][ T5894] syz.1.10 (5894) used greatest stack depth: 19848 bytes left [ 94.616176][ T5909] RDS: rds_bind could not find a transport for ::ffff:172.30.1.2, load rds_tcp or rds_rdma? [ 94.792824][ T5098] Bluetooth: hci0: command tx timeout [ 94.951896][ T5098] Bluetooth: hci1: command tx timeout [ 95.031235][ T5098] Bluetooth: hci2: command tx timeout [ 95.114154][ T5098] Bluetooth: hci3: command tx timeout [ 95.169396][ T5923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.20'. [ 95.268972][ T5924] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 95.293986][ T5926] syzkaller0: entered promiscuous mode [ 95.299873][ T5926] syzkaller0: entered allmulticast mode [ 95.341875][ T5929] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18'. [ 95.598046][ T5929] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.619127][ T5929] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.634697][ T5929] bond0 (unregistering): Released all slaves [ 95.743462][ T5935] bridge_slave_0: left allmulticast mode [ 95.749609][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.770540][ T5935] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.916832][ T5941] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 96.085072][ T5945] syzkaller0: entered promiscuous mode [ 96.090599][ T5945] syzkaller0: entered allmulticast mode [ 97.881333][ T5958] netlink: 48 bytes leftover after parsing attributes in process `syz.3.32'. [ 97.892413][ T5956] syzkaller0: entered promiscuous mode [ 97.897942][ T5956] syzkaller0: entered allmulticast mode [ 97.920330][ T5960] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 97.939448][ T5960] netlink: 14 bytes leftover after parsing attributes in process `syz.2.33'. [ 98.270921][ T5962] bridge_slave_0: left allmulticast mode [ 98.300204][ T5962] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.320490][ T5962] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 98.775045][ T5981] syzkaller0: entered promiscuous mode [ 98.780602][ T5981] syzkaller0: entered allmulticast mode [ 98.790442][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.3.42'. [ 99.202023][ T5990] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 100.857171][ T5990] netlink: 14 bytes leftover after parsing attributes in process `syz.3.43'. [ 100.919183][ T6001] syzkaller0: entered promiscuous mode [ 100.925224][ T6001] syzkaller0: entered allmulticast mode [ 101.164946][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.1.47'. [ 101.321380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.330200][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.346351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.448689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.960797][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.370313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.701211][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.984696][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.087135][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.496746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.101457][ T6023] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 104.255587][ T6028] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 104.424566][ T6035] netlink: 3 bytes leftover after parsing attributes in process `syz.2.52'. [ 104.498598][ T6036] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 104.531286][ T6036] netlink: 14 bytes leftover after parsing attributes in process `syz.3.56'. [ 104.617451][ T6039] syzkaller0: entered promiscuous mode [ 104.644014][ T6039] syzkaller0: entered allmulticast mode [ 106.605898][ T6063] syzkaller0: entered promiscuous mode [ 106.621518][ T6063] syzkaller0: entered allmulticast mode [ 106.747465][ T6067] syzkaller0: entered promiscuous mode [ 106.781028][ T6067] syzkaller0: entered allmulticast mode [ 106.995692][ T6074] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 107.006928][ T6074] netlink: 14 bytes leftover after parsing attributes in process `syz.0.66'. [ 107.110736][ T6081] netlink: 3 bytes leftover after parsing attributes in process `syz.1.67'. [ 107.309126][ T6074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.334684][ T6074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.368331][ T6074] bond0 (unregistering): Released all slaves [ 107.680216][ T6089] syzkaller0: entered promiscuous mode [ 107.686762][ T6089] syzkaller0: entered allmulticast mode [ 109.185220][ T6095] syzkaller0: entered promiscuous mode [ 109.190746][ T6095] syzkaller0: entered allmulticast mode [ 109.446125][ T6107] syzkaller0: entered promiscuous mode [ 109.454200][ T6107] syzkaller0: entered allmulticast mode [ 109.473795][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.74'. [ 109.516740][ T6111] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 109.782234][ T6118] syzkaller0: entered promiscuous mode [ 109.794421][ T6118] syzkaller0: entered allmulticast mode [ 109.899672][ T6120] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 109.961118][ T6120] netlink: 14 bytes leftover after parsing attributes in process `syz.0.79'. [ 110.353454][ T6132] syzkaller0: entered promiscuous mode [ 110.382954][ T6132] syzkaller0: entered allmulticast mode [ 112.424591][ T6139] syzkaller0: entered promiscuous mode [ 112.430134][ T6139] syzkaller0: entered allmulticast mode [ 112.439180][ T6151] netlink: 92 bytes leftover after parsing attributes in process `syz.1.85'. [ 112.458209][ T6151] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.652449][ T6154] syz.0.87[6154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.652712][ T6154] syz.0.87[6154] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.670164][ T6155] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 112.877030][ T6161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.90'. [ 112.887023][ T6160] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 112.911927][ T6160] netlink: 14 bytes leftover after parsing attributes in process `syz.0.89'. [ 113.248684][ T6173] netlink: 92 bytes leftover after parsing attributes in process `syz.3.96'. [ 113.313256][ T6173] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.357360][ T6178] syz.0.97[6178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.357615][ T6178] syz.0.97[6178] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.486167][ T6181] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 113.685807][ T6183] syzkaller0: entered promiscuous mode [ 113.704428][ T6183] syzkaller0: entered allmulticast mode [ 114.016237][ T6187] syzkaller0: entered promiscuous mode [ 114.038444][ T6187] syzkaller0: entered allmulticast mode [ 115.609160][ T6197] netlink: 14 bytes leftover after parsing attributes in process `syz.1.102'. [ 115.769561][ T6205] trusted_key: encrypted_key: insufficient parameters specified [ 115.869842][ T6197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.905128][ T6206] Invalid ELF header magic: != ELF [ 116.051952][ T6197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.123917][ T6197] bond0 (unregistering): Released all slaves [ 116.368209][ T6199] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 116.723020][ T6208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 116.967466][ T6215] syzkaller0: entered promiscuous mode [ 116.975988][ T6215] syzkaller0: entered allmulticast mode [ 117.015299][ T6218] tipc: Enabling of bearer rejected, failed to enable media [ 117.026138][ T6219] syzkaller0: entered promiscuous mode [ 117.049370][ T6219] syzkaller0: entered allmulticast mode [ 117.100628][ T6218] syzkaller0: entered promiscuous mode [ 117.106324][ T6218] syzkaller0: entered allmulticast mode [ 117.416193][ T6231] trusted_key: encrypted_key: insufficient parameters specified [ 117.424169][ T6226] syzkaller0: entered promiscuous mode [ 117.424197][ T6226] syzkaller0: entered allmulticast mode [ 117.568903][ T6242] Invalid ELF header magic: != ELF [ 120.587643][ T6229] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.595484][ T6229] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.049551][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.123041][ T6229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.386067][ T6229] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.395171][ T6229] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.409126][ T6229] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.419258][ T6229] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.079937][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 