last executing test programs: 4.506971156s ago: executing program 0 (id=6): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216a", 0xf7}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) sendmsg$inet(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000000140)="7fb8", 0x2}], 0x1}, 0x40400c1) 4.392376519s ago: executing program 0 (id=7): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x8913, 0x0) r3 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040801) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="0100000001"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 3.173373813s ago: executing program 0 (id=8): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4c}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x40, 0x0, 0x9}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.574823473s ago: executing program 0 (id=9): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f6", 0x4}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x5}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 2.507320298s ago: executing program 2 (id=3): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x439, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x221}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x36}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x6}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28008000}, 0x4040844) 2.174722593s ago: executing program 2 (id=10): syz_emit_ethernet(0x4c6, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2f, 0x4b8, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a4, 0x0, @gue={{0x2, 0x0, 0x0, 0x1, 0x100, @val=0x80}, "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"}}}}}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000009c0)=ANY=[], 0x1000f) 1.860479573s ago: executing program 2 (id=11): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="f5fbfd4f1595317700ff55f1f960ff70fba64053ef1c952b8561071ccfbed96b7227eaaf92a1358afc148a8aafa58b2444561acf9a5114b207019da8518fea9fd189e3616ec0ad37f86f431d6f4f1fbe1b0e3e640ac2b1f7ff33cf28d27c40513b6cee87fbd144c842c5c7b6752ea19efcfca738ac5207318c1bc30db2a727ce9a82303920eb2a3b0aa99902f8423e754843e7d6ceb06048a8d918680c042a42370dc807a398af793f4b1a3107c3771474ba13d826ce5634d33c485f3f97cffc9ea1e026f4327e96d5a40268c75358061e75633ebe43e946f2bad55973c81fff7d4843dd1db36180dd3b5692f98ace6805c67a9e20216aac908b9a6111c6", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0x4}], 0x2}}], 0x4, 0x4000000) 1.652847144s ago: executing program 2 (id=12): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x40000062) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond_slave_1\x00'}) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f07074a264e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r2, &(0x7f0000000000)={0xa0000001}) epoll_wait(r6, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) shutdown(r4, 0x1) 1.570943221s ago: executing program 4 (id=5): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="700000001000010428bd70000100000000000000", @ANYBLOB="08000000000001004000128009000100766c616e0000000030000280060001000200000006000100020000001c0004800c00010005000000000800000c0001008100000081ffffff08000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x70}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 1.243754481s ago: executing program 4 (id=13): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0d0300000000000000001300000024000980080002"], 0x38}}, 0x4) 1.18503781s ago: executing program 1 (id=2): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a02fef8ff"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x8000) 1.105521569s ago: executing program 0 (id=14): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000280)={0x3, 0x6}, 0x2) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) 771.133349ms ago: executing program 4 (id=15): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", '\x00', "fdca5bcc05004302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/157, 0x9d}], 0x1) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x4, @private1}, 0x1c) 389.012002ms ago: executing program 1 (id=16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 309.769189ms ago: executing program 3 (id=4): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x46, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x2}, &(0x7f0000000440)={0x0, 0x2710}) 6.712307ms ago: executing program 1 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/203, 0xcb}, 0x6}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000001c0)=0x80000008, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0xfdcd, 0x2f, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x65, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e26, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x7ff, 0x7f}}}}, 0xfdef) 0s ago: executing program 0 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000180), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_128={{0x303}, "9913d4ab2de66f9c", "dd79ff97261d7098a0723ec49ab4cfdc", '\x00', "fdca5bcc05004302"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) readv(r0, &(0x7f0000000000), 0x0) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 84.296549][ T5595] cgroup: Unknown subsys name 'net' [ 84.537789][ T5595] cgroup: Unknown subsys name 'cpuset' [ 84.593185][ T5595] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.617906][ T5595] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.449029][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.463120][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.484892][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.498671][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.536933][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.549684][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.558902][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.578125][ T5630] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.580054][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.584389][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.593372][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.593453][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.610220][ T5631] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.610712][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.617794][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.618349][ T5630] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.622874][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.652539][ T5630] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.658877][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.667990][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.684287][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.717280][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.727539][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.746021][ T4924] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.794231][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.755051][ T5627] Bluetooth: hci2: command tx timeout [ 91.875672][ T10] cfg80211: failed to load regulatory.db [ 91.912675][ T4924] Bluetooth: hci0: command tx timeout [ 91.913118][ T4924] Bluetooth: hci4: command tx timeout [ 91.915938][ T5620] Bluetooth: hci3: command tx timeout [ 91.916303][ T5627] Bluetooth: hci1: command tx timeout [ 92.618695][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.618947][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.619162][ T5612] bridge_slave_0: entered allmulticast mode [ 92.626908][ T5612] bridge_slave_0: entered promiscuous mode [ 92.693039][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.693306][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.693510][ T5610] bridge_slave_0: entered allmulticast mode [ 92.697478][ T5610] bridge_slave_0: entered promiscuous mode [ 92.734121][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.734353][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.734573][ T5612] bridge_slave_1: entered allmulticast mode [ 92.738621][ T5612] bridge_slave_1: entered promiscuous mode [ 92.799282][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.799616][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.799899][ T5610] bridge_slave_1: entered allmulticast mode [ 92.804471][ T5610] bridge_slave_1: entered promiscuous mode [ 92.854290][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.854557][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.854751][ T5611] bridge_slave_0: entered allmulticast mode [ 92.857487][ T5611] bridge_slave_0: entered promiscuous mode [ 92.872713][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.872946][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.873379][ T5609] bridge_slave_0: entered allmulticast mode [ 92.891950][ T5609] bridge_slave_0: entered promiscuous mode [ 92.971761][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.972096][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.974234][ T5611] bridge_slave_1: entered allmulticast mode [ 92.991747][ T5611] bridge_slave_1: entered promiscuous mode [ 93.000476][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.000751][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.001199][ T5609] bridge_slave_1: entered allmulticast mode [ 93.011555][ T5609] bridge_slave_1: entered promiscuous mode [ 93.075273][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.125064][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.125560][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.125902][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.126181][ T5613] bridge_slave_0: entered allmulticast mode [ 93.129009][ T5613] bridge_slave_0: entered promiscuous mode [ 93.166377][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.212557][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.213152][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.213442][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.213636][ T5613] bridge_slave_1: entered allmulticast mode [ 93.216162][ T5613] bridge_slave_1: entered promiscuous mode [ 93.269949][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.287981][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.391591][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.405217][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.457551][ T5612] team0: Port device team_slave_0 added [ 93.498941][ T5610] team0: Port device team_slave_0 added [ 93.510623][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.527220][ T5612] team0: Port device team_slave_1 added [ 93.571148][ T5610] team0: Port device team_slave_1 added [ 93.584356][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.612123][ T5611] team0: Port device team_slave_0 added [ 93.621318][ T5609] team0: Port device team_slave_0 added [ 93.688065][ T5611] team0: Port device team_slave_1 added [ 93.691446][ T5609] team0: Port device team_slave_1 added [ 