last executing test programs: 2.51898147s ago: executing program 0 (id=942): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r2}}}}]}, 0x38}}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x4c, 0x1a, 0x0, 0x75, 0x230, 0x258, 0x258, 0x230, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x2e0}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ipv6={@mcast2, @local, [], [], 'veth0_virt_wifi\x00', 'bridge_slave_0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7a86d}, 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6(0xa, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$bt_hci(r7, 0x84, 0x6d, &(0x7f00000020c0)=""/4109, &(0x7f0000000040)=0x100d) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00'}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8845}, 0x4040045) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 1.835869753s ago: executing program 2 (id=948): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[], 0x14}}, 0x4c810) sendmmsg$alg(r1, &(0x7f0000000500)=[{0x0, 0x0, 0x0}], 0x1, 0xd00000000000000) 1.794170232s ago: executing program 4 (id=949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000050000003800000008000300", @ANYRES32=r5, @ANYBLOB="0c00580001"], 0x28}}, 0x0) 1.745513166s ago: executing program 0 (id=950): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 1.617005173s ago: executing program 3 (id=951): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@typedef={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f, 0x30, 0x5f, 0x61, 0x5f]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0xc00) bind$llc(r1, &(0x7f00000000c0)={0x1a, 0x212, 0xd, 0x40, 0xf, 0x7, @broadcast}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="9c020000230001000000000000000000670200800c0001"], 0x29c}], 0x1}, 0x0) 1.561535774s ago: executing program 4 (id=953): syz_emit_ethernet(0x32, &(0x7f0000000140)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x2001, 0x880b, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x0, @val=0x5700}}}}}}}, 0x0) 1.420133181s ago: executing program 4 (id=954): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r2}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x27, 0xb000000, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8dee362671b75ce6"}}, 0x48}}, 0x0) 1.413269817s ago: executing program 2 (id=955): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x9, 0x6, &(0x7f00000004c0)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x31}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001780)={0x0, 0x2cc}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) close(r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x17, 0x4, 0x4, 0x5, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x6}, 0x48) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xf3f2cad26e2dc81d, 0x0, 0x0, {0x7, r9}}, 0x18}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000700)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000017c0)=ANY=[@ANYBLOB="a4060000", @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b80002803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040006000000080007000000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004000000008000100", @ANYRES32=0x0, @ANYBLOB="e801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004003f000000080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff03000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000700000008000100", @ANYRES32=0x0, @ANYBLOB="9001028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004004505ffff38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400200000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400000000006c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000003c00040056a2010007000000060007dc253d0000ec008001ffffff7f00008bff7e0000000000010109000000090003bd0300000001011f80070000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="fc000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000010000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400a600000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004002ec0000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000900000008000600", @ANYRES32=r9, @ANYBLOB], 0x6a4}}, 0x800) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, 0x0, 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000380)={0x9, 0x7, 0x2, 0x6, 0x2, [0xfffffe00, 0x3, 0x7fff]}) 1.329367942s ago: executing program 3 (id=956): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0xe4, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_VTAG_REPLY={0x8}, @CTA_PROTOINFO_SCTP_STATE={0x5}, @CTA_PROTOINFO_SCTP_STATE={0x5}]}}, @CTA_STATUS_MASK={0x8}, @CTA_TUPLE_ORIG={0xa8, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x9, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @loopback={0x12000000}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0xe4}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="c0000000680101040000000000000000020000007400018014000180080001000000000008000200e00000020c0002800500010000000000430002800500010006"], 0xc0}}, 0x0) 1.251036753s ago: executing program 3 (id=957): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006dc0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x8400, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "7eeec7317872b37ab37f4ac2fdc18baa54c61330189a9da592671ee0dd42f7a5fbc80b22cda7136ac117a5fe4b3d6d0abf60a0ca8ea3b33778516935a06e6b98cc"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0) 1.21844505s ago: executing program 4 (id=958): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket(0x1e, 0x801, 0x0) 1.119023652s ago: executing program 3 (id=960): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) socket$rds(0x15, 0x5, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140), 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222}, 0x90) syz_emit_ethernet(0x52, &(0x7f0000000180)=ANY=[], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000004580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001500)=""/4096, 0x1000}], 0x6}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) poll(&(0x7f0000000040)=[{r1, 0x184}], 0x2000000000000017, 0x3) write$binfmt_script(r2, &(0x7f0000000000), 0xfea7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}, 0x90) 1.028261075s ago: executing program 2 (id=961): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x16000000, 0x4, 0xff}, 0x48) 965.401655ms ago: executing program 1 (id=962): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x0, @multicast2}}, 0x24) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x7, &(0x7f0000000100)=@framed={{0x28, 0x0, 0x0, 0x2, 0x0, 0x63, 0x11, 0xc}, [@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x6, 0xc6, &(0x7f00000001c0)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = socket(0x40000000002, 0x3, 0x2) socket$packet(0x11, 0x3, 0x300) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f0000000080)=0x401000, 0x4) r3 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c9"}]}], {0x14}}, 0x8c}}, 0x0) recvmmsg(r4, &(0x7f0000000000)=[{{0x0, 0xffffffffffffffb0, 0x0}, 0x4}], 0x1, 0x21, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet(0xa, 0x801, 0x84) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x7, &(0x7f0000000180), 0x4) epoll_pwait(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xffffffff, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) 913.378734ms ago: executing program 2 (id=963): close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x600, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 862.202184ms ago: executing program 2 (id=964): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000feffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1c94}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000001e00)=ANY=[@ANYBLOB="02050000005bf7cda6f3e0d05b690fbf14aa6d58f35bb1e6349518109d627da48b654c628f7285d28f09a0c2313b34edb8e7210b832f6e16e4546f66e8e88a99ee906e562c4a790dd3a174ec5292ff307b57422a32960ce9e21b58d4e7f426e78264738ab63e613b0000"], 0x80}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcf517084ab526592d90adeca2cbe1fbb26ec", 0x16}], 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x0, 0xd) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000001dc0)=ANY=[@ANYRESOCT=r3], 0xd) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet6(r7, 0x0, 0x0, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r4, &(0x7f0000001d80)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) 820.830813ms ago: executing program 1 (id=965): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000004200817a"], 0x14}, 0x1, 0x0, 0xb00000000000000}, 0x0) 797.065159ms ago: executing program 0 (id=966): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000037c00f0040000000c0001800600060086"], 0x24}}, 0x0) 636.461286ms ago: executing program 0 (id=967): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040), 0x4) socket$caif_stream(0x25, 0x1, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e24, 0x97e, @private0={0xfc, 0x0, '\x00', 0x1}, 0x100}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}, 0x8001}, 0x1, {[0xfffffff8, 0x8007, 0x7, 0x10001, 0xfffffffe, 0x6, 0x3, 0x4]}}, 0x5c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="600000000000050000000000000000000000000005000400000000000900020073797a320000000014000780080006400000000008000840000000f00500050002000000050001000600000011000300686173683a6e65742c6e657400000000"], 0x60}}, 0x0) 636.163669ms ago: executing program 1 (id=968): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="240000001a0001fbffffffff0000000002"], 0x24}, 0x1, 0xf0ffffff}, 0x0) 627.05307ms ago: executing program 2 (id=969): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() r3 