last executing test programs: 4.909970707s ago: executing program 3 (id=499): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x7e}}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xebfb}, 0x94) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x514}}, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) 4.598017826s ago: executing program 1 (id=501): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x31) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000000040)=0x1) 4.559461574s ago: executing program 2 (id=502): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1a}, 0x1, 0x0, 0x0, 0xc040810}, 0xc000) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.408598232s ago: executing program 0 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000700)={0x0, 0x81, 0x10}, &(0x7f0000000040)=0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r4 = socket$packet(0x11, 0x3, 0x300) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000800)=ANY=[], &(0x7f0000000680)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x53, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000a40)={0x5, 0x9, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d80)=[r5, r5, 0xffffffffffffffff], &(0x7f0000000dc0)=[{0x5, 0x5, 0x9, 0x1}, {0x5, 0x4, 0x4, 0x7}, {0x3, 0x4, 0x0, 0x4}], 0x10, 0x5}, 0x94) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="0800d907000000", 0x7) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000100001002dbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1843010000000000140003007866726d30000000000000000000000024001a8020000a8014000700fe80000000000000000000000000002c05000800"], 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 4.346692811s ago: executing program 4 (id=504): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r3, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 4.268591861s ago: executing program 3 (id=505): unshare(0x22020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.977528658s ago: executing program 1 (id=506): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="00006003ffffffffffffaaaaaaaaaa028100020008004500fe3240000000032f"], 0x32) 3.809341498s ago: executing program 2 (id=507): getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, &(0x7f0000000080)=0xfffffd4f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, 0x0, 0x0, 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080), 0x10}, 0x94) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000000)={0x0, 0x40000, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) 3.761940936s ago: executing program 4 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x47e47}]}, 0x38}}, 0x0) 3.529132528s ago: executing program 3 (id=509): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x47, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.014629308s ago: executing program 0 (id=510): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f6", 0x5a}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 3.014330736s ago: executing program 2 (id=511): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000003d40), 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000007e80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e20, 0x2b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000003c80)={0xa, 0x4e24, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000003f00)=[{&(0x7f0000003d00)="32607b20f4ebd4e86c60bfc02d671512b75c7eff8a8e4adbfc89e0e2dab4ea78829a0db8f7fa5abc8a8615c740e99c900b1b696720772d2908992aec54f5b2efdf1cc44fa94c700abe36399c6949e00ce52f6a557eaba68ff6873958a7df59bd6fe08b14cf5f0cceda5ce60c24b4912af4a4170606f75cf78be7c82f18b7d85ac2d7255d26e0dfa436467027ed7e4aa24e9c08", 0x93}, {&(0x7f0000003e00)="4359ae00e2cae11972e25bc7e1576041f2b680087a96f0f55c58a1d94fc16ea42d49990044b5dc5c2330ad8a3a7be11b9cd9c2d20c5da109c6cec75d3abd2bbdafc2148d8c7b7bdb7e5d3c87797b50bd0c46a00624b48c62773068f78744af35c93a64869cffc318c9c583d0d460fa7f7587632e8481057ad354ba74b507e6c45074f42c78b65880ca1a781bbcbfbc7eb09895c288491146af3d6f1c469e9054b9d64636f45d78568cac31bfb668", 0xae}], 0x2}}, {{&(0x7f0000003f40)={0xa, 0x4e22, 0x5, @private1, 0x8}, 0x1c, 0x0}}], 0x3, 0x4001c00) 2.98702645s ago: executing program 4 (id=512): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000080)=0xffff7b6e, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000000)=""/25, &(0x7f0000000240)=0x19) 2.864753753s ago: executing program 1 (id=513): ioctl$IMGETCOUNT(0xffffffffffffffff, 0x80044943, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 2.405074647s ago: executing program 4 (id=514): socket(0x10, 0x3, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xa, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000007b0140000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xce, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000200)=0x7f, 0x4) shutdown(r2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x8, 0x700, 0x8001, 0x5, {{0x32, 0x4, 0x0, 0x3a, 0xc8, 0x64, 0x0, 0x3, 0x2, 0x0, @multicast1, @broadcast, {[@timestamp_addr={0x44, 0x44, 0x75, 0x1, 0x7, [{@empty, 0xe}, {@broadcast, 0x5b}, {@private=0xa010101, 0x5}, {@multicast1, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0xfffffffe}, {@multicast1, 0xa00}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}]}, @end, @rr={0x7, 0x13, 0xe4, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @local]}, @generic={0x82, 0x3, 'v'}, @timestamp_addr={0x44, 0x3c, 0x8b, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@multicast1, 0x4}, {@rand_addr=0x64010102, 0x6}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0x3}, {@multicast2, 0x5}, {@loopback, 0x149fea77}]}, @ssrr={0x89, 0x17, 