93.742244][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.742263][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.745463][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.822218][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.822231][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.822251][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.832658][ T5627] Bluetooth: hci2: command tx timeout [ 93.849132][ T5613] team0: Port device team_slave_0 added [ 93.860408][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.860457][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.860529][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.955514][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.955527][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.955548][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.995456][ T5627] Bluetooth: hci4: command tx timeout [ 94.003078][ T5627] Bluetooth: hci1: command tx timeout [ 94.003110][ T4924] Bluetooth: hci0: command tx timeout [ 94.003121][ T5627] Bluetooth: hci3: command tx timeout [ 94.367087][ T5613] team0: Port device team_slave_1 added [ 94.384432][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.384448][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.384481][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.386831][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.386843][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.386863][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.505865][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.505877][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.505897][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.508767][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.508779][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.508799][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.630511][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.630524][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.630546][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.708684][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.708698][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.708717][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.809765][ T5612] hsr_slave_0: entered promiscuous mode [ 94.811736][ T5612] hsr_slave_1: entered promiscuous mode [ 94.867189][ T5610] hsr_slave_0: entered promiscuous mode [ 94.868838][ T5610] hsr_slave_1: entered promiscuous mode [ 94.870359][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 94.870450][ T5610] Cannot create hsr debugfs directory [ 94.960940][ T5611] hsr_slave_0: entered promiscuous mode [ 94.965208][ T5611] hsr_slave_1: entered promiscuous mode [ 94.970467][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 94.970526][ T5611] Cannot create hsr debugfs directory [ 94.991880][ T5609] hsr_slave_0: entered promiscuous mode [ 94.998166][ T5609] hsr_slave_1: entered promiscuous mode [ 95.004025][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 95.004044][ T5609] Cannot create hsr debugfs directory [ 95.290779][ T5613] hsr_slave_0: entered promiscuous mode [ 95.293138][ T5613] hsr_slave_1: entered promiscuous mode [ 95.299289][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 95.299360][ T5613] Cannot create hsr debugfs directory [ 95.913205][ T5620] Bluetooth: hci2: command tx timeout [ 96.072773][ T4924] Bluetooth: hci4: command tx timeout [ 96.072813][ T4924] Bluetooth: hci1: command tx timeout [ 96.072925][ T5627] Bluetooth: hci3: command tx timeout [ 96.072942][ T5620] Bluetooth: hci0: command tx timeout [ 96.329436][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.367407][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.384868][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.410035][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.426482][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.461891][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.495047][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.528908][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.689427][ T5611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 96.731209][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.747121][ T5611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 96.788435][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.790736][ T5611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 96.855511][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.898493][ T5611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 96.927706][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.097653][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.140244][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.150255][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.189592][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.205193][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.247864][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.291570][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.320110][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.511609][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.547947][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.555718][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.587552][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.611308][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.649002][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.702438][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.751351][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.857699][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.939233][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.968116][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.980249][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.992876][ T5620] Bluetooth: hci2: command tx timeout [ 98.010814][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.035453][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.081933][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.104629][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.147143][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.153094][ T5620] Bluetooth: hci3: command tx timeout [ 98.153124][ T5627] Bluetooth: hci4: command tx timeout [ 98.168334][ T5627] Bluetooth: hci0: command tx timeout [ 98.168344][ T5620] Bluetooth: hci1: command tx timeout [ 98.225281][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.309862][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.310050][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.359297][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.399861][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.400308][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.564191][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.613912][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.656835][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.657483][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.727049][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.727737][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.827126][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.898153][ T1189] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.898335][ T1189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.936375][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.990812][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.000570][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.148066][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.247550][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.251139][ T4627] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.251269][ T4627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.332161][ T4627] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.334501][ T4627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.528467][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.634171][ T190] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.635974][ T190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.787538][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.788596][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.300607][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.851204][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.899585][ T5612] veth0_vlan: entered promiscuous mode [ 101.036544][ T5612] veth1_vlan: entered promiscuous mode [ 101.278301][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.579546][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.647579][ T5612] veth0_macvtap: entered promiscuous mode [ 101.717500][ T5612] veth1_macvtap: entered promiscuous mode [ 101.889130][ T5613] veth0_vlan: entered promiscuous mode [ 101.917138][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.941120][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.996258][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.017754][ T5613] veth1_vlan: entered promiscuous mode [ 102.107860][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.121906][ T5611] veth0_vlan: entered promiscuous mode [ 102.135557][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.171079][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.197737][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.202068][ T5610] veth0_vlan: entered promiscuous mode [ 102.326592][ T5611] veth1_vlan: entered promiscuous mode [ 102.471120][ T5610] veth1_vlan: entered promiscuous mode [ 102.661411][ T5613] veth0_macvtap: entered promiscuous mode [ 102.677345][ T5609] veth0_vlan: entered promiscuous mode [ 102.778831][ T5613] veth1_macvtap: entered promiscuous mode [ 102.830621][ T5609] veth1_vlan: entered promiscuous mode [ 102.839337][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.839357][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.908169][ T5611] veth0_macvtap: entered promiscuous mode [ 102.996121][ T5611] veth1_macvtap: entered promiscuous mode [ 103.011331][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.034903][ T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.034916][ T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.037247][ T5610] veth0_macvtap: entered promiscuous mode [ 103.085377][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.104550][ T5610] veth1_macvtap: entered promiscuous mode [ 103.188377][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.219146][ T4627] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.235014][ T4627] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.258183][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.280709][ T4627] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.329273][ T5609] veth0_macvtap: entered promiscuous mode [ 103.390000][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.401301][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.440722][ T5609] veth1_macvtap: entered promiscuous