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c00000041000701ffffffffffdbdf25017c000008000100", @ANYRES32=r2], 0x1c}}, 0x0) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz0\x00', 0x200002, 0x0) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r5, 0xf50f, 0x0) openat$cgroup_int(r4, &(0x7f0000000200)='cpuset.cpus\x00', 0x2, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000000500)={{0x0, 0x5, 0x5b, 0x5, 0x4, 0x35457538, 0x9, 0x4, 0x2, 0x8000, 0x6, 0xda, 0x5, 0x8, 0xe60}}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001500)={r6, 0x5}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@newsa={0x154, 0x10, 0x713, 0x0, 0xfffffffc, {{@in=@remote, @in6=@loopback, 0x0, 0x7}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x32}, @in6=@mcast2, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e24, @in=@remote}}]}, 0x154}}, 0x0) 481.462054ms ago: executing program 0 (id=970): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x288, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060072720000080008000000000008000b"], 0x54}}, 0x0) 480.424936ms ago: executing program 1 (id=971): r0 = socket$inet6(0xa, 0x4, 0x5) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x1, 0x3, 0x10, @empty, @mcast2, 0x80, 0x8000, 0x7, 0x1}}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x4, [@const={0x3, 0x0, 0x0, 0xa, 0x1}, @var={0xc5c, 0x0, 0x0, 0xe, 0x5}, @struct={0x4, 0x2, 0x0, 0x4, 0x1, 0x7, [{0xf, 0x5, 0x2}, {0xf, 0x1}]}, @ptr={0x2, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xfff}}, @const={0x9}, @const={0x3, 0x0, 0x0, 0xa, 0x3}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000340)=""/188, 0x98, 0xbc, 0x1, 0x6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0xc5, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xe, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ff}, [@map_fd={0x18, 0x4, 0x1, 0x0, r1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x25, &(0x7f0000000180)=""/37, 0x0, 0x12, '\x00', r2, 0x22, r3, 0x8, &(0x7f0000000440)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x2, 0x8, 0x1000, 0x3}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x90) r7 = socket$caif_stream(0x25, 0x1, 0x3) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000880)={0x40, 0x101, 0x4, 0x0, 0x0, [{{r1}, 0x1}, {{r0}, 0x400}, {{r3}, 0x4}, {{r7}, 0xaa}]}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x2040, 0x0) ioctl$TUNSETFILTEREBPF(r8, 0x800454e1, &(0x7f0000000980)=r6) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f00000009c0)={0x2, 0x4e24, @multicast1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000a00)={'vxcan0\x00'}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x68, r11, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x95be}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x40080) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000c40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r10, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r12, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000d40)={0x0, 0x5}, &(0x7f0000000d80)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000dc0)={r14, 0x1, 0x20}, 0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000e80)={'syztnl1\x00', &(0x7f0000000e00)={'ip6gre0\x00', r4, 0x4, 0x3, 0x6, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}, @local, 0x7800, 0x7, 0x3f3, 0x1ff}}) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f00), r10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000f40)={0x0, @loopback, @multicast2}, &(0x7f0000000f80)=0xc) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r10, &(0x7f0000001080)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x60, r15, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}, @ETHTOOL_A_LINKINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xdf}, @ETHTOOL_A_LINKINFO_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x9}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x48001) r17 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRADDBR(r17, 0x89a0, &(0x7f00000010c0)='geneve1\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000012c0)={r1, 0x58, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001380), &(0x7f00000013c0)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x13, &(0x7f0000001100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x8}, [@exit, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6b}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f00000011c0)='syzkaller\x00', 0x800, 0x2e, &(0x7f0000001200)=""/46, 0x40f00, 0x22, '\x00', r18, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001340)={0x1, 0x3, 0x1000, 0x8dd}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001440)=[r1, r1, r1, r1, r1, r19], &(0x7f0000001480)=[{0x3, 0x3, 0xd, 0xb}, {0x3, 0x3, 0x7, 0x1}], 0x10, 0x8001}, 0x90) 280.302261ms ago: executing program 3 (id=972): socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 246.733685ms ago: executing program 0 (id=973): unshare(0x400) bpf$BPF_PROG_TEST_RUN(0x12, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x0, 0x401, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0xffffffff}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000680001000000000000000000020000000000000006000700040000001800088014000200fc00000000000000000000000000000008000500d0eee8bbb52abd9f81d7b2b0dfd532833c621f5c1c6353b852d3eff02d58db64d76e8a52309c46970d1fcecb2f5827889968be3cef30114250bf72af619b27929e5ee2039c541ce82eb851b819352ce6495c13178ba1da531c69008af9d0efd7863941ba88ee25f5860f478eef7425bb2eece3bdef", @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000e000000850000002a00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) r3 = socket$nl_audit(0x10, 0x3, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r5}]}, 0x1c}}, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x20, 0x70bd26, 0x25dfdbfe, {0x20, 0x1, 0x0, r5, 0x0, 0x800, 0x8, 0x80000000, 0x0, 0x101, 0x4}, ["", "", "", "", "", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x20044040) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000400), &(0x7f00000004c0)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wlan1\x00'}) r6 = socket(0x10, 0x803, 0x0) write(r6, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x80, 0x0, 0x9, 0x10000, {{0x14, 0x4, 0x2, 0x36, 0x50, 0x65, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast1, {[@generic={0x94, 0x2}, @lsrr={0x83, 0x17, 0x8c, [@rand_addr=0x64010102, @empty, @rand_addr=0x64010101, @remote, @multicast1]}, @timestamp={0x44, 0xc, 0xc8, 0x0, 0x0, [0x9, 0x1]}, @ra={0x94, 0x4}, @generic={0x88, 0x11, "db6786a8fae4fcaad7cded5c4b1862"}, @end]}}}}}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0xa, &(0x7f0000000500)={0x0, r2, 0x0, 0x0, 0xfffffffffffffffe}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) r7 = socket(0x2b, 0x1, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r8, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$inet6_tcp_int(r7, 0x6, 0x1, 0x0, &(0x7f00000003c0)) ioctl$int_in(r2, 0x5421, &(0x7f0000000080)=0x2000000) 197.293073ms ago: executing program 4 (id=974): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) (async) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$rds(r2, &(0x7f0000001e40)={&(0x7f00000003c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000740)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000000400)=""/54, 0x36}, &(0x7f0000001540)=[{&(0x7f0000001500)=""/15, 0xf}], 0x1}}], 0x48}, 0x0) 96.149695ms ago: executing program 1 (id=975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x15}]}}}]}, 0x40}}, 0x0) 34.568546ms ago: executing program 4 (id=976): accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000001720000100000000000000000002000000000000000000000005001300010000000c000c40000022"], 0x30}}, 0x0) 1.414091ms ago: executing program 1 (id=977): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x5) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x300, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 0s ago: executing program 3 (id=978): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="840200001a00010000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x284}}, 0x0) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_msfilter(r4, 0x10d, 0x2, 0x0, 0x14) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa10000000000000701e6fff7ffffffc502000008000000b703000000030000850000000600000095000000000000009d"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x28, &(0x7f00000001c0)=""/40, 0x0, 0x15, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000580), 0x10, 0x0, 0x0, 0x6, &(0x7f0000000a00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000000700)=[{0x0, 0x1}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}]}, 0x90) (async, rerun: 64) syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) (rerun: 64) r5 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000000)={0x10, 0x0, 0x20, r6}, 0xc) r7 = socket(0xa, 0x3, 0x3a) (async) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x2}}, 0x20) (async) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b000100697036746e6c00000400028008001b00000000000500110000000000"], 0x44}}, 0x80) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async, rerun: 64) setsockopt$MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) (async, rerun: 64) sendmsg$AUDIT_USER_AVC(r7, &(0x7f0000000200)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x3}, 0x8000) (async) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 64) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x0) (rerun: 64) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 70.079929][ T5082] cgroup: Unknown subsys name 'net' [ 70.250769][ T5082] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.885333][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.892069][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.994517][ T5082] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.697543][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.703046][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.706650][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.713757][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.720157][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.726939][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.734297][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.741325][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.748015][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.755339][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.762186][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.777415][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.785575][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.793300][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.803082][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.812992][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.822582][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.830318][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.844217][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.863004][ T5101] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.871076][ T5101] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.888169][ T5101] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.904096][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.911989][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.943664][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.954947][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.964779][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.998054][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.007239][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.015183][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.380917][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 76.566059][ T5097] chnl_net:caif_netlink_parms(): no params data found [ 76.707995][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.715345][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.724831][ T5092] bridge_slave_0: entered allmulticast mode [ 76.732189][ T5092] bridge_slave_0: entered promiscuous mode [ 76.791725][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.798954][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.806414][ T5092] bridge_slave_1: entered allmulticast mode [ 76.813631][ T5092] bridge_slave_1: entered promiscuous mode [ 76.888166][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.898128][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 76.937140][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.958919][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 77.024122][ T5091] chnl_net:caif_netlink_parms(): no params data found [ 77.044542][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.052161][ T5097] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.060520][ T5097] bridge_slave_0: entered allmulticast mode [ 77.067600][ T5097] bridge_slave_0: entered promiscuous mode [ 77.076232][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.083724][ T5097] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.091786][ T5097] bridge_slave_1: entered allmulticast mode [ 77.098973][ T5097] bridge_slave_1: entered promiscuous mode [ 77.123448][ T5092] team0: Port device team_slave_0 added [ 77.174205][ T5092] team0: Port device team_slave_1 added [ 77.289077][ T5097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.309182][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.316373][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.347038][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.363259][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.371863][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.398160][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.445839][ T5097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.476765][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.485455][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.494120][ T5102] bridge_slave_0: entered allmulticast mode [ 77.501572][ T5102] bridge_slave_0: entered promiscuous mode [ 77.516960][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.524291][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.531736][ T5107] bridge_slave_0: entered allmulticast mode [ 77.539812][ T5107] bridge_slave_0: entered promiscuous mode [ 77.588543][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.595930][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.603745][ T5102] bridge_slave_1: entered allmulticast mode [ 77.611294][ T5102] bridge_slave_1: entered promiscuous mode [ 77.623456][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.634987][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.642595][ T5107] bridge_slave_1: entered allmulticast mode [ 77.650450][ T5107] bridge_slave_1: entered promiscuous mode [ 77.671860][ T5097] team0: Port device team_slave_0 added [ 77.683194][ T5092] hsr_slave_0: entered promiscuous mode [ 77.690092][ T5092] hsr_slave_1: entered promiscuous mode [ 77.748153][ T5097] team0: Port device team_slave_1 added [ 77.798514][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.808262][ T5091] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.817502][ T5091] bridge_slave_0: entered allmulticast mode [ 77.827523][ T5091] bridge_slave_0: entered promiscuous mode [ 77.838579][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.862621][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.869785][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.884328][ T5096] Bluetooth: hci0: command tx timeout [ 77.896361][ T5103] Bluetooth: hci1: command tx timeout [ 77.902058][ T5097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.920579][ T5097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.927615][ T5097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.954216][ T5097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.968668][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.978374][ T5103] Bluetooth: hci3: command tx timeout [ 77.978678][ T5091] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.984611][ T5103] Bluetooth: hci2: command tx timeout [ 77.992564][ T5091] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.004186][ T5091] bridge_slave_1: entered allmulticast mode [ 78.011396][ T5091] bridge_slave_1: entered promiscuous mode [ 78.033943][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.085762][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.130013][ T5103] Bluetooth: hci4: command tx timeout [ 78.158598][ T5107] team0: Port device team_slave_0 added [ 78.170861][ T5107] team0: Port device team_slave_1 added [ 78.194189][ T5102] team0: Port device team_slave_0 added [ 78.204797][ T5091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.254717][ T5102] team0: Port device team_slave_1 added [ 78.265799][ T5091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.371894][ T5097] hsr_slave_0: entered promiscuous mode [ 78.378882][ T5097] hsr_slave_1: entered promiscuous mode [ 78.385391][ T5097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.394080][ T5097] Cannot create hsr debugfs directory [ 78.415925][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.423172][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.450167][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.463463][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.470682][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.496923][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.528247][ T5091] team0: Port device team_slave_0 added [ 78.574734][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.585734][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.612523][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.626419][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.634201][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.661057][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.675355][ T5091] team0: Port device team_slave_1 added [ 78.796906][ T5107] hsr_slave_0: entered promiscuous mode [ 78.804048][ T5107] hsr_slave_1: entered promiscuous mode [ 78.810864][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.818643][ T5107] Cannot create hsr debugfs directory [ 78.875525][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.883092][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.909818][ T5091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.923599][ T5091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.931025][ T5091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.957123][ T5091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.986643][ T5102] hsr_slave_0: entered promiscuous mode [ 78.994026][ T5102] hsr_slave_1: entered promiscuous mode [ 79.000905][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.008500][ T5102] Cannot create hsr debugfs directory [ 79.200228][ T5091] hsr_slave_0: entered promiscuous mode [ 79.207738][ T5091] hsr_slave_1: entered promiscuous mode [ 79.214785][ T5091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.222711][ T5091] Cannot create hsr debugfs directory [ 79.264288][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.281592][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.297896][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.348304][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.553391][ T5097] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.566094][ T5097] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.598642][ T5097] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.610299][ T5097] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.737999][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.751369][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.775784][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.800516][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.935746][ T5102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.959806][ T5096] Bluetooth: hci1: command tx timeout [ 79.965421][ T5103] Bluetooth: hci0: command tx timeout [ 79.978540][ T5102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.993260][ T5102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.012156][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.030885][ T5102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.040081][ T5103] Bluetooth: hci3: command tx timeout [ 80.049665][ T5103] Bluetooth: hci2: command tx timeout [ 80.138961][ T5091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.154523][ T5091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.168029][ T5091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.198518][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.205369][ T5103] Bluetooth: hci4: command tx timeout [ 80.213693][ T5091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.258701][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.266202][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.307841][ T5097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.318515][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.325786][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.416381][ T5097] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.440945][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.495933][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.503165][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.520428][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.527730][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.587240][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.646914][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.654173][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.673388][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.710641][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.717890][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.745446][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.775068][ T5091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.832696][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.866667][ T5091] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.887328][ T5097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.905788][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.913078][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.969146][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.976472][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.989862][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.997121][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.009220][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.016452][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.175485][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.252527][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.388001][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.492169][ T5097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.699281][ T5097] veth0_vlan: entered promiscuous mode [ 81.747911][ T5092] veth0_vlan: entered promiscuous mode [ 81.796638][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.816784][ T5097] veth1_vlan: entered promiscuous mode [ 81.852743][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.862598][ T5092] veth1_vlan: entered promiscuous mode [ 81.955032][ T5107] veth0_vlan: entered promiscuous mode [ 81.982910][ T5091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.015598][ T5092] veth0_macvtap: entered promiscuous mode [ 82.039566][ T5096] Bluetooth: hci1: command tx timeout [ 82.045273][ T5103] Bluetooth: hci0: command tx timeout [ 82.098805][ T5092] veth1_macvtap: entered promiscuous mode [ 82.120119][ T5103] Bluetooth: hci2: command tx timeout [ 82.125633][ T5103] Bluetooth: hci3: command tx timeout [ 82.156305][ T5107] veth1_vlan: entered promiscuous mode [ 82.191910][ T5097] veth0_macvtap: entered promiscuous mode [ 82.207270][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.256126][ T5097] veth1_macvtap: entered promiscuous mode [ 82.279602][ T5103] Bluetooth: hci4: command tx timeout [ 82.284612][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.308981][ T5102] veth0_vlan: entered promiscuous mode [ 82.372860][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.389270][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400953][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.429750][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.495580][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.519667][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.533878][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.563842][ T5102] veth1_vlan: entered promiscuous mode [ 82.586585][ T5097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.603841][ T5097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.626708][ T5097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.685993][ T5107] veth0_macvtap: entered promiscuous mode [ 82.696310][ T5097] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.711416][ T5097] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726420][ T5097] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.736952][ T5097] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.786832][ T5107] veth1_macvtap: entered promiscuous mode [ 82.934029][ T5102] veth0_macvtap: entered promiscuous mode [ 82.949212][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.965084][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.981997][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.994221][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.005220][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.016112][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.027998][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.086099][ T5091] veth0_vlan: entered promiscuous mode [ 83.098033][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.110662][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.121125][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.132350][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.143731][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.156903][ T5102] veth1_macvtap: entered promiscuous mode [ 83.177756][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.187833][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.199075][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.208482][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.221945][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.230690][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.251859][ T5091] veth1_vlan: entered promiscuous mode [ 83.355407][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.372802][ T5091] veth0_macvtap: entered promiscuous mode [ 83.373877][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.381853][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.398437][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.409059][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.420315][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.432189][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.443018][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.455273][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.467606][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.480416][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.493152][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.504056][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.514551][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.525199][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.537527][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.563609][ T5091] veth1_macvtap: entered promiscuous mode [ 83.587529][ T5102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.599834][ T5102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.608695][ T5102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.617521][ T5102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.741201][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.755545][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.794137][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.823065][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.845924][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.859014][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.874411][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.886512][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.896674][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.907342][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.920711][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.937501][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.948331][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.958418][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.974482][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.997596][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.012181][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.022538][ T5091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.033466][ T5091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.046370][ T5091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.061320][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.073421][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.094369][ T5091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.103300][ T5091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.115716][ T5091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.124759][ T5103] Bluetooth: hci0: command tx timeout [ 84.130905][ T5096] Bluetooth: hci1: command tx timeout [ 84.139630][ T5091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.189317][ T5182] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.199695][ T5103] Bluetooth: hci3: command tx timeout [ 84.206885][ T5096] Bluetooth: hci2: command tx timeout [ 84.303523][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.312930][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.360155][ T5103] Bluetooth: hci4: command tx timeout [ 84.396244][ T5192] Zero length message leads to an empty skb [ 84.471638][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.509415][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.657122][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.691228][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.866230][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.884979][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.940056][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.958582][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.375809][ T5213] syz.1.2 (5213) used greatest stack depth: 18736 bytes left [ 85.569675][ T5225] warning: `syz.1.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.820075][ T5233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.20'. [ 86.216460][ T5247] netlink: 180 bytes leftover after parsing attributes in process `syz.0.25'. [ 86.417863][ T5260] netlink: 144 bytes leftover after parsing attributes in process `syz.0.29'. [ 87.252830][ T25] cfg80211: failed to load regulatory.db [ 87.891243][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.2.50'. [ 87.930453][ T5313] IPVS: stopping master sync thread 5318 ... [ 87.937304][ T5318] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 88.821021][ T5359] netlink: 37 bytes leftover after parsing attributes in process `syz.3.63'. [ 88.922310][ T5361] syz.4.65 uses obsolete (PF_INET,SOCK_PACKET) [ 89.107372][ T5367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.67'. [ 89.141607][ T5368] nbd: must specify at least one socket [ 89.600529][ T5386] netlink: 16 bytes leftover after parsing attributes in process `syz.4.75'. [ 89.768943][ T5392] netlink: 40 bytes leftover after parsing attributes in process `syz.3.80'. [ 89.856841][ T5397] netlink: 8 bytes leftover after parsing attributes in process `syz.4.81'. [ 89.867508][ T5392] netlink: 'syz.3.80': attribute type 21 has an invalid length. [ 89.954516][ T5398] bridge0: port 2(bridge_slave_1) entered listening state [ 90.081878][ T5408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 90.171076][ T5409] vlan2: entered promiscuous mode [ 90.176238][ T5409] syz_tun: entered promiscuous mode [ 90.228425][ T5409] vlan2: entered allmulticast mode [ 90.259876][ T5409] syz_tun: entered allmulticast mode [ 90.277562][ T5409] syz_tun: left allmulticast mode [ 90.288036][ T5409] syz_tun: left promiscuous mode [ 90.910236][ T5441] netlink: 16 bytes leftover after parsing attributes in process `syz.3.94'. [ 91.228230][ T5454] netlink: 'syz.3.101': attribute type 3 has an invalid length. [ 91.470811][ T5465] xt_socket: unknown flags 0x8 [ 91.489522][ T5463] xt_socket: unknown flags 0x8 [ 91.590692][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 91.783658][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.798317][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.825063][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.849235][ T5484] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 91.872330][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.904504][ T5483] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 91.910773][ T5484] netlink: 'syz.1.111': attribute type 3 has an invalid length. [ 91.914094][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.928384][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.940350][ T5484] netlink: 224 bytes leftover after parsing attributes in process `syz.1.111'. [ 91.952333][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.969813][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 91.991384][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 92.025003][ T5482] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 92.035660][ T5492] bridge0: port 2(bridge_slave_1) entered listening state [ 92.890014][ T5527] sctp: [Deprecated]: syz.0.129 (pid 5527) Use of int in maxseg socket option. [ 92.890014][ T5527] Use struct sctp_assoc_value instead [ 93.182914][ T5544] x_tables: duplicate underflow at hook 1 [ 93.767121][ T5570] tc_dump_action: action bad kind [ 93.842622][ T5579] tipc: Can't bind to reserved service type 1 [ 94.235328][ T5598] netlink: 16 bytes leftover after parsing attributes in process `syz.1.150'. [ 94.551423][ T5613] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 94.558318][ T5615] geneve2: entered promiscuous mode [ 94.567267][ T5615] geneve2: entered allmulticast mode [ 94.732772][ T5623] FAULT_INJECTION: forcing a failure. [ 94.732772][ T5623] name failslab, interval 1, probability 0, space 0, times 1 [ 94.785491][ T5623] CPU: 1 PID: 5623 Comm: syz.4.161 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 94.795813][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 94.806004][ T5623] Call Trace: [ 94.809304][ T5623] [ 94.812336][ T5623] dump_stack_lvl+0x241/0x360 [ 94.817037][ T5623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.822282][ T5623] ? __pfx__printk+0x10/0x10 [ 94.826889][ T5623] ? __pfx___might_resched+0x10/0x10 [ 94.832726][ T5623] should_fail_ex+0x3b0/0x4e0 [ 94.837433][ T5623] should_failslab+0x9/0x20 [ 94.842047][ T5623] kmalloc_node_trace_noprof+0x74/0x300 [ 94.847614][ T5623] ? __get_vm_area_node+0x113/0x270 [ 94.853277][ T5623] __get_vm_area_node+0x113/0x270 [ 94.858338][ T5623] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 94.864420][ T5623] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 94.869990][ T5623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.875997][ T5623] ? aa_get_newest_label+0xff/0x6f0 [ 94.881226][ T5623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 94.887576][ T5623] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 94.893342][ T5623] __vmalloc_noprof+0x79/0x90 [ 94.898152][ T5623] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 94.903727][ T5623] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 94.909123][ T5623] ? bpf_prog_alloc+0x28/0x1b0 [ 94.913910][ T5623] bpf_prog_alloc+0x3a/0x1b0 [ 94.918513][ T5623] bpf_prog_load+0x7f7/0x20f0 [ 94.923226][ T5623] ? __pfx_bpf_prog_load+0x10/0x10 [ 94.928355][ T5623] ? __pfx___might_resched+0x10/0x10 [ 94.933686][ T5623] ? __might_fault+0xc6/0x120 [ 94.938381][ T5623] ? bpf_lsm_bpf+0x9/0x10 [ 94.942822][ T5623] ? security_bpf+0x87/0xb0 [ 94.947371][ T5623] __sys_bpf+0x4ee/0x810 [ 94.951777][ T5623] ? __pfx___sys_bpf+0x10/0x10 [ 94.956589][ T5623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 94.962607][ T5623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 94.968980][ T5623] ? do_syscall_64+0x100/0x230 [ 94.973774][ T5623] __x64_sys_bpf+0x7c/0x90 [ 94.978214][ T5623] do_syscall_64+0xf3/0x230 [ 94.982732][ T5623] ? clear_bhb_loop+0x35/0x90 [ 94.987430][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.993443][ T5623] RIP: 0033:0x7f043fb75bd9 [ 94.997875][ T5623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.017589][ T5623] RSP: 002b:00007f0440a2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.026054][ T5623] RAX: ffffffffffffffda RBX: 00007f043fd03f60 RCX: 00007f043fb75bd9 [ 95.034066][ T5623] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 95.042065][ T5623] RBP: 00007f0440a2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.050147][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.058135][ T5623] R13: 000000000000000b R14: 00007f043fd03f60 R15: 00007ffc7f8c3bc8 [ 95.066148][ T5623] [ 95.078695][ T5628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.160'. [ 95.084145][ T5623] syz.4.161: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 95.104444][ T5628] netlink: 'syz.2.160': attribute type 18 has an invalid length. [ 95.125821][ T5623] CPU: 0 PID: 5623 Comm: syz.4.161 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 95.135876][ T5623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 95.145982][ T5623] Call Trace: [ 95.149357][ T5623] [ 95.152328][ T5623] dump_stack_lvl+0x241/0x360 [ 95.157061][ T5623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.162320][ T5623] ? __pfx__printk+0x10/0x10 [ 95.166977][ T5623] ? __rcu_read_unlock+0xa1/0x110 [ 95.172177][ T5623] warn_alloc+0x278/0x410 [ 95.176605][ T5623] ? __pfx_warn_alloc+0x10/0x10 [ 95.181534][ T5623] ? __get_vm_area_node+0x113/0x270 [ 95.186797][ T5623] ? __get_vm_area_node+0x261/0x270 [ 95.192063][ T5623] __vmalloc_node_range_noprof+0x3e0/0x1460 [ 95.198018][ T5623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.204069][ T5623] ? aa_get_newest_label+0xff/0x6f0 [ 95.209346][ T5623] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 