0x5b, [@private=0xa010102, @multicast1, @remote, @multicast2, @remote]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f0000000000)={0x5, 0x4, 0x9, 0x59, 0x1}) r7 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r7, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYRES16=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$inet6(r5, &(0x7f0000000a00)={&(0x7f00000006c0)={0xa, 0x4e22, 0x1, @private1, 0x100}, 0x1c, &(0x7f0000000980)=[{&(0x7f00000008c0)="c7ef7de908b623c49af75f6fc0a3876a641a0516b26676d27a24c28ebbf3d287fd4e1b83355ab71d9494900af0c1d4bcb8bd72ea7dd663a0fa9b6944bc1e0d5ae18e9445110aceaa6ea489a0e4ff99ea47b6cd9d80c969fdc5b62487627839471f8d72815c54f2c3b5ce4712adcaff89fea01b62ae1d29eeb71228052f96ab4bca314051a80b84032b8baf0f0ec748b2f53d9b667caa842f23c1", 0x9a}], 0x1, &(0x7f0000000bc0)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x33, 0x5, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x3, 0x7ff, [0xfffffffffffffffc, 0x10001, 0x6]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}}}, @dstopts={{0x98, 0x29, 0x37, {0xe, 0xf, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x10, {0x2, 0x2, 0xe0, 0x2, [0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x7fff}, @jumbo={0xc2, 0x4, 0x10000}, @calipso={0x7, 0x40, {0x3, 0xe, 0x5, 0x5, [0x1, 0xffff, 0xffffffffffffffff, 0x8000000000000001, 0xfffffffffffffff8, 0xffffffffffffff4a, 0x1]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr={{0xb8, 0x29, 0x39, {0x0, 0x14, 0x0, 0x24, 0x0, [@remote, @dev={0xfe, 0x80, '\x00', 0x39}, @mcast2, @private2, @private0, @empty, @private2, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xf40}}, @hopopts_2292={{0x100, 0x29, 0x36, {0x3c, 0x1c, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x0, 0xa, 0x7, 0x5, [0x1, 0x6, 0x3, 0x8000000000000000, 0x40]}}, @ra, @generic={0x3, 0xa4, "af11441ad639affe3baa52c55acdca14044de01b61302f8a072ac4f8527cfaa04bd22fb03f01589965c5bc62000c0cbf42273209687fd316204188cb31d55994e9a951f9df243bf7de8ed7e8bdcbbff2726d5736fb1c65b1e3b22aa39b005ac3dad66c9b74d3c78e1091d7248538888daafc58fba9781e5d7ac325d7702c5ec67f08ab25635f5faaae6123b7738c57791434d22b95fd232315d8d0a5e89c7e88983c2571"}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x5e, 0xc, 0x1, 0x4, 0x0, [@loopback, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty]}}}], 0x340}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x14, 0x12, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x8}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='GPL\x00', 0x6, 0xbc, &(0x7f0000000480)=""/188, 0x41000, 0x46, '\x00', r6, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x3, 0x2}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xb, 0xdd, 0x9}, 0x10, r8, r3, 0x0, 0x0, 0x0, 0x10, 0x48}, 0x94) ppoll(&(0x7f0000000080)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket(0x1a, 0x5, 0x7) 2.389019625s ago: executing program 0 (id=515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0xb, 0x6, 0x201, 0x0, 0x0, {0x6, 0x0, 0x12}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x6, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x44000) 2.129081964s ago: executing program 1 (id=516): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 1.939754143s ago: executing program 3 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x5, 0x0, 0xfffffc}]}, 0x10) write$tun(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="016f08000100270000002700000046008029000000000084"], 0xfd6c) 1.898693111s ago: executing program 0 (id=518): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, 0x0}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r3, 0x0, 0x4000}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x4044001) 1.476086848s ago: executing program 1 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="34000000100001000400"/20, @ANYRES32=r2, @ANYBLOB="0b000000000000000c001a8008000280041401800800040000000000ce376a28d0d4f2774c"], 0x34}}, 0x0) 1.326104185s ago: executing program 0 (id=520): sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00006003ffffffffffffffffffffffff8100250008004500002000002000fc2f90780a018bca063273109301"], 0x36) 1.285744219s ago: executing program 2 (id=521): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xb, "1f8d"}], 0x18}, 0x8040) 1.012823319s ago: executing program 3 (id=522): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, 0x0, {0xfff1, 0xffe0}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x10], 0x0, [0x8, 0x4], [0x0, 0x8, 0x1, 0xfffe, 0x5, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xddf0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) 772.469773ms ago: executing program 4 (id=523): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a000000000000000800050001fffe0004000b"], 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 647.907336ms ago: executing program 2 (id=524): socket$kcm(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) 364.997196ms ago: executing program 3 (id=525): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000330000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f698", 0x5b}], 0x1, 0x0, 0x0, 0x1f000801}, 0x840) 356.407373ms ago: executing program 0 (id=526): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7}, 0x50) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 189.537718ms ago: executing program 1 (id=527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) syz_genetlink_get_family_id$fou(&(0x7f0000002bc0), r4) 125.295958ms ago: executing program 4 (id=528): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0xf810, 0x8, 0xdbc, 0x101, {{0x5, 0x4, 0x1, 0x6, 0x14, 0x67, 0x0, 0x2, 0x4, 0x0, @empty, @empty}}}}) 0s ago: executing program 2 (id=529): unshare(0x22020600) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.109' (ED25519) to the list of known hosts. [ 192.633010][ T5795] cgroup: Unknown subsys name 'net' [ 192.765399][ T5795] cgroup: Unknown subsys name 'cpuset' [ 192.784171][ T5795] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 199.378215][ T5795] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 203.801044][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 203.808932][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.817966][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.826820][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.835834][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 203.845219][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 203.857043][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.868691][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 203.879152][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 203.889330][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 203.988035][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 203.998363][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.027243][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.046510][ T5818] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.104333][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 204.116652][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 204.126735][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 204.140528][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.151487][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 204.166562][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.176283][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.192176][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 204.205082][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.217194][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.269863][ T49] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 205.136024][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 205.670628][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 205.999509][ T5818] Bluetooth: hci0: command tx timeout [ 206.005506][ T5817] Bluetooth: hci1: command tx timeout [ 206.312697][ T5818] Bluetooth: hci4: command tx timeout [ 206.318468][ T5818] Bluetooth: hci3: command tx timeout [ 206.397117][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.404814][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.412491][ T5812] bridge_slave_0: entered allmulticast mode [ 206.422554][ T5812] bridge_slave_0: entered promiscuous mode [ 206.439753][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 206.467026][ T5818] Bluetooth: hci2: command tx timeout [ 206.510513][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.519229][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.527140][ T5812] bridge_slave_1: entered allmulticast mode [ 206.536767][ T5812] bridge_slave_1: entered promiscuous mode [ 206.547761][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 206.954972][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.024686][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.317097][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.324934][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.332712][ T5811] bridge_slave_0: entered allmulticast mode [ 207.344396][ T5811] bridge_slave_0: entered promiscuous mode [ 207.369805][ T5812] team0: Port device team_slave_0 added [ 207.379076][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 207.413252][ T5812] team0: Port device team_slave_1 added [ 207.424492][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.432266][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.440260][ T5811] bridge_slave_1: entered allmulticast mode [ 207.450269][ T5811] bridge_slave_1: entered promiscuous mode [ 207.733472][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.741008][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.768575][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.094756][ T5818] Bluetooth: hci0: command tx timeout [ 208.100414][ T5818] Bluetooth: hci1: command tx timeout [ 208.176400][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.183545][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.214103][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.247029][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.254754][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.262438][ T5820] bridge_slave_0: entered allmulticast mode [ 208.272126][ T5820] bridge_slave_0: entered promiscuous mode [ 208.298698][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.308688][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.316880][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.324631][ T5820] bridge_slave_1: entered allmulticast mode [ 208.334468][ T5820] bridge_slave_1: entered promiscuous mode [ 208.384909][ T5817] Bluetooth: hci3: command tx timeout [ 208.390581][ T5818] Bluetooth: hci4: command tx timeout [ 208.443201][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.555596][ T5818] Bluetooth: hci2: command tx timeout [ 208.566403][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.574114][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.581840][ T5822] bridge_slave_0: entered allmulticast mode [ 208.591641][ T5822] bridge_slave_0: entered promiscuous mode [ 208.615063][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.723753][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.782826][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.790924][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.798973][ T5822] bridge_slave_1: entered allmulticast mode [ 208.809315][ T5822] bridge_slave_1: entered promiscuous mode [ 208.935394][ T5812] hsr_slave_0: entered promiscuous mode [ 208.946048][ T5812] hsr_slave_1: entered promiscuous mode [ 209.008055][ T5811] team0: Port device team_slave_0 added [ 209.027039][ T5811] team0: Port device team_slave_1 added [ 209.082814][ T5820] team0: Port device team_slave_0 added [ 209.215505][ T5820] team0: Port device team_slave_1 added [ 209.322617][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.332531][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.340418][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.348315][ T5823] bridge_slave_0: entered allmulticast mode [ 209.358132][ T5823] bridge_slave_0: entered promiscuous mode [ 209.513787][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.525597][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.532724][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.559056][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.573201][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.580959][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.589286][ T5823] bridge_slave_1: entered allmulticast mode [ 209.598769][ T5823] bridge_slave_1: entered promiscuous mode [ 209.612539][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.620009][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.646716][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.762052][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.769522][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.796116][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.851270][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.858721][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.885245][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.960839][ T5822] team0: Port device team_slave_0 added [ 210.056672][ T5822] team0: Port device team_slave_1 added [ 210.120443][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.148741][ T5818] Bluetooth: hci1: command tx timeout [ 210.163921][ T5818] Bluetooth: hci0: command tx timeout [ 210.346764][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.441225][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.448485][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.474923][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.482296][ T5817] Bluetooth: hci3: command tx timeout [ 210.487938][ T5818] Bluetooth: hci4: command tx timeout [ 210.532069][ T5811] hsr_slave_0: entered promiscuous mode [ 210.542325][ T5811] hsr_slave_1: entered promiscuous mode [ 210.551130][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 210.557177][ T5811] Cannot create hsr debugfs directory [ 210.611938][ T5820] hsr_slave_0: entered promiscuous mode [ 210.622288][ T5820] hsr_slave_1: entered promiscuous mode [ 210.629756][ T5818] Bluetooth: hci2: command tx timeout [ 210.631806][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 210.641217][ T5820] Cannot create hsr debugfs directory [ 210.661853][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.669072][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.695613][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.924042][ T5823] team0: Port device team_slave_0 added [ 211.066226][ T5823] team0: Port device team_slave_1 added [ 211.397050][ T5822] hsr_slave_0: entered promiscuous mode [ 211.406778][ T5822] hsr_slave_1: entered promiscuous mode [ 211.415573][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 211.421494][ T5822] Cannot create hsr debugfs directory [ 211.551739][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.559180][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.585728][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.716501][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.724044][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.751643][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.186692][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.223884][ T5818] Bluetooth: hci0: command tx timeout [ 212.229519][ T5818] Bluetooth: hci1: command tx timeout [ 212.344249][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.383059][ T5823] hsr_slave_0: entered promiscuous mode [ 212.392274][ T5823] hsr_slave_1: entered promiscuous mode [ 212.401135][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 212.407204][ T5823] Cannot create hsr debugfs directory [ 212.464086][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.556696][ T5818] Bluetooth: hci4: command tx timeout [ 212.562365][ T5818] Bluetooth: hci3: command tx timeout [ 212.579484][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.704417][ T5818] Bluetooth: hci2: command tx timeout [ 212.767288][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 212.904291][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 212.980306][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.028357][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.204785][ T5811] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.247352][ T5811] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.391800][ T5811] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.422009][ T5811] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.554189][ T5822] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 213.635424][ T5822] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 213.666233][ T5822] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 213.764802][ T5822] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.260298][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.379108][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 