mode [ 103.537598][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.567641][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.689772][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.893811][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.001479][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.042857][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.048873][ T1189] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.097108][ T1189] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.204423][ T1189] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.283073][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.329412][ T5816] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 104.383240][ T5817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 104.424941][ T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.424963][ T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.486330][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.108063][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.200911][ T157] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.200959][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.200976][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.208441][ T157] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.255627][ T190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.718188][ T1442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.718210][ T1442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.220928][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.220946][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.560382][ T1189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.560406][ T1189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.704211][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.704232][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.947492][ T1189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.947513][ T1189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.459757][ T1442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.459778][ T1442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.963376][ T5845] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 108.047398][ T5845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 108.457298][ T5853] Zero length message leads to an empty skb [ 108.756968][ T5846] ================================================================== [ 108.756992][ T5846] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 108.757024][ T5846] Read of size 8 at addr ffff88803aec01e8 by task syz.2.12/5846 [ 108.757043][ T5846] [ 108.757069][ T5846] CPU: 0 UID: 0 PID: 5846 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.757099][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.757121][ T5846] Call Trace: [ 108.757133][ T5846] [ 108.757142][ T5846] dump_stack_lvl+0xe8/0x150 [ 108.757175][ T5846] print_address_description+0x55/0x1e0 [ 108.757205][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.757226][ T5846] print_report+0x58/0x70 [ 108.757254][ T5846] kasan_report+0x117/0x150 [ 108.757288][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.757314][ T5846] clear_tfile_check_list+0x114/0x380 [ 108.757337][ T5846] ? clear_tfile_check_list+0x22/0x380 [ 108.757361][ T5846] do_epoll_ctl_file+0x8fd/0xed0 [ 108.757396][ T5846] ? do_epoll_ctl_file+0xac3/0xed0 [ 108.757431][ T5846] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 108.757466][ T5846] ? __fget_files+0x3a6/0x420 [ 108.757497][ T5846] ? __fget_files+0x2a/0x420 [ 108.757531][ T5846] __se_sys_epoll_ctl+0x14e/0x210 [ 108.757567][ T5846] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 108.757607][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.757631][ T5846] do_syscall_64+0x174/0x580 [ 108.757654][ T5846] ? trace_irq_disable+0x3b/0x140 [ 108.757682][ T5846] ? clear_bhb_loop+0x40/0x90 [ 108.757709][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.757732][ T5846] RIP: 0033:0x7f46618cce59 [ 108.757756][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.757776][ T5846] RSP: 002b:00007f465f29e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 108.757801][ T5846] RAX: ffffffffffffffda RBX: 00007f4661b46360 RCX: 00007f46618cce59 [ 108.757819][ T5846] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 000000000000000a [ 108.757832][ T5846] RBP: 00007f4661962d6f R08: 0000000000000000 R09: 0000000000000000 [ 108.757847][ T5846] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.757862][ T5846] R13: 00007f4661b463f8 R14: 00007f4661b46360 R15: 00007ffd1fa19e18 [ 108.757889][ T5846] [ 108.757897][ T5846] [ 108.757902][ T5846] Allocated by task 5842: [ 108.757913][ T5846] kasan_save_track+0x3e/0x80 [ 108.757939][ T5846] __kasan_slab_alloc+0x6c/0x80 [ 108.757966][ T5846] kmem_cache_alloc_noprof+0x33b/0x680 [ 108.757999][ T5846] ep_insert+0x512/0x1820 [ 108.758028][ T5846] do_epoll_ctl_file+0x8bb/0xed0 [ 108.758059][ T5846] __se_sys_epoll_ctl+0x14e/0x210 [ 108.758089][ T5846] do_syscall_64+0x174/0x580 [ 108.758109][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.758129][ T5846] [ 108.758134][ T5846] Freed by task 5832: [ 108.758144][ T5846] kasan_save_track+0x3e/0x80 [ 108.758169][ T5846] kasan_save_free_info+0x46/0x50 [ 108.758189][ T5846] __kasan_slab_free+0x5c/0x80 [ 108.758216][ T5846] kmem_cache_free+0x187/0x6c0 [ 108.758244][ T5846] eventpoll_release_file+0xc2/0x240 [ 108.758274][ T5846] __fput+0x83c/0xa70 [ 108.758298][ T5846] task_work_run+0x1d9/0x270 [ 108.758324][ T5846] exit_to_user_mode_loop+0x193/0x680 [ 108.758350][ T5846] do_syscall_64+0x353/0x580 [ 108.758369][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.758390][ T5846] [ 108.758395][ T5846] The buggy address belongs to the object at ffff88803aec01e0 [ 108.758395][ T5846] which belongs to the cache ep_head of size 16 [ 108.758413][ T5846] The buggy address is located 8 bytes inside of [ 108.758413][ T5846] freed 16-byte region [ffff88803aec01e0, ffff88803aec01f0) [ 108.758435][ T5846] [ 108.758441][ T5846] The buggy address belongs to the physical page: [ 108.758461][ T5846] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803aec0940 pfn:0x3aec0 [ 108.758482][ T5846] memcg:ffff888033b42801 [ 108.758492][ T5846] flags: 0x80000000000200(workingset|node=0|zone=1) [ 108.758518][ T5846] page_type: f5(slab) [ 108.758538][ T5846] raw: 0080000000000200 ffff888140e96dc0 ffff88801abbb088 ffffea0000dbafd0 [ 108.758559][ T5846] raw: ffff88803aec0940 000000080080003c 00000000f5000000 ffff888033b42801 [ 108.758572][ T5846] page dumped because: kasan: bad access detected [ 108.758587][ T5846] page_owner tracks the page as allocated [ 108.758595][ T5846] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4983, tgid 4983 (udevd), ts 48119840098, free_ts 48104267605 [ 108.758633][ T5846] post_alloc_hook+0x1f9/0x250 [ 108.758660][ T5846] get_page_from_freelist+0x265c/0x26e0 [ 108.758692][ T5846] __alloc_frozen_pages_noprof+0x18d/0x380 [ 108.758723][ T5846] allocate_slab+0x74/0x5e0 [ 108.758742][ T5846] refill_objects+0x33c/0x3d0 [ 108.758760][ T5846] __pcs_replace_empty_main+0x373/0x720 [ 108.758794][ T5846] kmem_cache_alloc_noprof+0x433/0x680 [ 108.758818][ T5846] ep_insert+0x512/0x1820 [ 108.758847][ T5846] do_epoll_ctl_file+0x8bb/0xed0 [ 108.758875][ T5846] __se_sys_epoll_ctl+0x14e/0x210 [ 108.758903][ T5846] do_syscall_64+0x174/0x580 [ 108.758922][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.758942][ T5846] page last free pid 29 tgid 29 stack trace: [ 108.758953][ T5846] __free_frozen_pages+0x10af/0x1190 [ 108.758986][ T5846] tlb_remove_table_rcu+0x85/0x100 [ 108.759018][ T5846] rcu_cpu_kthread+0x99e/0x1470 [ 108.759044][ T5846] smpboot_thread_fn+0x541/0xa50 [ 108.759064][ T5846] kthread+0x388/0x470 [ 108.759087][ T5846] ret_from_fork+0x514/0xb70 [ 108.759112][ T5846] ret_from_fork_asm+0x1a/0x30 [ 108.759141][ T5846] [ 108.759146][ T5846] Memory state around the buggy address: [ 108.759157][ T5846] ffff88803aec0080: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 108.759172][ T5846] ffff88803aec0100: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 108.759187][ T5846] >ffff88803aec0180: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 108.759197][ T5846] ^ [ 108.759210][ T5846] ffff88803aec0200: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 108.759224][ T5846] ffff88803aec0280: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 108.759234][ T5846] ================================================================== [ 108.858496][ T5846] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.858570][ T5846] CPU: 1 UID: 0 PID: 5846 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 108.858649][ T5846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 108.858683][ T5846] Call Trace: [ 108.858713][ T5846] [ 108.858742][ T5846] vpanic+0x56c/0xa60 [ 108.858837][ T5846] ? __pfx_vpanic+0x10/0x10 [ 108.858940][ T5846] ? __pfx___schedule+0x10/0x10 [ 108.859042][ T5846] panic+0xc5/0xd0 [ 108.859117][ T5846] ? __pfx_panic+0x10/0x10 [ 108.859199][ T5846] ? preempt_schedule_thunk+0x16/0x40 [ 108.859273][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.859334][ T5846] check_panic_on_warn+0x89/0xb0 [ 108.859415][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.859477][ T5846] end_report+0x73/0x170 [ 108.859563][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.859616][ T5846] kasan_report+0x128/0x150 [ 108.859706][ T5846] ? clear_tfile_check_list+0x114/0x380 [ 108.859764][ T5846] clear_tfile_check_list+0x114/0x380 [ 108.859819][ T5846] ? clear_tfile_check_list+0x22/0x380 [ 108.859880][ T5846] do_epoll_ctl_file+0x8fd/0xed0 [ 108.859972][ T5846] ? do_epoll_ctl_file+0xac3/0xed0 [ 108.860051][ T5846] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 108.860120][ T5846] ? __fget_files+0x3a6/0x420 [ 108.860150][ T5846] ? __fget_files+0x2a/0x420 [ 108.860183][ T5846] __se_sys_epoll_ctl+0x14e/0x210 [ 108.860220][ T5846] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 108.860259][ T5846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.860284][ T5846] do_syscall_64+0x174/0x580 [ 108.860306][ T5846] ? trace_irq_disable+0x3b/0x140 [ 108.860335][ T5846] ? clear_bhb_loop+0x40/0x90 [ 108.860361][ T5846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.860386][ T5846] RIP: 0033:0x7f46618cce59 [ 108.860407][ T5846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.860426][ T5846] RSP: 002b:00007f465f29e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 108.860457][ T5846] RAX: ffffffffffffffda RBX: 00007f4661b46360 RCX: 00007f46618cce59 [ 108.860475][ T5846] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 000000000000000a [ 108.860489][ T5846] RBP: 00007f4661962d6f R08: 0000000000000000 R09: 0000000000000000 [ 108.860504][ T5846] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.860519][ T5846] R13: 00007f4661b463f8 R14: 00007f4661b46360 R15: 00007ffd1fa19e18 [ 108.860546][ T5846] [ 108.861156][ T5846] Kernel Offset: disabled