95.215739][ T5623] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 95.221335][ T5623] __vmalloc_noprof+0x79/0x90 [ 95.226071][ T5623] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 95.231675][ T5623] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 95.237107][ T5623] ? bpf_prog_alloc+0x28/0x1b0 [ 95.241937][ T5623] bpf_prog_alloc+0x3a/0x1b0 [ 95.246585][ T5623] bpf_prog_load+0x7f7/0x20f0 [ 95.251338][ T5623] ? __pfx_bpf_prog_load+0x10/0x10 [ 95.256505][ T5623] ? __pfx___might_resched+0x10/0x10 [ 95.261893][ T5623] ? __might_fault+0xc6/0x120 [ 95.266621][ T5623] ? bpf_lsm_bpf+0x9/0x10 [ 95.271005][ T5623] ? security_bpf+0x87/0xb0 [ 95.275555][ T5623] __sys_bpf+0x4ee/0x810 [ 95.279832][ T5623] ? __pfx___sys_bpf+0x10/0x10 [ 95.284641][ T5623] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 95.290639][ T5623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 95.297076][ T5623] ? do_syscall_64+0x100/0x230 [ 95.301859][ T5623] __x64_sys_bpf+0x7c/0x90 [ 95.306302][ T5623] do_syscall_64+0xf3/0x230 [ 95.310840][ T5623] ? clear_bhb_loop+0x35/0x90 [ 95.315541][ T5623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.321478][ T5623] RIP: 0033:0x7f043fb75bd9 [ 95.325905][ T5623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.345527][ T5623] RSP: 002b:00007f0440a2e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.353983][ T5623] RAX: ffffffffffffffda RBX: 00007f043fd03f60 RCX: 00007f043fb75bd9 [ 95.361976][ T5623] RDX: 0000000000000090 RSI: 00000000200000c0 RDI: 0000000000000005 [ 95.369964][ T5623] RBP: 00007f0440a2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.377974][ T5623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.385958][ T5623] R13: 000000000000000b R14: 00007f043fd03f60 R15: 00007ffc7f8c3bc8 [ 95.393967][ T5623] [ 95.408308][ T5624] team0: entered promiscuous mode [ 95.413586][ T5624] team_slave_0: entered promiscuous mode [ 95.419813][ T5624] team_slave_1: entered promiscuous mode [ 95.436224][ T5624] dummy0: entered promiscuous mode [ 95.494275][ T5623] Mem-Info: [ 95.497466][ T5623] active_anon:3891 inactive_anon:0 isolated_anon:0 [ 95.497466][ T5623] active_file:1239 inactive_file:38136 isolated_file:0 [ 95.497466][ T5623] unevictable:768 dirty:489 writeback:0 [ 95.497466][ T5623] slab_reclaimable:8555 slab_unreclaimable:94920 [ 95.497466][ T5623] mapped:13158 shmem:1244 pagetables:750 [ 95.497466][ T5623] sec_pagetables:0 bounce:0 [ 95.497466][ T5623] kernel_misc_reclaimable:0 [ 95.497466][ T5623] free:1412308 free_pcp:1145 free_cma:0 [ 95.576950][ T5623] Node 0 active_anon:15464kB inactive_anon:0kB active_file:4956kB inactive_file:152472kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52632kB dirty:1952kB writeback:0kB shmem:3440kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9884kB pagetables:2900kB sec_pagetables:0kB all_unreclaimable? no [ 95.723347][ T5623] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 95.815330][ T5623] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 95.899727][ T5623] lowmem_reserve[]: 0 2571 2571 0 0 [ 95.905079][ T5623] Node 0 DMA32 free:1688448kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:15316kB inactive_anon:0kB active_file:4956kB inactive_file:152164kB unevictable:1536kB writepending:1944kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:2764kB local_pcp:1112kB free_cma:0kB [ 96.012904][ T5623] lowmem_reserve[]: 0 0 0 0 0 [ 96.017739][ T5623] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:8kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 96.099311][ T5623] lowmem_reserve[]: 0 0 0 0 0 [ 96.108581][ T5623] Node 1 Normal free:3944632kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3476kB local_pcp:3476kB free_cma:0kB [ 96.156026][ T5623] lowmem_reserve[]: 0 0 0 0 0 [ 96.161002][ T5623] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.202722][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 96.211338][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 96.239049][ T5623] Node 0 DMA32: 621*4kB (UME) 714*8kB (UME) 453*16kB (UME) 21*32kB (ME) 37*64kB (UME) 12*128kB (UME) 34*256kB (UME) 18*512kB (UM) 17*1024kB (UME) 6*2048kB (UM) 396*4096kB (UM) = 1689652kB [ 96.274871][ T5623] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.292996][ T5660] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 96.309564][ T5623] Node 1 Normal: 4*4kB (UM) 5*8kB (UM) 4*16kB (UM) 8*32kB (UM) 5*64kB (U) 4*128kB (U) 6*256kB (UM) 5*512kB (UM) 1*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3944632kB [ 96.333108][ T5623] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.351869][ T5666] netlink: zone id is out of range [ 96.365497][ T5666] netlink: zone id is out of range [ 96.378086][ T5623] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.402589][ T5666] netlink: zone id is out of range [ 96.459404][ T5623] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 96.469034][ T5623] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 96.512786][ T5666] netlink: set zone limit has 4 unknown bytes [ 96.536107][ T5676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 96.541498][ T5623] 40624 total pagecache pages [ 96.557228][ T5623] 0 pages in swap cache [ 96.567683][ T5676] netlink: 104 bytes leftover after parsing attributes in process `syz.3.178'. [ 96.578238][ T5623] Free swap = 124996kB [ 96.596712][ T5623] Total swap = 124996kB [ 96.605803][ T5623] 2097051 pages RAM [ 96.637642][ T5623] 0 pages HighMem/MovableOnly [ 96.649522][ T5623] 400874 pages reserved [ 96.653785][ T5623] 0 pages cma reserved [ 97.381931][ T5715] pim6reg1: entered promiscuous mode [ 97.391771][ T5715] pim6reg1: entered allmulticast mode [ 97.437862][ T5715] x_tables: unsorted entry at hook 3 [ 97.795863][ T5734] netlink: 'syz.2.206': attribute type 10 has an invalid length. [ 97.830443][ T5734] netlink: 40 bytes leftover after parsing attributes in process `syz.2.206'. [ 98.401667][ T5761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 98.422241][ T5761] tipc: Started in network mode [ 98.449246][ T5761] tipc: Node identity 1, cluster identity 4711 [ 98.469504][ T5761] tipc: Node number set to 1 [ 98.725979][ T5780] netlink: 55 bytes leftover after parsing attributes in process `syz.2.222'. [ 99.125044][ T5799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.231'. [ 99.155424][ T5799] tipc: Started in network mode [ 99.182713][ T5799] tipc: Node identity 1, cluster identity 4711 [ 99.201710][ T5799] tipc: Node number set to 1 [ 99.232761][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.1.229'. [ 99.311093][ T5805] netlink: 'syz.1.229': attribute type 2 has an invalid length. [ 99.421958][ T5813] netlink: set zone limit has 4 unknown bytes [ 100.402690][ T5851] netlink: 'syz.1.249': attribute type 23 has an invalid length. [ 100.728755][ T5873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.256'. [ 100.752187][ T5875] netlink: 64 bytes leftover after parsing attributes in process `syz.0.258'. [ 100.873021][ T5876] macsec1: entered promiscuous mode [ 100.878309][ T5876] macvlan0: entered promiscuous mode [ 101.247170][ T5904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 101.657289][ T5925] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 101.676054][ T5925] netlink: 113592 bytes leftover after parsing attributes in process `syz.4.273'. [ 101.722335][ T5926] netlink: 'syz.4.273': attribute type 1 has an invalid length. [ 101.740109][ T5926] netlink: 113592 bytes leftover after parsing attributes in process `syz.4.273'. [ 101.869795][ T5936] netlink: 'syz.3.276': attribute type 1 has an invalid length. [ 101.878210][ T5934] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 102.156639][ T5945] syzkaller1: entered promiscuous mode [ 102.174270][ T5945] syzkaller1: entered allmulticast mode [ 102.365994][ T5954] netlink: 830 bytes leftover after parsing attributes in process `syz.4.283'. [ 103.020373][ T5987] x_tables: duplicate underflow at hook 1 [ 103.158101][ T5994] netlink: 'syz.3.299': attribute type 30 has an invalid length. [ 103.253833][ T5992] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 103.366745][ T6005] netlink: 276 bytes leftover after parsing attributes in process `syz.0.302'. [ 103.482620][ T6009] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.492478][ T6009] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.505521][ T6009] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.516174][ T6009] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 103.558098][ T6009] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.603315][ T6009] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.648063][ T6009] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.687193][ T6009] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 103.713562][ T6009] geneve3: entered promiscuous mode [ 103.727449][ T6009] geneve3: entered allmulticast mode [ 103.796287][ T6012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 103.943637][ T6024] netlink: 8 bytes leftover after parsing attributes in process `syz.0.310'. [ 104.004863][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 104.456631][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.3.322'. [ 104.738940][ T6054] ip6gretap0: entered promiscuous mode [ 104.748907][ T6054] team0: entered promiscuous mode [ 104.762983][ T6054] team_slave_0: entered promiscuous mode [ 104.777623][ T6054] team_slave_1: entered promiscuous mode [ 104.800377][ T6054] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 104.820227][ T6054] Cannot create hsr debugfs directory [ 104.852769][ T6055] netlink: 'syz.0.326': attribute type 1 has an invalid length. [ 104.889516][ T6055] netlink: 'syz.0.326': attribute