214.497297][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 214.536273][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 214.606892][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.631574][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 214.727194][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.734995][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.856051][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.863895][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.978057][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.057626][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.278297][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.416137][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.457715][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.465354][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.599368][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.607013][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.623707][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.631252][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.647778][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.655614][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.703064][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.956704][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.105999][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.113550][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.281085][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.288749][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.411774][ T5811] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 216.650117][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.921031][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.032262][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.039977][ T3728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.157043][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.164755][ T3728] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.775118][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.471318][ T5812] veth0_vlan: entered promiscuous mode [ 218.533879][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.620276][ T5812] veth1_vlan: entered promiscuous mode [ 218.901181][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.113737][ T5812] veth0_macvtap: entered promiscuous mode [ 219.188985][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.260816][ T5812] veth1_macvtap: entered promiscuous mode [ 219.530366][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.729318][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.804568][ T5811] veth0_vlan: entered promiscuous mode [ 219.872159][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.901994][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.972211][ T5822] veth0_vlan: entered promiscuous mode [ 219.987119][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.020795][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.034028][ T5811] veth1_vlan: entered promiscuous mode [ 220.095050][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.157452][ T5822] veth1_vlan: entered promiscuous mode [ 220.616377][ T5811] veth0_macvtap: entered promiscuous mode [ 220.733433][ T5822] veth0_macvtap: entered promiscuous mode [ 220.757541][ T5823] veth0_vlan: entered promiscuous mode [ 220.776333][ T5811] veth1_macvtap: entered promiscuous mode [ 220.832493][ T5822] veth1_macvtap: entered promiscuous mode [ 220.925447][ T5823] veth1_vlan: entered promiscuous mode [ 221.067759][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.233054][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.260596][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.370695][ T3728] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.429302][ T3728] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.453455][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.479973][ T5823] veth0_macvtap: entered promiscuous mode [ 221.511963][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.589410][ T5823] veth1_macvtap: entered promiscuous mode [ 221.610605][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.658680][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.729920][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.804376][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.811893][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.915664][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.934018][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.047118][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.125505][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.182249][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.239908][ T1827] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.325483][ T5820] veth0_vlan: entered promiscuous mode [ 222.458586][ T5820] veth1_vlan: entered promiscuous mode [ 222.852020][ T5820] veth0_macvtap: entered promiscuous mode [ 222.998552][ T5820] veth1_macvtap: entered promiscuous mode [ 223.237195][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.398518][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.495262][ T3502] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.556352][ T3502] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.583492][ T1827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.600587][ T1827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.406633][ T3502] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.416043][ T3502] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.730527][ T4355] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.740356][ T4355] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.246276][ T5812] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 229.312309][ T3728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.320571][ T3728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.473487][ T3594] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.481725][ T3594] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.625073][ T3531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.633136][ T3531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.815463][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.829864][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.950376][ T3531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.958926][ T3531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.072886][ T3728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.081334][ T3728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.174313][ T1827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.182376][ T1827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.295744][ T6011] IPVS: length: 163 != 8 [ 231.480870][ T3594] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.489682][ T3594] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.934414][ T6017] netlink: 'syz.0.6': attribute type 10 has an invalid length. [ 231.946655][ T6017] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6'. [ 232.040903][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 232.054806][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 232.127613][ T6017] batadv0: entered promiscuous mode [ 232.133064][ T6017] batadv0: entered allmulticast mode [ 232.143456][ T6017] bridge0: port 3(batadv0) entered blocking state [ 232.158584][ T6017] bridge0: port 3(batadv0) entered disabled state [ 232.173474][ T6017] bridge0: port 3(batadv0) entered blocking state [ 232.180693][ T6017] bridge0: port 3(batadv0) entered forwarding state [ 232.529877][ T3728] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 232.539578][ T3728] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 232.553144][ T3594] syzkaller0: tun_net_xmit 76 [ 232.564533][ T3594] syzkaller0: tun_net_xmit 48 [ 232.574785][ T5866] syzkaller0: tun_net_xmit 76 [ 232.643167][ T6022] syzkaller0: create flow: hash 1549173608 index 0 [ 232.881089][ T6029] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 233.194468][ T6023] syzkaller0 (unregistered): delete flow: hash 1549173608 index 0 [ 233.495996][ T6036] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 234.880652][ T6050] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 234.978117][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.985063][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 235.313136][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.323520][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.622569][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.660970][ T6048] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.362683][ T3728] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.441828][ T3728] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.495281][ T3728] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.564715][ T3728] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.108170][ T6081] netlink: 256 bytes leftover after parsing attributes in process `syz.0.27'. [ 238.475085][ T6089] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 238.486862][ T6088] IPVS: stopping backup sync thread 6089 ... [ 239.601813][ T6102] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 242.423446][ T6137] vlan2: entered promiscuous mode [ 242.428988][ T6137] veth0_virt_wifi: entered promiscuous mode [ 242.436700][ T6137] vlan2: entered allmulticast mode [ 242.442031][ T6137] veth0_virt_wifi: entered allmulticast mode [ 243.785363][ T6145] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 243.791658][ T6145] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 243.935268][ T6145] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 243.941564][ T6145] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 244.089011][ T6145] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 244.095496][ T6145] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 244.222944][ T6145] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 244.233729][ T6145] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 244.309949][ T6145] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 244.317543][ T6145] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 247.877630][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 256.549145][ T6293] netlink: 32 bytes leftover after parsing attributes in process `syz.1.107'. [ 256.873188][ T6220] Set syz1 is full, maxelem 65536 reached [ 257.676599][ T6308] netlink: 40 bytes leftover after parsing attributes in process `syz.2.111'. [ 258.674525][ T6330] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 260.765018][ T6361] netlink: 180 bytes leftover after parsing attributes in process `syz.4.132'. [ 260.774388][ T6361] netlink: 180 bytes leftover after parsing attributes in process `syz.4.132'. [ 260.783861][ T6361] netlink: 14 bytes leftover after parsing attributes in process `syz.4.132'. [ 261.330651][ T6370] netlink: 264 bytes leftover after parsing attributes in process `syz.1.136'. [ 261.764457][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 261.966083][ T6381] macvtap1: entered promiscuous mode [ 261.971650][ T6381] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 263.536700][ T6406] Zero length message leads to an empty skb [ 264.619080][ T6424] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.152'. [ 265.691204][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.159'. [ 271.267379][ T6530] warning: `syz.0.192' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 275.949792][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 283.267180][ T6728] netlink: 16 bytes leftover after parsing attributes in process `syz.2.271'. [ 283.610992][ T6726] netlink: 32 bytes leftover after parsing attributes in process `syz.2.271'. [ 286.882966][ T6780] bridge0: port 3(syz_tun) entered blocking state [ 286.890268][ T6780] bridge0: port 3(syz_tun) entered disabled state [ 286.897557][ T6780] syz_tun: entered allmulticast mode [ 286.906566][ T6780] syz_tun: entered promiscuous mode [ 286.914452][ T6780] bridge0: port 3(syz_tun) entered blocking state [ 286.921367][ T6780] bridge0: port 3(syz_tun) entered forwarding state [ 286.987229][ T6782] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 290.211593][ T6816] syz.3.307 (6816) used greatest stack depth: 2344 bytes left [ 293.246736][ T6874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 293.276588][ T6874] macsec1: entered promiscuous mode [ 293.282163][ T6874] batadv0: entered promiscuous mode [ 293.288845][ T6874] macsec1: entered allmulticast mode [ 293.294447][ T6874] batadv0: entered allmulticast mode [ 293.368549][ T6874] batadv0: left allmulticast mode [ 293.373976][ T6874] batadv0: left promiscuous mode [ 296.137433][ T6918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.347'. [ 296.426278][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.433221][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.822661][ T6923] ieee802154 phy0 wpan0: encryption failed: -22 [ 297.762631][ T6932] netdevsim netdevsim2: loading /lib/firmware// failed with error -22 [ 297.771464][ T6932] netdevsim netdevsim2: Direct firmware load for / failed with error -22 [ 297.780486][ T6932] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 298.015960][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 298.935369][ T6949] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 300.275164][ T6967] netlink: 'syz.3.368': attribute type 5 has an invalid length. [ 300.794031][ T6976] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.840550][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 301.581727][ T6988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.378'. [ 301.591584][ T6988] netlink: 20 bytes leftover after parsing attributes in process `syz.4.378'. [ 301.600871][ T6988] tipc: Invalid UDP bearer configuration [ 301.601106][ T6988] tipc: Enabling of bearer rejected, failed to enable media [ 301.835562][ T6996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.151829][ T6999] netlink: 'syz.3.377': attribute type 16 has an invalid length. [ 302.160337][ T6999] netlink: 'syz.3.377': attribute type 17 has an invalid length. [ 302.282120][ T6999] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 304.105992][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.383'. [ 306.977786][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.398'. [ 307.625199][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 308.777954][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.410'. [ 309.696670][ T7091] tipc: Started in network mode [ 309.701974][ T7091] tipc: Node identity 5a6200bc0a33, cluster identity 4711 [ 309.710672][ T7091] tipc: Enabled bearer , priority 0 [ 309.806127][ T7091] syzkaller0: entered promiscuous mode [ 309.811930][ T7091] syzkaller0: entered allmulticast mode [ 309.927923][ T7091] tipc: Resetting bearer [ 310.035484][ T7089] tipc: Resetting bearer [ 310.157270][ T7089] tipc: Disabling bearer [ 311.041464][ T7116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 318.636097][ T7214] netlink: 104 bytes leftover after parsing attributes in process `syz.2.465'. [ 319.645097][ T7227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.469'. [ 319.724781][ T7229] bridge0: entered allmulticast mode [ 320.824943][ T7246] netlink: 4300 bytes leftover after parsing attributes in process `syz.0.479'. [ 322.120689][ T7265] pimreg: entered allmulticast mode [ 322.805577][ T7277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.491'. [ 323.881755][ T7291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.497'. [ 324.870103][ T7310] xfrm0: entered promiscuous mode [ 324.875782][ T7310] xfrm0: entered allmulticast mode [ 326.221545][ T7329] block nbd1: not configured, cannot reconfigure [ 329.062169][ T7366] ===================================================== [ 329.069705][ T7366] BUG: KMSAN: kernel-infoleak in _copy_to_iter+0xef3/0x33f0 [ 329.077439][ T7366] _copy_to_iter+0xef3/0x33f0 [ 329.082334][ T7366] __skb_datagram_iter+0x196/0x12c0 [ 329.088059][ T7366] skb_copy_datagram_iter+0x5b/0x1e0 [ 329.093764][ T7366] netlink_recvmsg+0x4bb/0xfe0 [ 329.098755][ T7366] sock_recvmsg+0x2dc/0x390 [ 329.103839][ T7366] __sys_recvfrom+0x282/0x550 [ 329.108778][ T7366] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 329.115374][ T7366] ia32_sys_call+0x2942/0x4310 [ 329.120331][ T7366] __do_fast_syscall_32+0xb0/0x150 [ 329.126478][ T7366] do_fast_syscall_32+0x38/0x80 [ 329.131525][ T7366] do_SYSENTER_32+0x1f/0x30 [ 329.136345][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.142906][ T7366] [ 329.145568][ T7366] Uninit was created at: [ 329.150110][ T7366] __kmalloc_node_track_caller_noprof+0x96d/0x12f0 [ 329.157195][ T7366] kmalloc_reserve+0x22f/0x4b0 [ 329.162262][ T7366] __alloc_skb+0x347/0x7d0 [ 329.167098][ T7366] netlink_dump+0x24f/0x17d0 [ 329.171918][ T7366] __netlink_dump_start+0x716/0xd60 [ 329.179406][ T7366] rtnetlink_rcv_msg+0x1262/0x14b0 [ 329.184836][ T7366] netlink_rcv_skb+0x54a/0x680 [ 329.189992][ T7366] rtnetlink_rcv+0x35/0x40 [ 329.194675][ T7366] netlink_unicast+0xf01/0x12b0 [ 329.199728][ T7366] netlink_sendmsg+0x10b3/0x1250 [ 329.205663][ T7366] __sock_sendmsg+0x330/0x3d0 [ 329.210527][ T7366] ____sys_sendmsg+0x7e0/0xd80 [ 329.215641][ T7366] ___sys_sendmsg+0x271/0x3b0 [ 329.220554][ T7366] __sys_sendmsg+0x1aa/0x300 [ 329.225476][ T7366] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 329.231264][ T7366] ia32_sys_call+0x3f6c/0x4310 [ 329.236415][ T7366] __do_fast_syscall_32+0xb0/0x150 [ 329.241795][ T7366] do_fast_syscall_32+0x38/0x80 [ 329.246966][ T7366] do_SYSENTER_32+0x1f/0x30 [ 329.251673][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.258597][ T7366] [ 329.261190][ T7366] Bytes 32-35 of 44 are uninitialized [ 329.267236][ T7366] Memory access of size 44 starts at ffff888050033000 [ 329.274262][ T7366] Data copied to user address 00000000f5475560 [ 329.280716][ T7366] [ 329.283191][ T7366] CPU: 0 UID: 0 PID: 7366 Comm: syz.1.527 Not tainted syzkaller #0 PREEMPT(none) [ 329.292697][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.303215][ T7366] ===================================================== [ 329.310477][ T7366] Disabling lock debugging due to kernel taint [ 329.316918][ T7366] Kernel panic - not syncing: kmsan.panic set ... [ 329.323520][ T7366] CPU: 0 UID: 0 PID: 7366 Comm: syz.1.527 Tainted: G B syzkaller #0 PREEMPT(none) [ 329.334615][ T7366] Tainted: [B]=BAD_PAGE [ 329.338973][ T7366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.349188][ T7366] Call Trace: [ 329.352608][ T7366] [ 329.355662][ T7366] __dump_stack+0x26/0x30 [ 329.360238][ T7366] dump_stack_lvl+0x53/0x270 [ 329.365060][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.371153][ T7366] dump_stack+0x1e/0x25 [ 329.375617][ T7366] vpanic+0x361/0xc50 [ 329.379834][ T7366] panic+0x15d/0x160 [ 329.384015][ T7366] kmsan_report+0x31c/0x320 [ 329.388749][ T7366] ? kmsan_internal_check_memory+0x16c/0x230 [ 329.394925][ T7366] ? kmsan_copy_to_user+0xf1/0x190 [ 329.400243][ T7366] ? _copy_to_iter+0xef3/0x33f0 [ 329.405381][ T7366] ? __skb_datagram_iter+0x196/0x12c0 [ 329.410995][ T7366] ? skb_copy_datagram_iter+0x5b/0x1e0 [ 329.416690][ T7366] ? netlink_recvmsg+0x4bb/0xfe0 [ 329.421867][ T7366] ? sock_recvmsg+0x2dc/0x390 [ 329.426742][ T7366] ? __sys_recvfrom+0x282/0x550 [ 329.431789][ T7366] ? __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 329.438256][ T7366] ? ia32_sys_call+0x2942/0x4310 [ 329.443373][ T7366] ? __do_fast_syscall_32+0xb0/0x150 [ 329.448825][ T7366] ? do_fast_syscall_32+0x38/0x80 [ 329.454019][ T7366] ? do_SYSENTER_32+0x1f/0x30 [ 329.458855][ T7366] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.465653][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.471660][ T7366] ? __do_fast_syscall_32+0x111/0x150 [ 329.477279][ T7366] ? filter_irq_stacks+0x49/0x190 [ 329.482470][ T7366] ? stack_depot_save_flags+0x35/0x7b0 [ 329.488096][ T7366] ? kmsan_get_metadata+0xfb/0x160 [ 329.493389][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 329.499896][ T7366] ? kmsan_internal_poison_memory+0x7f/0xa0 [ 329.505970][ T7366] ? kmsan_get_metadata+0xfb/0x160 [ 329.511274][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.517287][ T7366] kmsan_internal_check_memory+0x16c/0x230 [ 329.523287][ T7366] kmsan_copy_to_user+0xf1/0x190 [ 329.528398][ T7366] _copy_to_iter+0xef3/0x33f0 [ 329.533245][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 329.539825][ T7366] ? kmsan_get_metadata+0xfb/0x160 [ 329.545277][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.551338][ T7366] ? kmsan_get_metadata+0xfb/0x160 [ 329.556661][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 329.563221][ T7366] __skb_datagram_iter+0x196/0x12c0 [ 329.568677][ T7366] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 329.574580][ T7366] skb_copy_datagram_iter+0x5b/0x1e0 [ 329.580091][ T7366] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 329.586104][ T7366] netlink_recvmsg+0x4bb/0xfe0 [ 329.591181][ T7366] ? aa_sock_msg_perm+0x29c/0x2f0 [ 329.596449][ T7366] ? __pfx_netlink_recvmsg+0x10/0x10 [ 329.602026][ T7366] sock_recvmsg+0x2dc/0x390 [ 329.606715][ T7366] __sys_recvfrom+0x282/0x550 [ 329.611580][ T7366] ? filter_irq_stacks+0x49/0x190 [ 329.616859][ T7366] ? stack_depot_save_flags+0x35/0x7b0 [ 329.622532][ T7366] __ia32_compat_sys_socketcall+0x1058/0x1af0 [ 329.628849][ T7366] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 329.635371][ T7366] ia32_sys_call+0x2942/0x4310 [ 329.640300][ T7366] __do_fast_syscall_32+0xb0/0x150 [ 329.645579][ T7366] ? irqentry_exit_to_user_mode+0x82/0xa0 [ 329.651517][ T7366] do_fast_syscall_32+0x38/0x80 [ 329.656528][ T7366] do_SYSENTER_32+0x1f/0x30 [ 329.661180][ T7366] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 329.667720][ T7366] RIP: 0023:0xf7f75539 [ 329.671951][ T7366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 329.691828][ T7366] RSP: 002b:00000000f5475440 EFLAGS: 00000206 ORIG_RAX: 0000000000000066 [ 329.700434][ T7366] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000f547545c [ 329.708623][ T7366] RDX: 0000000000000000 RSI: 00000000f5475560 RDI: 00000000f7404ff4 [ 329.716723][ T7366] RBP: 00000000f5475560 R08: 0000000000000000 R09: 0000000000000000 [ 329.724819][ T7366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 329.732907][ T7366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 329.741170][ T7366] [ 329.744488][ T7366] Kernel Offset: disabled [ 329.748896][ T7366] Rebooting in 86400 seconds..