last executing test programs: 10.084095455s ago: executing program 2 (id=1784): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, 0x0, 0x1a) 6.711465973s ago: executing program 2 (id=1793): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) 6.512819686s ago: executing program 3 (id=1795): socket(0x2, 0x80805, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e00"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f0000000100)=""/114, 0x72) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 6.273668812s ago: executing program 1 (id=1714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x44) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000002c0)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000000e00)={{}, r3, 0x2, @inherit={0x60, &(0x7f0000000300)={0x0, 0x3, 0x1, 0x7485, {0x20, 0x0, 0x9, 0x1, 0xddbc}, [0x7, 0x8c76, 0xb]}}, @devid}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf1b04000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008004) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) close(0x3) 6.272645607s ago: executing program 2 (id=1796): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x7, 0x4, 0x3ffd, 0x7}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 5.022806986s ago: executing program 3 (id=1799): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 4.826657141s ago: executing program 2 (id=1800): unshare(0x24060400) r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="270000001400070f030e0000120f0a001100b1128a151f75080039000500"/39, 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x34, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @multicast2}, &(0x7f00000002c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000300)={@mcast1, @empty, @local, 0x5, 0xbb9, 0xa25, 0x100, 0x1, 0x4020091, r5}) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x4, @any, 0x1b}, 0xe) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x400000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 4.681406312s ago: executing program 0 (id=1801): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, 0x0, 0xd0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)='a\'', 0x2}], 0x1}}], 0x2, 0x40) 4.639898158s ago: executing program 4 (id=1802): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd70000000000002000000", @ANYRES32], 0x28}}, 0x0) r4 = fsopen(0x0, 0x0) r5 = fsmount(r4, 0x0, 0x80) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r6, r5, 0x20, 0x0, @val=@tracing={0xffffffffffffffff, 0x5}}, 0x20) close(r4) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, 0x0, 0x0) 4.539792182s ago: executing program 0 (id=1803): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002000000000000000003", 0x3f}], 0x1) 3.452769902s ago: executing program 1 (id=1804): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) getgid() ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f00000000c0)=[{0x6, 0x9, 0xc, 0xb6}]}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x21}}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x2, 0x3, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4090) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.451453239s ago: executing program 3 (id=1805): socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000) syz_open_dev$hiddev(0x0, 0x0, 0x80800) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) close(r2) r3 = fsopen(&(0x7f0000000080)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000100), 0x10) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x15, &(0x7f0000002440)={@dev={0xac, 0x14, 0x14, 0xa}, @local}, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r6, 0xa) 3.407538955s ago: executing program 4 (id=1806): mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2186a, 0x0) 3.406123943s ago: executing program 2 (id=1807): socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8947, &(0x7f0000000200)={'bond0\x00', 0x10000}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x14, r5, 0x1, 0x0, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x7c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {}, {0x0, 0x1}, {0xa, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0xc4ff}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x24, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff2, 0x6}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xa, 0xb}}, @TCA_ROUTE4_TO={0x8, 0x2, 0x5e}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x7c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) socket$nl_generic(0x10, 0x3, 0x10) 3.187624864s ago: executing program 1 (id=1808): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f00", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 3.048287022s ago: executing program 4 (id=1809): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) chdir(0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r2, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) 2.528587587s ago: executing program 3 (id=1810): socket(0x2, 0x80805, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="4b0003000000", 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x0, {0x0, 0x0, 0x4, 0x0, 0x414, 0x5ff10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIN_LINKS={0x8, 0x12, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x8c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x48040) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) syz_emit_ethernet(0x3c, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa08004500002e00"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r4, &(0x7f0000000100)=""/114, 0x72) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) 2.378337603s ago: executing program 0 (id=1811): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$evdev(0x0, 0x40002, 0xa69c0) io_uring_setup(0x2eff, &(0x7f0000000340)={0x0, 0xe8e5, 0x2, 0xfffffffd, 0x290}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/wireless\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) r4 = socket(0x10, 0x803, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r4) getsockname$packet(r4, 0x0, &(0x7f0000000200)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x4, 0x0, 0xe2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev, 0x80, 0x0, 0xffffffff, 0x1}}) 2.13858162s ago: executing program 1 (id=1812): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x10001, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r2) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB], 0x3c}}, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff0000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400", @ANYRES32, @ANYBLOB="ed5d5e67"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000480)=[{0x3, 0x4, 0xb, 0x5}, {0x1, 0x4, 0xb, 0x5}], 0x10, 0x3}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x6}, {0xfff1, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.885522584s ago: executing program 4 (id=1813): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x1}], 0x1, 0x0, 0xd0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)='a\'', 0x2}], 0x1}}], 0x2, 0x40) 1.032318866s ago: executing program 1 (id=1814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x22c}}, 0x0) 928.189376ms ago: executing program 4 (id=1815): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b00"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close(r0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x10}, {0x1, 0xb}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) 898.482141ms ago: executing program 0 (id=1816): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="140100002f00011b00000000ecdbdf2501"], 0x114}], 0x1, 0x0, 0x0, 0x4001}, 0x20000000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002f00010000000000fcdbdf250301f2800c00180008ac0f0000000000140001000000ffffffff00000000ffffac14141650bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc0"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x42, 0x0, 0x0) 702.432783ms ago: executing program 1 (id=1817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x20000000008) 531.508637ms ago: executing program 3 (id=1818): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000300)=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r3, &(0x7f0000000380)="0099", &(0x7f0000000480)=@tcp6=r0, 0x2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x5, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x22}, 0x50) 529.977888ms ago: executing program 0 (id=1819): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x1, r0, 0x0, 0x8, &(0x7f0000000340)) 204.509449ms ago: executing program 2 (id=1820): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 137.382774ms ago: executing program 4 (id=1821): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}], 0x1, 0x4000800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}]}, &(0x7f0000000180)=0x10) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000340)="480000001400190d09034beafd0d36020a841a000000230f00000000a2bc5603ca00000f7f89004e00200000000101ff00c00e030002000000000000000003", 0x3f}], 0x1) 55.291905ms ago: executing program 3 (id=1822): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x1, 0x1, {0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff8}}}, 0x32) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59", 0xd}], 0x1}, 0x4) socket$kcm(0x10, 0x400000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x1d) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000005002f00", @ANYRES32=r3], 0x2c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c50f00000000000000001100000008000300", @ANYRES32=0x0, @ANYBLOB="08002a01"], 0x24}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x20000840) 0s ago: executing program 0 (id=1823): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket(0x1d, 0x2, 0x6) socket$inet6_sctp(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) chdir(0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.40' (ED25519) to the list of known hosts. [ 90.811600][ T5783] cgroup: Unknown subsys name 'net' [ 91.052682][ T5783] cgroup: Unknown subsys name 'cpuset' [ 91.107854][ T5783] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.901619][ T992] cfg80211: failed to load regulatory.db [ 93.007802][ T5783] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.422623][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.437359][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.438198][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.439472][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.440276][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.492853][ T5115] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.494983][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.495682][ T5115] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.521114][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.522344][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.524121][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.552214][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.554084][ T5804] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.554540][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.624170][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.624170][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.633919][ T5804] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.635565][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.638910][ T5804] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.639696][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.723350][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.725302][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.728271][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.754752][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.767396][ T5115] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.475054][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 96.662245][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 96.862935][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 96.913709][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 96.947757][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.947899][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.948098][ T5795] bridge_slave_0: entered allmulticast mode [ 96.956074][ T5795] bridge_slave_0: entered promiscuous mode [ 97.023246][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.023422][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.023551][ T5795] bridge_slave_1: entered allmulticast mode [ 97.025435][ T5795] bridge_slave_1: entered promiscuous mode [ 97.080909][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 97.210848][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.211044][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.211226][ T5797] bridge_slave_0: entered allmulticast mode [ 97.213193][ T5797] bridge_slave_0: entered promiscuous mode [ 97.224605][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.283193][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.283314][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.283438][ T5797] bridge_slave_1: entered allmulticast mode [ 97.285335][ T5797] bridge_slave_1: entered promiscuous mode [ 97.294291][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.498629][ T5115] Bluetooth: hci0: command tx timeout [ 97.548083][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.548219][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.548402][ T5800] bridge_slave_0: entered allmulticast mode [ 97.551764][ T5800] bridge_slave_0: entered promiscuous mode [ 97.589175][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.591973][ T5795] team0: Port device team_slave_0 added [ 97.592216][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.592359][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.592559][ T5799] bridge_slave_0: entered allmulticast mode [ 97.594609][ T5799] bridge_slave_0: entered promiscuous mode [ 97.601550][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.602002][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.602471][ T5800] bridge_slave_1: entered allmulticast mode [ 97.615820][ T5800] bridge_slave_1: entered promiscuous mode [ 97.659624][ T5115] Bluetooth: hci1: command tx timeout [ 97.676203][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.682797][ T5795] team0: Port device team_slave_1 added [ 97.683981][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.684349][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.684850][ T5799] bridge_slave_1: entered allmulticast mode [ 97.696624][ T5799] bridge_slave_1: entered promiscuous mode [ 97.747993][ T5804] Bluetooth: hci3: command tx timeout [ 97.748169][ T5115] Bluetooth: hci2: command tx timeout [ 97.817245][ T5115] Bluetooth: hci4: command tx timeout [ 97.820696][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.820821][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.820988][ T5807] bridge_slave_0: entered allmulticast mode [ 97.823145][ T5807] bridge_slave_0: entered promiscuous mode [ 97.896028][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.896286][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.896410][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.896579][ T5807] bridge_slave_1: entered allmulticast mode [ 97.905745][ T5807] bridge_slave_1: entered promiscuous mode [ 97.919842][ T5797] team0: Port device team_slave_0 added [ 97.923076][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.923117][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.923191][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.960718][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.005066][ T5797] team0: Port device team_slave_1 added [ 98.013490][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.014279][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.014290][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.014310][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.018370][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.139736][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.193824][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.195086][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.195098][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.195118][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.244411][ T5800] team0: Port device team_slave_0 added [ 98.256618][ T5799] team0: Port device team_slave_0 added [ 98.276555][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.276581][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.276601][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.329914][ T5800] team0: Port device team_slave_1 added [ 98.332555][ T5799] team0: Port device team_slave_1 added [ 98.408228][ T5807] team0: Port device team_slave_0 added [ 98.425288][ T5795] hsr_slave_0: entered promiscuous mode [ 98.426707][ T5795] hsr_slave_1: entered promiscuous mode [ 98.471176][ T5807] team0: Port device team_slave_1 added [ 98.473657][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.473671][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.473691][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.959822][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.959839][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.959862][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.026745][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.026758][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.026779][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.038747][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.038770][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.038790][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.162392][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.162425][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.162456][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.189853][ T5797] hsr_slave_0: entered promiscuous mode [ 99.194715][ T5797] hsr_slave_1: entered promiscuous mode [ 99.201644][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 99.201960][ T5797] Cannot create hsr debugfs directory [ 99.242901][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.242916][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.242938][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.424090][ T5800] hsr_slave_0: entered promiscuous mode [ 99.425103][ T5800] hsr_slave_1: entered promiscuous mode [ 99.425831][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 99.425862][ T5800] Cannot create hsr debugfs directory [ 99.450494][ T5799] hsr_slave_0: entered promiscuous mode [ 99.452065][ T5799] hsr_slave_1: entered promiscuous mode [ 99.454664][ T5799] debugfs: 'hsr0' already exists in 'hsr' [ 99.454727][ T5799] Cannot create hsr debugfs directory [ 99.577282][ T5115] Bluetooth: hci0: command tx timeout [ 99.643890][ T5807] hsr_slave_0: entered promiscuous mode [ 99.644942][ T5807] hsr_slave_1: entered promiscuous mode [ 99.645614][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 99.645632][ T5807] Cannot create hsr debugfs directory [ 99.737364][ T5115] Bluetooth: hci1: command tx timeout [ 99.817376][ T5115] Bluetooth: hci2: command tx timeout [ 99.817420][ T5115] Bluetooth: hci3: command tx timeout [ 99.897665][ T5804] Bluetooth: hci4: command tx timeout [ 100.321672][ T5795] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.385783][ T5795] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.405004][ T5795] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.460601][ T5795] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.620632][ T5799] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.664344][ T5799] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.682241][ T5799] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.740573][ T5799] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.890521][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.922805][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.959313][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.008171][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.123566][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.161292][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.196162][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.256512][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.402448][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.458182][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.463903][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.513154][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.544681][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.653835][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.657528][ T5804] Bluetooth: hci0: command tx timeout [ 101.700582][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.701689][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.709524][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.765875][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.765993][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.817255][ T5804] Bluetooth: hci1: command tx timeout [ 101.836502][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.880303][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.884799][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.884949][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.897289][ T5804] Bluetooth: hci3: command tx timeout [ 101.897323][ T5804] Bluetooth: hci2: command tx timeout [ 101.956737][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.956892][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.977424][ T5804] Bluetooth: hci4: command tx timeout [ 102.026408][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.054084][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.084349][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.084484][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.132587][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.133107][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.203969][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.242817][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.271584][ T1443] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.271837][ T1443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.332508][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.333544][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.409457][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.468919][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.469182][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.531457][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.531600][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.645956][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.885185][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.892383][ T5795] veth0_vlan: entered promiscuous mode [ 102.978439][ T5795] veth1_vlan: entered promiscuous mode [ 103.195101][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.195598][ T5799] veth0_vlan: entered promiscuous mode [ 103.211834][ T5795] veth0_macvtap: entered promiscuous mode [ 103.236273][ T5795] veth1_macvtap: entered promiscuous mode [ 103.260306][ T5799] veth1_vlan: entered promiscuous mode [ 103.279999][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.322145][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.345427][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.361435][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.404921][ T68] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.440031][ T68] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.461419][ T68] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.481789][ T68] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.502658][ T5799] veth0_macvtap: entered promiscuous mode [ 103.565493][ T5799] veth1_macvtap: entered promiscuous mode [ 103.575491][ T5797] veth0_vlan: entered promiscuous mode [ 103.721408][ T5800] veth0_vlan: entered promiscuous mode [ 103.741062][ T5804] Bluetooth: hci0: command tx timeout [ 103.745605][ T5797] veth1_vlan: entered promiscuous mode [ 103.810967][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.829236][ T5800] veth1_vlan: entered promiscuous mode [ 103.862661][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.898499][ T5804] Bluetooth: hci1: command tx timeout [ 103.903800][ T3558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.903826][ T3558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.931316][ T148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.948811][ T148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.970586][ T148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.977975][ T5804] Bluetooth: hci2: command tx timeout [ 103.986261][ T148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.987208][ T5804] Bluetooth: hci3: command tx timeout [ 104.057377][ T5804] Bluetooth: hci4: command tx timeout [ 104.089112][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.089146][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.089508][ T5797] veth0_macvtap: entered promiscuous mode [ 104.189853][ T5797] veth1_macvtap: entered promiscuous mode [ 104.261875][ T5800] veth0_macvtap: entered promiscuous mode [ 104.286648][ T5807] veth0_vlan: entered promiscuous mode [ 104.306329][ T5800] veth1_macvtap: entered promiscuous mode [ 104.351966][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.383314][ T5807] veth1_vlan: entered promiscuous mode [ 104.404243][ T2825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.404265][ T2825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.427946][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.494072][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.518600][ T2825] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.552787][ T2825] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.573442][ T2825] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.590255][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.595585][ T2825] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.626149][ T2825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.626171][ T2825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.694558][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.729136][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.733378][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.798183][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.000957][ T5807] veth0_macvtap: entered promiscuous mode [ 105.135956][ T5807] veth1_macvtap: entered promiscuous mode [ 105.300586][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.300607][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.462821][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.462843][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.542968][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.561574][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.561597][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.631907][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.793664][ T148] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.795568][ T148] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.008785][ T148] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.051905][ T3558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.051921][ T3558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.053916][ T148] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.113315][ T5923] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 107.104303][ T5940] syzkaller0: entered promiscuous mode [ 107.104335][ T5940] syzkaller0: entered allmulticast mode [ 107.412524][ T5936] tipc: Started in network mode [ 107.412563][ T5936] tipc: Node identity 7ebf60498b68, cluster identity 4711 [ 107.412915][ T5936] tipc: Enabled bearer , priority 0 [ 107.478076][ T5935] tipc: Resetting bearer [ 107.620468][ T5935] tipc: Disabling bearer [ 107.769962][ T2825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.769985][ T2825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.227427][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.227452][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.858880][ T5978] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 108.912897][ T5983] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 109.391490][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 109.655758][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.744129][ T6002] Bluetooth: MGMT ver 1.23 [ 109.889190][ T5997] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 109.889216][ T5997] netlink: 224 bytes leftover after parsing attributes in process `syz.3.25'. [ 112.332192][ T6061] tls_set_device_offload_rx: netdev not found [ 112.579667][ T6070] netlink: 'syz.3.47': attribute type 23 has an invalid length. [ 112.652028][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.47'. [ 113.418812][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 114.626154][ T6119] tls_set_device_offload_rx: netdev not found [ 114.651403][ T6119] netlink: 'syz.1.67': attribute type 23 has an invalid length. [ 114.796714][ T6119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.67'. [ 116.074362][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 117.018100][ T6181] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 117.018123][ T6181] netlink: 224 bytes leftover after parsing attributes in process `syz.2.87'. [ 117.178911][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.91'. [ 117.184464][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 117.280200][ T6194] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.808376][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 117.809126][ T6194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.040883][ T6194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.142388][ T6224] Zero length message leads to an empty skb [ 118.515917][ T6228] syzkaller0: entered promiscuous mode [ 118.515946][ T6228] syzkaller0: entered allmulticast mode [ 118.846537][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 121.133367][ T6223] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.581812][ T6286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'. [ 121.853432][ T6288] syzkaller0: entered promiscuous mode [ 121.853463][ T6288] syzkaller0: entered allmulticast mode [ 123.385569][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.139'. [ 123.451691][ T6336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.142'. [ 123.582535][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 125.011828][ T6367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.154'. [ 125.026833][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.153'. [ 125.031596][ T6303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.214521][ T6370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.154'. [ 125.874104][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz.1.163'. [ 126.122475][ C1] vcan0: j1939_tp_rxtimer: 0xffff888060030000: rx timeout, send abort [ 126.283327][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 126.443741][ T6406] netlink: 24 bytes leftover after parsing attributes in process `syz.4.169'. [ 126.818739][ T6413] 8021q: VLANs not supported on caif0 [ 126.932269][ T6414] __nla_validate_parse: 1 callbacks suppressed [ 126.932293][ T6414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.171'. [ 127.394617][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.180'. [ 128.093925][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'. [ 128.206446][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 128.482500][ T6449] 8021q: VLANs not supported on caif0 [ 128.945027][ T6396] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.189127][ T6465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.191'. [ 129.401799][ T6471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.193'. [ 129.506648][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.192'. [ 129.516257][ T6477] smc: net device wlan0 applied user defined pnetid SYZ0 [ 129.686784][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 129.883508][ T6489] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 129.884593][ T6489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.200'. [ 130.318677][ T6507] netlink: 12 bytes leftover after parsing attributes in process `syz.2.208'. [ 130.597685][ T6511] bond1: option all_slaves_active: invalid value (13) [ 130.648798][ T6511] bond1 (unregistering): Released all slaves [ 130.958821][ T6498] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.035357][ T6566] bond1: option all_slaves_active: invalid value (13) [ 132.066078][ T6566] bond1 (unregistering): Released all slaves [ 132.696454][ T6557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.873810][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.891275][ T6589] __nla_validate_parse: 4 callbacks suppressed [ 132.891296][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.126796][ T6587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 133.466994][ T6609] bond1: option all_slaves_active: invalid value (13) [ 133.590611][ T6609] bond1 (unregistering): Released all slaves [ 134.541306][ T6626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.815000][ T6690] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.386814][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 138.067394][ T6750] 8021q: VLANs not supported on caif0 [ 138.277377][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.294'. [ 138.935966][ T6755] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.068726][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 140.629420][ T6803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.795574][ T6893] netlink: 20 bytes leftover after parsing attributes in process `syz.1.342'. [ 143.307924][ T6890] block nbd0: server does not support multiple connections per device. [ 143.313526][ T6890] block nbd0: shutting down sockets [ 144.106916][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.354'. [ 144.552140][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 144.639386][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.361'. [ 144.640191][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.361'. [ 145.266045][ T6956] 8021q: VLANs not supported on caif0 [ 145.349908][ T6958] netlink: 20 bytes leftover after parsing attributes in process `syz.2.367'. [ 145.917697][ T6977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.795908][ T6979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.374'. [ 147.921690][ T6982] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.958962][ T6982] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.018866][ T6990] 8021q: VLANs not supported on caif0 [ 148.418191][ T6996] block nbd0: server does not support multiple connections per device. [ 148.418585][ T6996] block nbd0: shutting down sockets [ 148.477408][ T7005] netlink: 'syz.1.384': attribute type 1 has an invalid length. [ 148.477432][ T7005] netlink: 224 bytes leftover after parsing attributes in process `syz.1.384'. [ 148.863338][ T7015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.389'. [ 149.576975][ T7031] netlink: 20 bytes leftover after parsing attributes in process `syz.4.397'. [ 149.696121][ T7033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 149.996867][ T7045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.403'. [ 150.392410][ T7053] block nbd0: server does not support multiple connections per device. [ 150.392780][ T7053] block nbd0: shutting down sockets [ 150.467483][ T7059] netlink: 20 bytes leftover after parsing attributes in process `syz.4.411'. [ 150.517913][ T7062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.412'. [ 151.211266][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.424'. [ 151.885197][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 151.936623][ T7084] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 152.319291][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 152.923499][ T7148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 153.506373][ T7130] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.542558][ T7165] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 153.542582][ T7165] netlink: 224 bytes leftover after parsing attributes in process `syz.0.453'. [ 154.649661][ T7199] block nbd0: server does not support multiple connections per device. [ 154.650400][ T7199] block nbd0: shutting down sockets [ 154.691932][ T7204] netlink: 'syz.4.468': attribute type 1 has an invalid length. [ 154.691959][ T7204] __nla_validate_parse: 2 callbacks suppressed [ 154.691974][ T7204] netlink: 224 bytes leftover after parsing attributes in process `syz.4.468'. [ 155.352976][ T7226] netlink: 24 bytes leftover after parsing attributes in process `syz.2.479'. [ 155.501531][ T7238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.478'. [ 156.025378][ T7252] netlink: 'syz.3.482': attribute type 1 has an invalid length. [ 156.025410][ T7252] netlink: 224 bytes leftover after parsing attributes in process `syz.3.482'. [ 156.400686][ T7260] block nbd0: server does not support multiple connections per device. [ 156.453204][ T7260] block nbd0: shutting down sockets [ 156.963292][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.491'. [ 157.717802][ T7303] block nbd0: server does not support multiple connections per device. [ 157.720984][ T7303] block nbd0: shutting down sockets [ 158.296654][ T7317] bond1: option all_slaves_active: invalid value (13) [ 158.325536][ T7317] bond1 (unregistering): Released all slaves [ 158.379521][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.509'. [ 160.140261][ T7371] bond1: option all_slaves_active: invalid value (13) [ 160.199500][ T7371] bond1 (unregistering): Released all slaves [ 162.421857][ T7425] bond1: option all_slaves_active: invalid value (13) [ 162.767954][ T7432] block nbd0: server does not support multiple connections per device. [ 162.770363][ T7425] bond1 (unregistering): Released all slaves [ 162.775166][ T7432] block nbd0: shutting down sockets [ 163.705598][ T7457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.552'. [ 163.705658][ T7457] bond0: ARP target 170.170.170.170 is already present [ 163.705682][ T7457] bond0: option arp_ip_target: invalid value (2863311530) [ 164.392826][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.559'. [ 164.667697][ T7467] block nbd0: server does not support multiple connections per device. [ 164.670284][ T7467] block nbd0: shutting down sockets [ 164.912662][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 164.912699][ T7481] netlink: 16 bytes leftover after parsing attributes in process `syz.2.562'. [ 164.912718][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.2.562'. [ 164.952923][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.561'. [ 166.311815][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 166.311851][ T7514] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 166.311870][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 166.412501][ T7508] block nbd0: server does not support multiple connections per device. [ 166.414492][ T7508] block nbd0: shutting down sockets [ 167.820944][ T7538] Illegal XDP return value 4294967262 on prog (id 82) dev N/A, expect packet loss! [ 167.930917][ T7344] Set syz1 is full, maxelem 65536 reached [ 168.142676][ T7544] netlink: 16 bytes leftover after parsing attributes in process `syz.0.586'. [ 168.892419][ T7565] __nla_validate_parse: 3 callbacks suppressed [ 168.892528][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.595'. [ 169.524928][ T7583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.600'. [ 169.892520][ T7598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'. [ 170.728085][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.611'. [ 170.924221][ T7621] netlink: 4 bytes leftover after parsing attributes in process `syz.3.613'. [ 171.387438][ T7629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 171.962070][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.619'. [ 172.362504][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.622'. [ 173.197859][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.627'. [ 173.671211][ T7687] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 174.147500][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.637'. [ 174.390229][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 174.709301][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 174.884079][ T7727] netlink: 16 bytes leftover after parsing attributes in process `syz.3.645'. [ 175.153432][ T7735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.648'. [ 175.267771][ T7723] block nbd0: server does not support multiple connections per device. [ 175.268188][ T7723] block nbd0: shutting down sockets [ 175.308042][ T7739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 175.617182][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 176.193263][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 176.774985][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.1.668'. [ 176.817511][ T7776] block nbd0: server does not support multiple connections per device. [ 176.820276][ T7776] block nbd0: shutting down sockets [ 177.114798][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.672'. [ 177.281124][ T7804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.467949][ T7812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 180.814429][ T7824] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.096281][ T7880] __nla_validate_parse: 4 callbacks suppressed [ 181.096301][ T7880] netlink: 8 bytes leftover after parsing attributes in process `syz.0.702'. [ 183.862092][ T7933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 183.927691][ T7838] Set syz1 is full, maxelem 65536 reached [ 183.991093][ T7935] netlink: 8 bytes leftover after parsing attributes in process `syz.1.722'. [ 184.752941][ T7953] openvswitch: netlink: Key 14 has unexpected len 0 expected 28 [ 184.981014][ T7957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 185.076536][ T7905] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.499203][ T7973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.736'. [ 185.641712][ T7978] openvswitch: netlink: Key 14 has unexpected len 0 expected 28 [ 185.973597][ T7985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.743'. [ 186.036972][ T7985] vlan2: entered promiscuous mode [ 186.036998][ T7985] batadv0: entered promiscuous mode [ 187.088302][ T8015] openvswitch: netlink: Key 14 has unexpected len 0 expected 28 [ 187.088302][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 188.736747][ T8027] syzkaller0: entered promiscuous mode [ 188.736774][ T8027] syzkaller0: entered allmulticast mode [ 188.869941][ T8037] netlink: 'syz.3.758': attribute type 1 has an invalid length. [ 188.869963][ T8037] netlink: 224 bytes leftover after parsing attributes in process `syz.3.758'. [ 188.874937][ T8040] netlink: 40 bytes leftover after parsing attributes in process `syz.0.757'. [ 189.082665][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.757'. [ 189.783458][ T8077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.767'. [ 190.200746][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.770'. [ 190.251673][ T8089] netlink: 40 bytes leftover after parsing attributes in process `syz.3.771'. [ 190.254885][ T8089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 191.430836][ T8116] netlink: 52 bytes leftover after parsing attributes in process `syz.2.781'. [ 193.917365][ T8113] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 193.945753][ T8113] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.170800][ T8140] netlink: 40 bytes leftover after parsing attributes in process `syz.1.785'. [ 194.176620][ T8140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.785'. [ 194.309082][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.740150][ T8153] netlink: 32 bytes leftover after parsing attributes in process `syz.0.791'. [ 195.633045][ T8165] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 195.636656][ T8165] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 196.000452][ T8174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.798'. [ 196.077672][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.797'. [ 196.670926][ T8189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.802'. [ 197.602518][ T8130] Set syz1 is full, maxelem 65536 reached [ 198.680280][ T8229] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 200.747902][ T8214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.809'. [ 201.051566][ T8260] netlink: 16 bytes leftover after parsing attributes in process `syz.4.827'. [ 201.761589][ T8285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 201.903171][ T8294] netlink: 16 bytes leftover after parsing attributes in process `syz.2.839'. [ 202.101823][ T8302] netlink: 'syz.3.842': attribute type 1 has an invalid length. [ 202.104631][ T8302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 202.645246][ T8321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 202.653307][ T8322] netlink: 24 bytes leftover after parsing attributes in process `syz.3.849'. [ 202.704802][ T8324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.849'. [ 203.010702][ T8334] netlink: 28 bytes leftover after parsing attributes in process `syz.4.854'. [ 205.987926][ T1237] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 206.182064][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.182100][ T1237] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.182125][ T1237] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.182172][ T1237] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.182197][ T1237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.312247][ T1237] usb 5-1: config 0 descriptor?? [ 206.850946][ T1237] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 208.107885][ C1] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 208.353836][ T8446] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 209.031930][ T8469] netlink: 'syz.3.902': attribute type 1 has an invalid length. [ 209.031952][ T8469] netlink: 224 bytes leftover after parsing attributes in process `syz.3.902'. [ 209.031990][ T31] usb 5-1: USB disconnect, device number 2 [ 209.374535][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.4.904'. [ 211.087908][ T8506] netlink: 'syz.0.917': attribute type 1 has an invalid length. [ 211.087931][ T8506] netlink: 224 bytes leftover after parsing attributes in process `syz.0.917'. [ 212.127381][ T8540] netlink: 'syz.2.932': attribute type 1 has an invalid length. [ 212.127407][ T8540] netlink: 224 bytes leftover after parsing attributes in process `syz.2.932'. [ 212.254131][ T8549] netlink: 12 bytes leftover after parsing attributes in process `syz.3.935'. [ 212.383695][ T8553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 213.675519][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.957'. [ 214.001054][ T8608] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 214.001077][ T8608] netlink: 224 bytes leftover after parsing attributes in process `syz.3.962'. [ 214.180356][ T8619] 9p: Bad value for 'wfdno' [ 215.144831][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.980'. [ 215.154622][ T8649] vlan2: entered promiscuous mode [ 215.154645][ T8649] batadv0: entered promiscuous mode [ 215.677405][ T8671] block nbd0: not configured, cannot reconfigure [ 215.697971][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.989'. [ 216.327389][ T8691] netlink: 12 bytes leftover after parsing attributes in process `syz.3.999'. [ 216.493577][ T8691] vlan2: entered promiscuous mode [ 216.493602][ T8691] batadv0: entered promiscuous mode [ 217.184828][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1009'. [ 217.928053][ T8752] netlink: 1260 bytes leftover after parsing attributes in process `syz.3.1022'. [ 217.928081][ T8752] openvswitch: netlink: Flow key attr not present in new flow. [ 218.850496][ T8775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1031'. [ 218.963103][ T8775] vlan2: entered promiscuous mode [ 219.179918][ T8785] syzkaller1: entered promiscuous mode [ 219.179947][ T8785] syzkaller1: entered allmulticast mode [ 220.145757][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1043'. [ 220.484989][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 221.983930][ T8806] Bluetooth: hci4: command 0x0406 tx timeout [ 221.983971][ T8806] Bluetooth: hci2: command 0x0406 tx timeout [ 221.983996][ T8806] Bluetooth: hci1: command 0x0406 tx timeout [ 221.984023][ T8806] Bluetooth: hci0: command 0x0406 tx timeout [ 221.984046][ T8806] Bluetooth: hci3: command 0x0406 tx timeout [ 222.535724][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 226.808419][ T8970] block nbd0: server does not support multiple connections per device. [ 226.811036][ T8970] block nbd0: shutting down sockets [ 228.704840][ T9028] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 228.727432][ T9028] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.527127][ T5613] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 229.687150][ T5613] usb 4-1: Using ep0 maxpacket: 32 [ 229.691390][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.691425][ T5613] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.691466][ T5613] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.691491][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.773584][ T5613] usb 4-1: config 0 descriptor?? [ 229.865035][ T5613] hub 4-1:0.0: USB hub found [ 229.972175][ T8766] Set syz1 is full, maxelem 65536 reached [ 230.007202][ T5613] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 230.039384][ T5613] usbhid 4-1:0.0: can't add hid device: -71 [ 230.039486][ T5613] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 230.157356][ T5613] usb 4-1: USB disconnect, device number 2 [ 230.478534][ T9070] netlink: 'syz.0.1147': attribute type 1 has an invalid length. [ 230.478557][ T9070] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1147'. [ 230.702755][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1149'. [ 231.087878][ T9096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1152'. [ 231.791912][ T9121] block nbd0: server does not support multiple connections per device. [ 231.794825][ T9121] block nbd0: shutting down sockets [ 232.401721][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1176'. [ 233.797527][ T9146] vlan2: entered promiscuous mode [ 233.797544][ T9146] batadv0: entered promiscuous mode [ 233.986245][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1177'. [ 235.576462][ T9190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 235.839336][ T9193] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1192'. [ 236.183247][ T9193] vlan2: entered promiscuous mode [ 237.341571][ T9231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1200'. [ 237.401518][ T36] IPVS: starting estimator thread 0... [ 237.498467][ T9233] IPVS: using max 8 ests per chain, 19200 per kthread [ 237.577332][ T5860] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 237.595465][ T9237] netlink: 1248 bytes leftover after parsing attributes in process `syz.3.1205'. [ 237.595598][ T9237] openvswitch: netlink: Flow actions attr not present in new flow. [ 237.737897][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 237.743425][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.743493][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.743627][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 237.743654][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.821615][ T5860] usb 5-1: config 0 descriptor?? [ 237.854317][ T9248] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1208'. [ 237.855999][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1207'. [ 237.859509][ T5860] hub 5-1:0.0: USB hub found [ 238.037112][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.047133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.057063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.067078][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.077082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.079179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.087056][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.097048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.107055][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.117045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 238.277443][ T5860] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 239.404192][ T5115] Bluetooth: hci4: command 0x0406 tx timeout [ 239.637430][ T5860] usbhid 5-1:0.0: can't add hid device: -71 [ 239.637562][ T5860] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 239.728297][ T5860] usb 5-1: USB disconnect, device number 3 [ 240.761630][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1213'. [ 240.965642][ T9263] vlan2: entered promiscuous mode [ 241.313406][ T9273] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.868541][ T9271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1216'. [ 241.868634][ T9271] openvswitch: netlink: Missing key (keys=200040, expected=2000) [ 242.008166][ T9279] block nbd0: server does not support multiple connections per device. [ 242.011603][ T9279] block nbd0: shutting down sockets [ 242.250139][ T9290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1223'. [ 242.759956][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1228'. [ 243.168624][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 243.917852][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 243.920374][ T9342] random: crng reseeded on system resumption [ 244.067355][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1220'. [ 244.154023][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 244.168499][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.168539][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.168586][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 244.168615][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.273798][ T5860] usb 4-1: config 0 descriptor?? [ 244.305613][ T5860] hub 4-1:0.0: USB hub found [ 244.386386][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1242'. [ 244.386842][ T9349] 8021q: VLANs not supported on caif0 [ 244.612180][ T5860] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 244.651823][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 244.651951][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 244.740684][ T5860] usb 4-1: USB disconnect, device number 3 [ 245.057923][ T9361] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1246'. [ 245.259241][ T9371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'. [ 245.549331][ T1237] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 245.709531][ T1237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.709573][ T1237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.709618][ T1237] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 245.709645][ T1237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.776618][ T1237] usb 1-1: config 0 descriptor?? [ 247.340182][ T1237] usb 1-1: string descriptor 0 read error: -71 [ 247.340767][ T1237] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 247.340837][ T1237] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 247.340857][ T1237] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 247.340915][ T1237] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 247.341032][ T1237] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 247.346020][ T1237] usb 1-1: USB disconnect, device number 2 [ 247.730550][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1271'. [ 247.757298][ T5860] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 247.917872][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 247.920890][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.920927][ T5860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.920969][ T5860] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 247.920995][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.995070][ T5860] usb 3-1: config 0 descriptor?? [ 248.017587][ T5860] hub 3-1:0.0: USB hub found [ 248.203985][ T5860] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 248.222732][ T5860] usbhid 3-1:0.0: can't add hid device: -71 [ 248.222861][ T5860] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 248.268254][ T5860] usb 3-1: USB disconnect, device number 2 [ 249.096832][ T9460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 249.243292][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 249.431021][ T9479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1292'. [ 251.242194][ T9519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 251.282326][ T9518] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1306'. [ 252.298711][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 252.471002][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 252.471035][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.518896][ T9] usb 5-1: config 0 descriptor?? [ 252.532338][ T9] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 254.419378][ T9] usb 5-1: USB disconnect, device number 4 [ 255.092906][ T9586] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1335'. [ 255.634811][ T9540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.742306][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.410202][ T9638] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1356'. [ 259.328508][ T9680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.995775][ T9755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1397'. [ 262.866829][ T9781] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1409'. [ 263.887153][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1413'. [ 265.306138][ T9812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1417'. [ 265.403200][ T9815] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1422'. [ 265.813898][ T9833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1426'. [ 266.723880][ T9819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1423'. [ 267.184698][ T9853] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1432'. [ 267.987543][ T9878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 268.461040][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1449'. [ 269.732822][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1470'. [ 271.013621][ T9998] fuse: Bad value for 'fd' [ 272.208944][ T9926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.775649][T10052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1512'. [ 273.786560][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1525'. [ 273.883233][ T5881] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 274.044129][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 274.064355][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.064380][ T5881] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.064410][ T5881] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 274.064427][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.133321][ T5881] usb 1-1: config 0 descriptor?? [ 274.146201][ T5881] hub 1-1:0.0: USB hub found [ 274.357560][ T5881] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 274.390629][ T5881] usbhid 1-1:0.0: can't add hid device: -71 [ 274.390824][ T5881] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 274.422391][ T5881] usb 1-1: USB disconnect, device number 3 [ 277.195322][ T5798] Bluetooth: hci0: Invalid handle: 0x306c > 0x0eff [ 278.721627][T10138] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 279.016600][T10234] syzkaller1: entered promiscuous mode [ 279.016629][T10234] syzkaller1: entered allmulticast mode [ 283.038422][T10314] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 286.207546][T10408] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 288.817864][ T37] audit: type=1326 audit(1773381878.652:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.821237][ T37] audit: type=1326 audit(1773381878.702:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.821291][ T37] audit: type=1326 audit(1773381878.702:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.832420][ T37] audit: type=1326 audit(1773381878.702:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.881275][ T37] audit: type=1326 audit(1773381878.732:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.881421][ T37] audit: type=1326 audit(1773381878.752:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.881536][ T37] audit: type=1326 audit(1773381878.752:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.881700][ T37] audit: type=1326 audit(1773381878.752:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 288.881851][ T37] audit: type=1326 audit(1773381878.752:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10446 comm="syz.2.1681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f198870c799 code=0x7ffc0000 [ 291.550517][T10490] mmap: syz.0.1696 (10490) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 291.590908][T10490] Unsupported ieee802154 address type: 0 [ 293.887180][ T5613] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 294.039748][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.039787][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 294.039815][ T5613] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.039847][ T5613] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 294.039892][ T5613] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 294.039917][ T5613] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.119438][ T5613] usb 3-1: config 0 descriptor?? [ 294.570932][ T5613] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 294.680411][ T5613] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 294.925667][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.942496][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.948483][ T60] Bluetooth: hci4: command 0x0406 tx timeout [ 294.965425][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.975626][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.986506][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.294487][T10543] netlink: 'syz.0.1719': attribute type 8 has an invalid length. [ 295.296625][T10543] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1719'. [ 296.664245][ T9] usb 3-1: USB disconnect, device number 3 [ 296.742329][ T1432] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.024290][T10581] input: syz1 as /devices/virtual/input/input5 [ 297.036483][T10582] netlink: 'syz.0.1730': attribute type 8 has an invalid length. [ 297.039496][T10582] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1730'. [ 297.097313][ T5115] Bluetooth: hci5: command tx timeout [ 297.144206][ T1432] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.161798][T10581] sctp: [Deprecated]: syz.2.1731 (pid 10581) Use of struct sctp_assoc_value in delayed_ack socket option. [ 297.161798][T10581] Use struct sctp_sack_info instead [ 297.249496][T10536] chnl_net:caif_netlink_parms(): no params data found [ 297.543303][ T1432] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.558779][T10596] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1735'. [ 298.036067][ T1432] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.132682][T10619] netlink: 'syz.0.1738': attribute type 298 has an invalid length. [ 298.249715][T10536] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.251220][T10536] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.251402][T10536] bridge_slave_0: entered allmulticast mode [ 298.255245][T10536] bridge_slave_0: entered promiscuous mode [ 298.299594][T10536] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.299800][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.300018][T10536] bridge_slave_1: entered allmulticast mode [ 298.306565][T10536] bridge_slave_1: entered promiscuous mode [ 298.805182][T10536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.834568][T10536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.847695][T10591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1733'. [ 298.970529][T10657] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1739'. [ 299.179256][ T5115] Bluetooth: hci5: command tx timeout [ 299.420948][T10536] team0: Port device team_slave_0 added [ 299.482446][T10536] team0: Port device team_slave_1 added [ 299.550178][T10667] netlink: 'syz.3.1743': attribute type 1 has an invalid length. [ 299.550202][T10667] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1743'. [ 299.629740][T10536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.629759][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.629789][T10536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.689768][T10536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.689787][T10536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.689829][T10536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.922764][ T1432] bridge_slave_1: left allmulticast mode [ 299.924535][ T1432] bridge_slave_1: left promiscuous mode [ 299.926556][ T1432] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.058849][ T1432] bridge_slave_0: left allmulticast mode [ 300.058879][ T1432] bridge_slave_0: left promiscuous mode [ 300.059122][ T1432] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.355017][T10692] netlink: 'syz.2.1750': attribute type 298 has an invalid length. [ 300.382434][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1752'. [ 300.489338][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1753'. [ 300.521269][T10699] netlink: 'syz.0.1754': attribute type 1 has an invalid length. [ 300.521285][T10699] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1754'. [ 301.017952][ T1432] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.078982][ T1432] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.116669][ T1432] bond0 (unregistering): Released all slaves [ 301.267122][ T5115] Bluetooth: hci5: command tx timeout [ 301.284394][T10694] macvtap0: entered promiscuous mode [ 301.284494][T10694] virtio_net virtio1 eth0: entered promiscuous mode [ 301.285054][T10694] macvtap0: entered allmulticast mode [ 301.285097][T10694] virtio_net virtio1 eth0: entered allmulticast mode [ 301.517265][T10536] hsr_slave_0: entered promiscuous mode [ 301.518635][T10536] hsr_slave_1: entered promiscuous mode [ 301.519523][T10536] debugfs: 'hsr0' already exists in 'hsr' [ 301.519653][T10536] Cannot create hsr debugfs directory [ 302.074092][T10730] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1764'. [ 302.090177][T10730] netlink: 'syz.4.1764': attribute type 298 has an invalid length. [ 302.189950][T10732] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1765'. [ 303.347189][ T5115] Bluetooth: hci5: command tx timeout [ 303.691918][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 303.727557][ T1432] hsr_slave_0: left promiscuous mode [ 303.767262][ T1432] hsr_slave_1: left promiscuous mode [ 303.771818][ T1432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.771900][ T1432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.861295][ T1432] veth1_macvtap: left promiscuous mode [ 303.861539][ T1432] veth0_macvtap: left promiscuous mode [ 303.861743][ T1432] veth1_vlan: left promiscuous mode [ 303.861942][ T1432] veth0_vlan: left promiscuous mode [ 304.590139][ T1432] team0 (unregistering): Port device team_slave_1 removed [ 304.648989][ T1432] team0 (unregistering): Port device team_slave_0 removed [ 305.413789][T10734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 305.416408][T10753] netlink: 'syz.3.1771': attribute type 1 has an invalid length. [ 305.416430][T10753] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1771'. [ 305.468819][T10536] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 305.550577][T10536] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 305.677284][T10536] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 305.753861][T10775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1775'. [ 306.648689][T10536] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 306.941386][T10792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1778'. [ 306.944123][T10792] netlink: 'syz.3.1778': attribute type 298 has an invalid length. [ 307.300860][T10536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.439512][T10536] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.484688][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.484855][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.552597][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.552756][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.842502][T10827] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1785'. [ 308.367399][T10536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.692755][T10536] veth0_vlan: entered promiscuous mode [ 308.756555][T10536] veth1_vlan: entered promiscuous mode [ 308.763934][T10872] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1787'. [ 309.087889][T10536] veth0_macvtap: entered promiscuous mode [ 309.110687][T10536] veth1_macvtap: entered promiscuous mode [ 309.171247][T10536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.203056][T10536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.231814][ T1432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.233171][ T1432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.237028][ T1432] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.266701][ T1432] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.582635][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 309.970592][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1790'. [ 310.479715][T10816] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.480772][T10863] netlink: 'syz.0.1786': attribute type 1 has an invalid length. [ 310.480792][T10863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1786'. [ 310.481214][T10863] workqueue: Failed to create a rescuer kthread for wq "phy13": -EINTR [ 310.788039][ T1432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.788153][ T1432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.975637][T10640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.975660][T10640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.230918][T10908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1794'. [ 311.254424][T10908] netlink: 'syz.0.1794': attribute type 298 has an invalid length. [ 311.414453][T10912] random: crng reseeded on system resumption [ 312.079710][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 312.801012][T10940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1799'. [ 313.028647][T10948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1802'. [ 314.186677][T10957] ======================================================= [ 314.186677][T10957] WARNING: The mand mount option has been deprecated and [ 314.186677][T10957] and is ignored by this kernel. Remove the mand [ 314.186677][T10957] option from the mount to silence this warning. [ 314.186677][T10957] ======================================================= [ 314.349080][ T1237] libceph: connect (1)[c::]:6789 error -101 [ 314.349791][ T1237] libceph: mon0 (1)[c::]:6789 connect error [ 314.355560][ T1237] libceph: connect (1)[c::]:6789 error -101 [ 314.355781][ T1237] libceph: mon0 (1)[c::]:6789 connect error [ 314.367370][T10956] ceph: No mds server is up or the cluster is laggy [ 314.485165][T10962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1807'. [ 314.523614][T10962] macvtap1: entered promiscuous mode [ 314.523963][T10962] macvtap1: entered allmulticast mode [ 314.541039][T10971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 314.558171][T10971] netlink: 'syz.1.1808': attribute type 298 has an invalid length. [ 314.608205][ T1237] libceph: connect (1)[c::]:6789 error -101 [ 314.608409][ T1237] libceph: mon0 (1)[c::]:6789 connect error [ 315.590113][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 315.990239][T10990] warning: `syz.0.1811' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 316.257801][T10988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1812'. [ 316.694466][T11003] netlink: 'syz.0.1816': attribute type 1 has an invalid length. [ 316.694490][T11003] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1816'. [ 316.777488][T11009] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1815'. [ 317.186187][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.523082][T11032] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 317.545667][T11032] netlink: 'syz.3.1822': attribute type 298 has an invalid length. [ 318.719232][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'. [ 318.719841][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1824'. [ 319.465308][T11058] netlink: 'syz.0.1829': attribute type 1 has an invalid length. [ 319.465332][T11058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1829'. [ 320.485381][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1831'. [ 337.658274][ C0] ================================================================== [ 337.658294][ C0] BUG: KASAN: slab-use-after-free in rose_t0timer_expiry+0x45d/0x570 [ 337.658425][ C0] Write of size 1 at addr ffff88805fe05435 by task ktimers/0/16 [ 337.658444][ C0] [ 337.658556][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.658580][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 337.658602][ C0] Call Trace: [ 337.658611][ C0] [ 337.658621][ C0] dump_stack_lvl+0xe8/0x150 [ 337.658657][ C0] print_report+0xba/0x230 [ 337.658684][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.658708][ C0] kasan_report+0x117/0x150 [ 337.658731][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.658765][ C0] rose_t0timer_expiry+0x45d/0x570 [ 337.658796][ C0] call_timer_fn+0x192/0x640 [ 337.658818][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.658843][ C0] ? call_timer_fn+0xd4/0x640 [ 337.658862][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 337.658888][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.658957][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.658986][ C0] __run_timer_base+0x6a3/0x9f0 [ 337.659028][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 337.659058][ C0] run_timer_softirq+0xb7/0x170 [ 337.659082][ C0] handle_softirqs+0x1de/0x6f0 [ 337.659108][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 337.659133][ C0] run_ktimerd+0x69/0x100 [ 337.659146][ C0] smpboot_thread_fn+0x541/0xa50 [ 337.659171][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 337.659199][ C0] kthread+0x388/0x470 [ 337.659214][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 337.659238][ C0] ? __pfx_kthread+0x10/0x10 [ 337.659255][ C0] ret_from_fork+0x51e/0xb90 [ 337.659278][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 337.659300][ C0] ? __switch_to+0xc7d/0x1450 [ 337.659320][ C0] ? __pfx_kthread+0x10/0x10 [ 337.659336][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.659357][ C0] [ 337.659363][ C0] [ 337.659366][ C0] Allocated by task 6723: [ 337.659374][ C0] kasan_save_track+0x3e/0x80 [ 337.659395][ C0] __kasan_kmalloc+0x93/0xb0 [ 337.659416][ C0] __kmalloc_cache_noprof+0x3a6/0x690 [ 337.659440][ C0] rose_add_node+0x26f/0xf50 [ 337.659466][ C0] rose_rt_ioctl+0xdc1/0x1350 [ 337.659491][ C0] rose_ioctl+0x3fb/0x8f0 [ 337.659505][ C0] sock_do_ioctl+0x101/0x320 [ 337.659548][ C0] sock_ioctl+0x5c9/0x7f0 [ 337.659563][ C0] __se_sys_ioctl+0xff/0x170 [ 337.659586][ C0] do_syscall_64+0x14d/0xf80 [ 337.659638][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.659653][ C0] [ 337.659657][ C0] Freed by task 29: [ 337.659663][ C0] kasan_save_track+0x3e/0x80 [ 337.659683][ C0] kasan_save_free_info+0x46/0x50 [ 337.659700][ C0] __kasan_slab_free+0x5c/0x80 [ 337.659721][ C0] kfree+0x1c1/0x6c0 [ 337.659740][ C0] rose_timer_expiry+0x4cb/0x600 [ 337.659762][ C0] call_timer_fn+0x192/0x640 [ 337.659774][ C0] __run_timer_base+0x6a3/0x9f0 [ 337.659795][ C0] run_timer_softirq+0xb7/0x170 [ 337.659817][ C0] handle_softirqs+0x1de/0x6f0 [ 337.659837][ C0] run_ktimerd+0x69/0x100 [ 337.659851][ C0] smpboot_thread_fn+0x541/0xa50 [ 337.659874][ C0] kthread+0x388/0x470 [ 337.659887][ C0] ret_from_fork+0x51e/0xb90 [ 337.659907][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.659919][ C0] [ 337.659923][ C0] The buggy address belongs to the object at ffff88805fe05400 [ 337.659923][ C0] which belongs to the cache kmalloc-512 of size 512 [ 337.659936][ C0] The buggy address is located 53 bytes inside of [ 337.659936][ C0] freed 512-byte region [ffff88805fe05400, ffff88805fe05600) [ 337.659952][ C0] [ 337.659956][ C0] The buggy address belongs to the physical page: [ 337.659968][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805fe06000 pfn:0x5fe04 [ 337.659986][ C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.659999][ C0] flags: 0x80000000000240(workingset|head|node=0|zone=1) [ 337.660038][ C0] page_type: f5(slab) [ 337.660052][ C0] raw: 0080000000000240 ffff88813fe1cc80 ffffea0000efe510 ffffea0000eae210 [ 337.660067][ C0] raw: ffff88805fe06000 000000080010000f 00000000f5000000 0000000000000000 [ 337.660082][ C0] head: 0080000000000240 ffff88813fe1cc80 ffffea0000efe510 ffffea0000eae210 [ 337.660095][ C0] head: ffff88805fe06000 000000080010000f 00000000f5000000 0000000000000000 [ 337.660110][ C0] head: 0080000000000002 ffffea00017f8101 00000000ffffffff 00000000ffffffff [ 337.660123][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000004 [ 337.660131][ C0] page dumped because: kasan: bad access detected [ 337.660142][ C0] page_owner tracks the page as allocated [ 337.660150][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5807, tgid 5807 (syz-executor), ts 101724324655, free_ts 0 [ 337.660177][ C0] post_alloc_hook+0x231/0x280 [ 337.660200][ C0] get_page_from_freelist+0x28bb/0x2950 [ 337.660215][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 337.660231][ C0] allocate_slab+0x77/0x660 [ 337.660247][ C0] refill_objects+0x334/0x3c0 [ 337.660263][ C0] __pcs_replace_empty_main+0x371/0x5c0 [ 337.660282][ C0] __kmalloc_noprof+0x530/0x7b0 [ 337.660304][ C0] fib6_info_alloc+0x30/0xf0 [ 337.660356][ C0] ip6_route_info_create+0x142/0x860 [ 337.660394][ C0] ip6_route_add+0x49/0x1d0 [ 337.660416][ C0] addrconf_prefix_route+0x3a2/0x480 [ 337.660451][ C0] inet6_addr_add+0x551/0xbd0 [ 337.660469][ C0] inet6_rtm_newaddr+0xa17/0xe30 [ 337.660489][ C0] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 337.660539][ C0] netlink_rcv_skb+0x232/0x4b0 [ 337.660572][ C0] netlink_unicast+0x831/0x9f0 [ 337.660588][ C0] page_owner free stack trace missing [ 337.660593][ C0] [ 337.660596][ C0] Memory state around the buggy address: [ 337.660604][ C0] ffff88805fe05300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.660615][ C0] ffff88805fe05380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 337.660625][ C0] >ffff88805fe05400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.660633][ C0] ^ [ 337.660641][ C0] ffff88805fe05480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.660651][ C0] ffff88805fe05500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 337.660659][ C0] ================================================================== [ 337.660674][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 337.660686][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.660704][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 337.660713][ C0] Call Trace: [ 337.660718][ C0] [ 337.660724][ C0] vpanic+0x56c/0xa60 [ 337.660750][ C0] ? __pfx_vpanic+0x10/0x10 [ 337.660777][ C0] panic+0xc5/0xd0 [ 337.660800][ C0] ? __pfx_panic+0x10/0x10 [ 337.660824][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.660844][ C0] ? rcu_is_watching+0x15/0xb0 [ 337.660864][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.660883][ C0] check_panic_on_warn+0x89/0xb0 [ 337.660901][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.660920][ C0] end_report+0x73/0x180 [ 337.660945][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.660964][ C0] kasan_report+0x128/0x150 [ 337.660980][ C0] ? rose_t0timer_expiry+0x45d/0x570 [ 337.661003][ C0] rose_t0timer_expiry+0x45d/0x570 [ 337.661024][ C0] call_timer_fn+0x192/0x640 [ 337.661038][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.661057][ C0] ? call_timer_fn+0xd4/0x640 [ 337.661071][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 337.661089][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.661111][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.661131][ C0] __run_timer_base+0x6a3/0x9f0 [ 337.661159][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 337.661187][ C0] run_timer_softirq+0xb7/0x170 [ 337.661210][ C0] handle_softirqs+0x1de/0x6f0 [ 337.661235][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 337.661258][ C0] run_ktimerd+0x69/0x100 [ 337.661271][ C0] smpboot_thread_fn+0x541/0xa50 [ 337.661300][ C0] ? smpboot_thread_fn+0x4d/0xa50 [ 337.661328][ C0] kthread+0x388/0x470 [ 337.661344][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 337.661368][ C0] ? __pfx_kthread+0x10/0x10 [ 337.661384][ C0] ret_from_fork+0x51e/0xb90 [ 337.661407][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 337.661429][ C0] ? __switch_to+0xc7d/0x1450 [ 337.661449][ C0] ? __pfx_kthread+0x10/0x10 [ 337.661465][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.661490][ C0] [ 337.662118][ C0] Kernel Offset: disabled