type 2 has an invalid length. [ 105.088577][ T6078] raw_sendmsg: syz.1.335 forgot to set AF_INET. Fix it! [ 105.336556][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 105.354771][ T6086] vlan2: entered promiscuous mode [ 105.364766][ T6084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 105.399136][ T6084] syz_tun: entered promiscuous mode [ 105.442405][ T6084] batadv_slave_0: entered promiscuous mode [ 106.253411][ T6136] Driver unsupported XDP return value 0 on prog (id 70) dev N/A, expect packet loss! [ 106.388381][ T6137] gretap0: entered promiscuous mode [ 107.149930][ T6181] __nla_validate_parse: 4 callbacks suppressed [ 107.149952][ T6181] netlink: 68 bytes leftover after parsing attributes in process `syz.3.373'. [ 107.376520][ T6188] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.376'. [ 107.468833][ T6188] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.376'. [ 107.515901][ T6195] netlink: 830 bytes leftover after parsing attributes in process `syz.4.379'. [ 107.878050][ T6220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.380'. [ 107.952771][ T6222] netlink: 9 bytes leftover after parsing attributes in process `syz.1.385'. [ 108.017600][ T6222] gretap0: entered promiscuous mode [ 108.374687][ T6238] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 108.396385][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 108.415539][ T6238] netlink: 5 bytes leftover after parsing attributes in process `syz.1.393'. [ 108.420099][ T6243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 108.438361][ T6238] 0猉功D龌: renamed from gretap0 [ 108.458359][ T6243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 108.475620][ T6238] 0猉功D龌: left promiscuous mode [ 108.481099][ T6238] 0猉功D龌: entered allmulticast mode [ 108.708895][ T6256] IPv6: NLM_F_REPLACE set, but no existing node found! [ 109.165613][ T6272] gretap0: entered promiscuous mode [ 109.487083][ T6296] bridge_slave_1: left allmulticast mode [ 109.529496][ T6296] bridge_slave_1: left promiscuous mode [ 109.552528][ T6296] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.941604][ T6310] netlink: 'syz.2.414': attribute type 3 has an invalid length. [ 109.956508][ T6315] netlink: 'syz.4.417': attribute type 21 has an invalid length. [ 110.189980][ T6331] netlink: zone id is out of range [ 110.431340][ T6343] 0猉功D龌: renamed from gretap0 (while UP) [ 110.467476][ T6343] 0猉功D龌: entered allmulticast mode [ 110.989191][ T6362] IPVS: Error joining to the multicast group [ 111.092605][ T6369] 0猉功D龌: renamed from gretap0 [ 111.121423][ T6369] 0猉功D龌: left promiscuous mode [ 111.137201][ T6369] 0猉功D龌: entered allmulticast mode [ 111.161319][ T6368] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 111.287818][ T6372] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 111.403853][ T6379] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 111.454780][ T6368] netlink: 'syz.2.438': attribute type 4 has an invalid length. [ 111.560499][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.560935][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.885002][ T5141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 111.929186][ T6372] syz.2.438 (6372) used greatest stack depth: 18480 bytes left [ 112.011957][ T5198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.079645][ T5198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.180106][ T6405] vlan2: entered promiscuous mode [ 112.195922][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.330611][ T5146] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.409580][ T6413] netlink: 'syz.3.453': attribute type 4 has an invalid length. [ 112.442329][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.466852][ T6413] __nla_validate_parse: 15 callbacks suppressed [ 112.466874][ T6413] netlink: 17 bytes leftover after parsing attributes in process `syz.3.453'. [ 112.639819][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.720420][ T8] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 112.798051][ T5141] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.160990][ T6445] netlink: 44 bytes leftover after parsing attributes in process `syz.0.466'. [ 113.230732][ T6445] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 113.801538][ T5198] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.892022][ T6478] netlink: 816 bytes leftover after parsing attributes in process `syz.1.475'. [ 114.134137][ T6487] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 114.256847][ T6497] netlink: 'syz.4.480': attribute type 4 has an invalid length. [ 114.403646][ T6502] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 114.420317][ T6502] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.482'. [ 114.435179][ T6502] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 114.566804][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.4.485'. [ 114.568956][ T6509] netlink: zone id is out of range [ 114.595706][ T6508] vlan2: entered allmulticast mode [ 114.604695][ T6509] netlink: zone id is out of range [ 114.616891][ T6508] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 114.652741][ T6509] netlink: set zone limit has 4 unknown bytes [ 114.846634][ T6515] sctp: [Deprecated]: syz.2.489 (pid 6515) Use of int in max_burst socket option deprecated. [ 114.846634][ T6515] Use struct sctp_assoc_value instead [ 115.005088][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.032644][ T6520] netlink: 40 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.109051][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.146495][ T6529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.492'. [ 115.168652][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.4.492'. [ 116.522800][ T6589] netlink: 'syz.2.516': attribute type 4 has an invalid length. [ 116.972624][ T6611] openvswitch: netlink: Message has 4 unknown bytes. [ 116.988028][ T6612] veth0_macvtap: left promiscuous mode [ 117.354346][ T6626] netlink: 'syz.3.530': attribute type 6 has an invalid length. [ 117.381623][ T6622] netlink: 'syz.4.528': attribute type 4 has an invalid length. [ 117.911548][ T6655] __nla_validate_parse: 4 callbacks suppressed [ 117.911570][ T6655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.540'. [ 117.976690][ T6663] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 118.071268][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.543'. [ 118.177393][ T6655] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 118.238873][ T6655] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 118.309761][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 118.332345][ T6661] netlink: 32 bytes leftover after parsing attributes in process `syz.0.542'. [ 118.467299][ T6671] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 119.352069][ T6712] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 119.954805][ T6724] ipvlan2: entered promiscuous mode [ 119.987270][ T6724] ipvlan2: entered allmulticast mode [ 120.001547][ T6724] syz_tun: entered allmulticast mode [ 120.117822][ T6728] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 120.142200][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.564'. [ 120.574828][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 120.718335][ T6753] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.727970][ T6753] batadv1: entered promiscuous mode [ 120.735782][ T6753] team0: Port device batadv1 added [ 120.909040][ T6765] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.577'. [ 120.944314][ T6765] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 121.097053][ T6772] netlink: 'syz.0.582': attribute type 29 has an invalid length. [ 121.139995][ T6772] netlink: 'syz.0.582': attribute type 29 has an invalid length. [ 121.490011][ T6782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.586'. [ 121.601976][ T6790] netlink: set zone limit has 4 unknown bytes [ 122.616766][ T6831] netlink: 'syz.4.605': attribute type 23 has an invalid length. [ 123.588310][ T6864] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 123.709885][ T6870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.617'. [ 123.737914][ T6868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.619'. [ 123.892483][ T6872] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.927835][ T6872] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.972516][ T6872] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 123.999991][ T6872] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 124.035199][ T6872] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.076643][ T6872] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.115114][ T6872] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.139220][ T6872] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 124.153882][ T6872] geneve2: entered promiscuous mode [ 124.160569][ T6872] geneve2: entered allmulticast mode [ 124.253929][ T6874] vlan2: entered promiscuous mode [ 124.581582][ T6904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.632'. [ 125.749087][ T5096] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 125.762026][ T5096] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 125.788684][ T5096] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 125.807200][ T5096] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 125.815626][ T5096] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 125.824235][ T5096] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 125.893231][ T6925] syz_tun: entered promiscuous mode [ 125.931827][ T6925] macvtap0: entered promiscuous mode [ 125.941932][ T6925] macvtap0: entered allmulticast mode [ 125.957612][ T6925] syz_tun: left promiscuous mode [ 