123.305005][ T6271] netlink: 12 bytes leftover after parsing attributes in process `syz.3.119'. [ 123.383710][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 123.500117][ T6282] syzkaller0: entered promiscuous mode [ 123.510247][ T6282] syzkaller0: entered allmulticast mode [ 123.651020][ T6284] syzkaller0: entered promiscuous mode [ 123.656572][ T6284] syzkaller0: entered allmulticast mode [ 123.848303][ T6291] netlink: 12 bytes leftover after parsing attributes in process `syz.2.128'. [ 123.990808][ T6294] syzkaller0: entered promiscuous mode [ 123.999260][ T6294] syzkaller0: entered allmulticast mode [ 125.602617][ T6304] syz_tun: entered allmulticast mode [ 125.625133][ T6305] dvmrp8: entered allmulticast mode [ 125.634534][ T6305] syz_tun: left allmulticast mode [ 125.643737][ T6305] dvmrp8: left allmulticast mode [ 125.940830][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.136'. [ 126.019459][ T6317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 126.056203][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.138'. [ 126.118296][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 126.693393][ T6336] syzkaller0: entered promiscuous mode [ 126.699221][ T6336] syzkaller0: entered allmulticast mode [ 127.746022][ T6356] (null): rxe_set_mtu: Set mtu to 1024 [ 129.244754][ T6362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.151'. [ 129.369716][ T6356] infiniband syz2: set down [ 129.379972][ T6356] infiniband syz2: added bond_slave_0 [ 129.389811][ T6356] syz2: rxe_create_cq: returned err = -12 [ 129.411528][ T6356] infiniband syz2: Couldn't create ib_mad CQ [ 129.421424][ T6356] infiniband syz2: Couldn't open port 1 [ 129.554038][ T6356] RDS/IB: syz2: added [ 129.574868][ T6356] smc: adding ib device syz2 with port count 1 [ 129.588922][ T6356] smc: ib device syz2 port 1 has pnetid [ 129.866471][ T6372] tipc: Enabling of bearer rejected, failed to enable media [ 129.877531][ T6372] syzkaller0: entered promiscuous mode [ 129.886201][ T6372] syzkaller0: entered allmulticast mode [ 131.679208][ T6387] syzkaller0: entered promiscuous mode [ 131.684865][ T6387] syzkaller0: entered allmulticast mode [ 133.204020][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.540539][ T6393] warning: `syz.0.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.760207][ T6400] syz.2.165[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.760463][ T6400] syz.2.165[6400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.800771][ T6402] tipc: Enabling of bearer rejected, failed to enable media [ 133.832981][ T6402] syzkaller0: entered promiscuous mode [ 133.838533][ T6402] syzkaller0: entered allmulticast mode [ 135.031441][ T6414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 135.034235][ T6418] nbd: socks must be embedded in a SOCK_ITEM attr [ 135.115366][ T6421] netlink: 'syz.1.171': attribute type 1 has an invalid length. [ 135.251680][ T6421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.303188][ T6425] bond0: (slave geneve2): making interface the new active one [ 135.316155][ T6425] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 135.335908][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 135.539859][ T6434] tipc: Enabling of bearer rejected, failed to enable media [ 135.550151][ T6434] syzkaller0: entered promiscuous mode [ 135.555755][ T6434] syzkaller0: entered allmulticast mode [ 135.813520][ T6442] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 136.731078][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.182'. [ 136.932190][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.184'. [ 137.224353][ T6465] tipc: Enabling of bearer rejected, failed to enable media [ 137.242217][ T6465] syzkaller0: entered promiscuous mode [ 137.261154][ T6465] syzkaller0: entered allmulticast mode [ 137.966536][ T6484] syz.3.195[6484]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 138.874162][ T6484] loop3: detected capacity change from 0 to 32768 [ 138.895608][ T6484] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.195 (6484) [ 138.943169][ T6484] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.954144][ T6484] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 138.963028][ T6484] BTRFS info (device loop3): setting nodatacow, compression disabled [ 138.971329][ T6484] BTRFS info (device loop3): max_inline at 0 [ 138.977379][ T6484] BTRFS info (device loop3): turning on async discard [ 138.984335][ T6484] BTRFS info (device loop3): turning off barriers [ 138.990814][ T6484] BTRFS info (device loop3): turning on flush-on-commit [ 138.997823][ C1] sched: RT throttling activated [ 139.002985][ T6484] BTRFS info (device loop3): enabling disk space caching [ 139.010073][ T6484] BTRFS info (device loop3): turning on barriers [ 139.016589][ T6484] BTRFS info (device loop3): force clearing of disk cache [ 139.023881][ T6484] BTRFS info (device loop3): enabling ssd optimizations [ 139.031502][ T6484] BTRFS info (device loop3): turning off barriers [ 139.038025][ T6484] BTRFS info (device loop3): max_inline at 8 [ 139.044501][ T6484] BTRFS error (device loop3): unrecognized mount option 'dont_measure' [ 139.057009][ T6484] BTRFS error (device loop3): open_ctree failed: -22 [ 139.124134][ T6488] netlink: 28 bytes leftover after parsing attributes in process `syz.1.197'. [ 139.258849][ T6494] netlink: 8 bytes leftover after parsing attributes in process `syz.2.200'. [ 139.419520][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.203'. [ 139.459694][ T6276] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (6276) [ 139.474541][ T6498] tipc: Enabling of bearer rejected, failed to enable media [ 139.502809][ T6498] syzkaller0: entered promiscuous mode [ 139.508358][ T6498] syzkaller0: entered allmulticast mode [ 139.723864][ T6508] netlink: 56 bytes leftover after parsing attributes in process `syz.3.206'. [ 139.783745][ T6503] tipc: Started in network mode [ 139.788698][ T6503] tipc: Node identity , cluster identity 4711 [ 139.827269][ T6503] tipc: Failed to obtain node identity [ 139.844361][ T6503] tipc: Enabling of bearer rejected, failed to enable media [ 139.909350][ T6513] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 139.987421][ T6513] syzkaller0: entered promiscuous mode [ 139.996572][ T6513] syzkaller0: entered allmulticast mode [ 140.220720][ T6524] netlink: 3 bytes leftover after parsing attributes in process `syz.3.208'. [ 141.910467][ T6532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.211'. [ 142.157203][ T6538] tipc: Enabling of bearer rejected, failed to enable media [ 142.169435][ T6538] syzkaller0: entered promiscuous mode [ 142.179156][ T6538] syzkaller0: entered allmulticast mode [ 142.237425][ T6542] netlink: 52 bytes leftover after parsing attributes in process `syz.3.216'. [ 142.286458][ T6544] tipc: Enabling of bearer rejected, failed to enable media [ 142.362385][ T6544] syzkaller0: entered promiscuous mode [ 142.367930][ T6544] syzkaller0: entered allmulticast mode [ 142.772523][ T6563] syz.2.226[6563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.772774][ T6563] syz.2.226[6563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.782346][ T6564] tipc: Started in network mode [ 142.808275][ T6564] tipc: Node identity 7ae0e2cfd4da, cluster identity 4711 [ 142.817550][ T6564] tipc: Enabled bearer , priority 0 [ 142.844851][ T6564] syzkaller0: entered promiscuous mode [ 142.850403][ T6564] syzkaller0: entered allmulticast mode [ 142.888800][ T6566] netlink: 52 bytes leftover after parsing attributes in process `syz.1.227'. [ 142.971898][ T6564] tipc: Resetting bearer [ 143.027490][ T6562] tipc: Resetting bearer [ 143.084936][ T6562] tipc: Disabling bearer [ 143.117279][ T6572] syz.2.230 uses obsolete (PF_INET,SOCK_PACKET) [ 143.486004][ T6587] netlink: 52 bytes leftover after parsing attributes in process `syz.2.236'. [ 143.660485][ T6592] syz.3.238[6592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 143.660738][ T6592] syz.3.238[6592] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.045299][ T6601] team_slave_0: entered promiscuous mode [ 144.062806][ T6601] team_slave_1: entered promiscuous mode [ 144.132077][ T6601] vlan2: entered promiscuous mode [ 144.137191][ T6601] team0: entered promiscuous mode [ 144.284535][ T6608] Bluetooth: MGMT ver 1.22 [ 144.305004][ T6608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.242'. [ 144.786398][ T6621] syz.0.248[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.786652][ T6621] syz.0.248[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.801350][ T6619] netlink: 56 bytes leftover after parsing attributes in process `syz.1.247'. [ 144.994309][ T6626] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 145.659958][ T6646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 145.726879][ T6646] vlan2: entered promiscuous mode [ 145.746867][ T6646] batadv0: entered promiscuous mode [ 145.937177][ T6651] syz.1.257[6651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.938598][ T6651] syz.1.257[6651] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.108047][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 146.297233][ T6658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 146.435462][ T6655] netlink: 14 bytes leftover after parsing attributes in process `syz.1.259'. [ 147.279334][ T6673] netlink: 3 bytes leftover after parsing attributes in process `syz.1.263'. [ 149.855365][ T6683] syz.3.267[6683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.855622][ T6683] syz.3.267[6683] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 149.865003][ T6686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 150.135158][ T6693] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 150.159993][ T6693] netlink: 14 bytes leftover after parsing attributes in process `syz.3.271'. [ 150.399675][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'. [ 153.169268][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.278'. [ 153.406385][ T6712] syz.2.279[6712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.406630][ T6712] syz.2.279[6712] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.492119][ T6715] syz_tun: entered allmulticast mode [ 153.519628][ T6715] dvmrp8: entered allmulticast mode [ 153.530493][ T6714] syz_tun: left allmulticast mode [ 153.535918][ T6714] dvmrp8: left allmulticast mode [ 153.830621][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.285'. [ 153.977147][ T6727] Driver unsupported XDP return value 0 on prog (id 125) dev N/A, expect packet loss! [ 154.367612][ T6735] syzkaller0: entered promiscuous mode [ 154.373283][ T6735] syzkaller0: entered allmulticast mode [ 154.461935][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.289'. [ 154.596694][ T6730] ================================================================== [ 154.604848][ T6730] BUG: KASAN: slab-use-after-free in rose_transmit_link+0x5ba/0x740 [ 154.612898][ T6730] Read of size 1 at addr ffff888031857032 by task syz.2.284/6730 [ 154.620648][ T6730] [ 154.623030][ T6730] CPU: 1 PID: 6730 Comm: syz.2.284 Not tainted syzkaller #0 [ 154.630352][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.640441][ T6730] Call Trace: [ 154.643748][ T6730] [ 154.646715][ T6730] dump_stack_lvl+0x16c/0x230 [ 154.651435][ T6730] ? __lock_acquire+0x7c80/0x7c80 [ 154.656475][ T6730] ? show_regs_print_info+0x20/0x20 [ 154.661686][ T6730] ? load_image+0x3b0/0x3b0 [ 154.666202][ T6730] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 154.671599][ T6730] ? __virt_addr_valid+0x18c/0x540 [ 154.676748][ T6730] ? __virt_addr_valid+0x469/0x540 [ 154.681891][ T6730] print_report+0xac/0x220 [ 154.686323][ T6730] ? rose_transmit_link+0x5ba/0x740 [ 154.691538][ T6730] kasan_report+0x117/0x150 [ 154.696081][ T6730] ? kmem_cache_alloc_node+0x17f/0x330 [ 154.701574][ T6730] ? rose_transmit_link+0x5ba/0x740 [ 154.706816][ T6730] rose_transmit_link+0x5ba/0x740 [ 154.711883][ T6730] ? skb_put+0x11b/0x210 [ 154.716143][ T6730] rose_write_internal+0x11d1/0x1ab0 [ 154.721445][ T6730] ? rose_validate_nr+0x120/0x120 [ 154.726479][ T6730] ? __timer_delete+0x6b/0x290 [ 154.731281][ T6730] ? skb_queue_purge_reason+0x6c/0x1c0 [ 154.736768][ T6730] rose_release+0x24e/0x510 [ 154.741310][ T6730] sock_close+0xbd/0x230 [ 154.745599][ T6730] ? sock_mmap+0xa0/0xa0 [ 154.749889][ T6730] __fput+0x234/0x970 [ 154.754011][ T6730] task_work_run+0x1ce/0x250 [ 154.758639][ T6730] ? task_work_cancel+0x240/0x240 [ 154.763681][ T6730] get_signal+0x1235/0x1400 [ 154.768203][ T6730] ? task_work_add+0x3a3/0x440 [ 154.772982][ T6730] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 154.778369][ T6730] ? wake_bit_function+0x200/0x200 [ 154.783494][ T6730] ? __might_fault+0xaa/0x120 [ 154.788200][ T6730] arch_do_signal_or_restart+0x96/0x780 [ 154.793784][ T6730] ? __sys_connect+0x240/0x420 [ 154.798618][ T6730] ? get_sigframe_size+0x20/0x20 [ 154.803618][ T6730] ? exit_to_user_mode_loop+0x3b/0x110 [ 154.809090][ T6730] exit_to_user_mode_loop+0x70/0x110 [ 154.814402][ T6730] exit_to_user_mode_prepare+0xb1/0x140 [ 154.819984][ T6730] syscall_exit_to_user_mode+0x1a/0x50 [ 154.825474][ T6730] do_syscall_64+0x61/0xb0 [ 154.829900][ T6730] ? clear_bhb_loop+0x40/0x90 [ 154.834583][ T6730] ? clear_bhb_loop+0x40/0x90 [ 154.839268][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.845194][ T6730] RIP: 0033:0x7f11e058ebe9 [ 154.849649][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.869292][ T6730] RSP: 002b:00007f11e138b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 154.877761][ T6730] RAX: fffffffffffffe00 RBX: 00007f11e07c6180 RCX: 00007f11e058ebe9 [ 154.885782][ T6730] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000e [ 154.893795][ T6730] RBP: 00007f11e0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 154.901896][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.909899][ T6730] R13: 00007f11e07c6218 R14: 00007f11e07c6180 R15: 00007ffe2c968c28 [ 154.917892][ T6730] [ 154.920928][ T6730] [ 154.923274][ T6730] Allocated by task 6468: [ 154.927606][ T6730] kasan_set_track+0x4e/0x70 [ 154.932227][ T6730] __kasan_kmalloc+0x8f/0xa0 [ 154.937018][ T6730] rose_add_node+0x23a/0xdd0 [ 154.941633][ T6730] rose_rt_ioctl+0xa42/0xfb0 [ 154.946255][ T6730] rose_ioctl+0x3cf/0x8b0 [ 154.950605][ T6730] sock_do_ioctl+0xd7/0x2f0 [ 154.955122][ T6730] sock_ioctl+0x623/0x7a0 [ 154.959463][ T6730] __se_sys_ioctl+0xfd/0x170 [ 154.964059][ T6730] do_syscall_64+0x55/0xb0 [ 154.968481][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 154.974389][ T6730] [ 154.976717][ T6730] Freed by task 6721: [ 154.980738][ T6730] kasan_set_track+0x4e/0x70 [ 154.985337][ T6730] kasan_save_free_info+0x2e/0x50 [ 154.990376][ T6730] ____kasan_slab_free+0x126/0x1e0 [ 154.995525][ T6730] slab_free_freelist_hook+0x130/0x1b0 [ 155.001036][ T6730] __kmem_cache_free+0xba/0x1f0 [ 155.005925][ T6730] rose_rt_device_down+0x43d/0x490 [ 155.011072][ T6730] rose_device_event+0x604/0x690 [ 155.016031][ T6730] notifier_call_chain+0x197/0x390 [ 155.021156][ T6730] __dev_notify_flags+0x18e/0x2e0 [ 155.026190][ T6730] dev_change_flags+0xe8/0x1a0 [ 155.030974][ T6730] dev_ifsioc+0x6a7/0xe20 [ 155.035321][ T6730] dev_ioctl+0x7e2/0x1170 [ 155.039652][ T6730] sock_do_ioctl+0x226/0x2f0 [ 155.044273][ T6730] sock_ioctl+0x623/0x7a0 [ 155.048631][ T6730] __se_sys_ioctl+0xfd/0x170 [ 155.053238][ T6730] do_syscall_64+0x55/0xb0 [ 155.057660][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.063602][ T6730] [ 155.065927][ T6730] The buggy address belongs to the object at ffff888031857000 [ 155.065927][ T6730] which belongs to the cache kmalloc-512 of size 512 [ 155.079996][ T6730] The buggy address is located 50 bytes inside of [ 155.079996][ T6730] freed 512-byte region [ffff888031857000, ffff888031857200) [ 155.093738][ T6730] [ 155.096086][ T6730] The buggy address belongs to the physical page: [ 155.102526][ T6730] page:ffffea0000c61500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888031857400 pfn:0x31854 [ 155.113994][ T6730] head:ffffea0000c61500 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.122936][ T6730] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 155.130945][ T6730] page_type: 0xffffffff() [ 155.135301][ T6730] raw: 00fff00000000840 ffff888017841c80 ffffea000071c110 ffffea00017e4010 [ 155.143913][ T6730] raw: ffff888031857400 000000000010000b 00000001ffffffff 0000000000000000 [ 155.152522][ T6730] page dumped because: kasan: bad access detected [ 155.158950][ T6730] page_owner tracks the page as allocated [ 155.164754][ T6730] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 28655224474, free_ts 0 [ 155.183697][ T6730] post_alloc_hook+0x1cd/0x210 [ 155.188493][ T6730] get_page_from_freelist+0x195c/0x19f0 [ 155.194066][ T6730] __alloc_pages+0x1e3/0x460 [ 155.198694][ T6730] alloc_page_interleave+0x24/0x1e0 [ 155.203959][ T6730] alloc_slab_page+0x5d/0x170 [ 155.208667][ T6730] new_slab+0x87/0x2e0 [ 155.212777][ T6730] ___slab_alloc+0xc6d/0x12f0 [ 155.217475][ T6730] __kmem_cache_alloc_node+0x1a2/0x260 [ 155.222983][ T6730] __kmalloc+0xa4/0x240 [ 155.227168][ T6730] tomoyo_init_log+0x1a52/0x1f10 [ 155.232114][ T6730] tomoyo_write_log2+0x3db/0x910 [ 155.237057][ T6730] tomoyo_supervisor+0x167/0x1080 [ 155.242122][ T6730] tomoyo_mount_permission+0x5ee/0x970 [ 155.247611][ T6730] security_sb_mount+0x87/0xc0 [ 155.252384][ T6730] path_mount+0xbc/0xfe0 [ 155.256642][ T6730] init_mount+0xd2/0x120 [ 155.260899][ T6730] page_owner free stack trace missing [ 155.266276][ T6730] [ 155.268605][ T6730] Memory state around the buggy address: [ 155.274232][ T6730] ffff888031856f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.282333][ T6730] ffff888031856f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 155.290406][ T6730] >ffff888031857000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.298476][ T6730] ^ [ 155.304110][ T6730] ffff888031857080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.312195][ T6730] ffff888031857100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.320283][ T6730] ================================================================== [ 155.340293][ T6730] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.347553][ T6730] CPU: 1 PID: 6730 Comm: syz.2.284 Not tainted syzkaller #0 [ 155.354855][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.364923][ T6730] Call Trace: [ 155.368207][ T6730] [ 155.371151][ T6730] dump_stack_lvl+0x16c/0x230 [ 155.375851][ T6730] ? show_regs_print_info+0x20/0x20 [ 155.381065][ T6730] ? load_image+0x3b0/0x3b0 [ 155.385622][ T6730] panic+0x2c0/0x710 [ 155.389544][ T6730] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 155.395713][ T6730] ? bpf_jit_dump+0xd0/0xd0 [ 155.400249][ T6730] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 155.406164][ T6730] ? _raw_spin_unlock+0x40/0x40 [ 155.411033][ T6730] ? rose_transmit_link+0x5ba/0x740 [ 155.416245][ T6730] check_panic_on_warn+0x84/0xa0 [ 155.421207][ T6730] ? rose_transmit_link+0x5ba/0x740 [ 155.426462][ T6730] end_report+0x6f/0x140 [ 155.430743][ T6730] kasan_report+0x128/0x150 [ 155.435349][ T6730] ? kmem_cache_alloc_node+0x17f/0x330 [ 155.440823][ T6730] ? rose_transmit_link+0x5ba/0x740 [ 155.446040][ T6730] rose_transmit_link+0x5ba/0x740 [ 155.451082][ T6730] ? skb_put+0x11b/0x210 [ 155.455347][ T6730] rose_write_internal+0x11d1/0x1ab0 [ 155.460654][ T6730] ? rose_validate_nr+0x120/0x120 [ 155.465720][ T6730] ? __timer_delete+0x6b/0x290 [ 155.470504][ T6730] ? skb_queue_purge_reason+0x6c/0x1c0 [ 155.476014][ T6730] rose_release+0x24e/0x510 [ 155.480535][ T6730] sock_close+0xbd/0x230 [ 155.484800][ T6730] ? sock_mmap+0xa0/0xa0 [ 155.489060][ T6730] __fput+0x234/0x970 [ 155.493067][ T6730] task_work_run+0x1ce/0x250 [ 155.497677][ T6730] ? task_work_cancel+0x240/0x240 [ 155.502728][ T6730] get_signal+0x1235/0x1400 [ 155.507252][ T6730] ? task_work_add+0x3a3/0x440 [ 155.512039][ T6730] ? __ia32_sys_pidfd_getfd+0x90/0x90 [ 155.517432][ T6730] ? wake_bit_function+0x200/0x200 [ 155.522567][ T6730] ? __might_fault+0xaa/0x120 [ 155.527268][ T6730] arch_do_signal_or_restart+0x96/0x780 [ 155.532841][ T6730] ? __sys_connect+0x240/0x420 [ 155.537621][ T6730] ? get_sigframe_size+0x20/0x20 [ 155.542624][ T6730] ? exit_to_user_mode_loop+0x3b/0x110 [ 155.548114][ T6730] exit_to_user_mode_loop+0x70/0x110 [ 155.553508][ T6730] exit_to_user_mode_prepare+0xb1/0x140 [ 155.559072][ T6730] syscall_exit_to_user_mode+0x1a/0x50 [ 155.564562][ T6730] do_syscall_64+0x61/0xb0 [ 155.568991][ T6730] ? clear_bhb_loop+0x40/0x90 [ 155.573702][ T6730] ? clear_bhb_loop+0x40/0x90 [ 155.578391][ T6730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 155.584303][ T6730] RIP: 0033:0x7f11e058ebe9 [ 155.588751][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.608381][ T6730] RSP: 002b:00007f11e138b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 155.616812][ T6730] RAX: fffffffffffffe00 RBX: 00007f11e07c6180 RCX: 00007f11e058ebe9 [ 155.624802][ T6730] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 000000000000000e [ 155.632794][ T6730] RBP: 00007f11e0611e19 R08: 0000000000000000 R09: 0000000000000000 [ 155.640777][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.648756][ T6730] R13: 00007f11e07c6218 R14: 00007f11e07c6180 R15: 00007ffe2c968c28 [ 155.656745][ T6730] [ 155.660097][ T6730] Kernel Offset: disabled [ 155.664527][ T6730] Rebooting in 86400 seconds..