126.534185][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 126.560174][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.4.647'. [ 126.574910][ T6956] netlink: 32 bytes leftover after parsing attributes in process `syz.4.647'. [ 126.717518][ T2467] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.753228][ T6960] netlink: 'syz.0.648': attribute type 13 has an invalid length. [ 126.913517][ T2467] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.132216][ T2467] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.317632][ T2467] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.557310][ T6931] chnl_net:caif_netlink_parms(): no params data found [ 127.839842][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.660'. [ 127.889497][ T5096] Bluetooth: hci5: command tx timeout [ 128.177188][ T2467] bridge_slave_1: left allmulticast mode [ 128.208269][ T2467] bridge_slave_1: left promiscuous mode [ 128.226861][ T2467] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.270248][ T2467] bridge_slave_0: left allmulticast mode [ 128.275972][ T2467] bridge_slave_0: left promiscuous mode [ 128.303216][ T2467] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.315823][ T7024] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 128.733785][ T2467] ip6gretap0 (unregistering): left promiscuous mode [ 129.256641][ T2467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.269228][ T2467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.289283][ T2467] bond0 (unregistering): Released all slaves [ 129.391186][ T6931] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.402418][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.419698][ T6931] bridge_slave_0: entered allmulticast mode [ 129.438259][ T6931] bridge_slave_0: entered promiscuous mode [ 129.471376][ T6931] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.495212][ T6931] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.519638][ T6931] bridge_slave_1: entered allmulticast mode [ 129.538180][ T6931] bridge_slave_1: entered promiscuous mode [ 129.569829][ T2467] tipc: Left network mode [ 129.697298][ T7057] netlink: 108 bytes leftover after parsing attributes in process `syz.4.674'. [ 129.959509][ T5096] Bluetooth: hci5: command tx timeout [ 130.012603][ T6931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.064835][ T6931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.382445][ T7069] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 130.393559][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 130.465346][ T7069] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 130.499566][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 130.543903][ T6931] team0: Port device team_slave_0 added [ 130.576428][ T6931] team0: Port device team_slave_1 added [ 130.602858][ T7077] netlink: 'syz.1.680': attribute type 29 has an invalid length. [ 130.625806][ T7077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.680'. [ 130.913765][ T2467] team0: left promiscuous mode [ 130.926825][ T2467] team_slave_0: left promiscuous mode [ 130.949929][ T2467] team_slave_1: left promiscuous mode [ 130.982487][ T2467] hsr_slave_0: left promiscuous mode [ 130.996365][ T2467] hsr_slave_1: left promiscuous mode [ 131.008183][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.026282][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.050058][ T2467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.075637][ T2467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.138545][ T2467] veth1_macvtap: left promiscuous mode [ 131.154122][ T2467] veth0_macvtap: left promiscuous mode [ 131.161102][ T2467] veth1_vlan: left promiscuous mode [ 131.177045][ T2467] veth0_vlan: left promiscuous mode [ 131.893673][ T2467] team0 (unregistering): Port device team_slave_1 removed [ 131.968690][ T2467] team0 (unregistering): Port device team_slave_0 removed [ 132.042376][ T5096] Bluetooth: hci5: command tx timeout [ 132.312572][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.320024][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.348630][ T6931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.389873][ T7106] netlink: 'syz.0.692': attribute type 10 has an invalid length. [ 132.398693][ T6931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.417483][ T6931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.494020][ T6931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.691029][ T6931] hsr_slave_0: entered promiscuous mode [ 132.709962][ T6931] hsr_slave_1: entered promiscuous mode [ 132.735571][ T6931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.756653][ T6931] Cannot create hsr debugfs directory [ 132.762683][ T7122] netlink: 232 bytes leftover after parsing attributes in process `syz.0.698'. [ 133.271850][ T7138] netlink: 144 bytes leftover after parsing attributes in process `syz.4.703'. [ 133.327921][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.339964][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.519856][ T7156] netlink: 'syz.4.708': attribute type 29 has an invalid length. [ 133.566322][ T7156] netlink: 'syz.4.708': attribute type 29 has an invalid length. [ 133.581468][ T7159] nbd: device at index 1 is going down [ 133.638704][ T7166] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 133.662467][ T7166] netlink: 113592 bytes leftover after parsing attributes in process `syz.3.712'. [ 133.681669][ T7166] netlink: 9 bytes leftover after parsing attributes in process `syz.3.712'. [ 133.821514][ T7174] netlink: 20 bytes leftover after parsing attributes in process `syz.3.712'. [ 133.836589][ T7174] netlink: 'syz.3.712': attribute type 2 has an invalid length. [ 134.124006][ T7185] netlink: 76 bytes leftover after parsing attributes in process `syz.1.719'. [ 134.124602][ T5096] Bluetooth: hci5: command tx timeout [ 134.252324][ T7185] 庶: entered promiscuous mode [ 134.545500][ T6931] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.744855][ T6931] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.771594][ T7208] __nla_validate_parse: 1 callbacks suppressed [ 134.771619][ T7208] netlink: 9 bytes leftover after parsing attributes in process `syz.0.726'. [ 134.848482][ T7208] 0猉功D龌: entered promiscuous mode [ 134.862741][ T7208] 0猉功D龌: left allmulticast mode [ 134.882828][ T6931] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.941557][ T6931] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 135.289155][ T6931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.353864][ T6931] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.418578][ T5198] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.425863][ T5198] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.493547][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.500849][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.619831][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.741'. [ 135.719147][ T7242] team0: entered promiscuous mode [ 135.741984][ T7242] team_slave_0: entered promiscuous mode [ 135.758204][ T7242] team_slave_1: entered promiscuous mode [ 135.808088][ T7241] team_slave_0: entered allmulticast mode [ 135.841553][ T7241] team0: Port device team_slave_0 removed [ 135.884610][ T7240] team0: left promiscuous mode [ 135.894531][ T7240] team_slave_1: left promiscuous mode [ 136.459156][ T6931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.612879][ T7265] netlink: 96 bytes leftover after parsing attributes in process `syz.4.748'. [ 136.630866][ T7265] Cannot find set identified by id 65533 to match [ 136.655476][ T6931] veth0_vlan: entered promiscuous mode [ 136.704356][ T6931] veth1_vlan: entered promiscuous mode [ 136.839208][ T6931] veth0_macvtap: entered promiscuous mode [ 136.874591][ T6931] veth1_macvtap: entered promiscuous mode [ 136.920634][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.965834][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.999214][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.020061][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.057322][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.078116][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.109005][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.129384][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.153228][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.186272][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.236000][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.249809][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.269520][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.287710][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.310053][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.336182][ T6931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.360647][ T6931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.378252][ T6931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.427838][ T6931] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.449483][ T6931] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.468617][ T6931] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.487644][ T6931] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.938727][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.966751][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.077150][ T2467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.089972][ T2467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.628234][ T7376] netlink: 'syz.0.775': attribute type 49 has an invalid length. [ 138.642814][ T7376] netlink: 'syz.0.775': attribute type 49 has an invalid length. [ 138.679647][ T7376] netlink: 'syz.0.775': attribute type 2 has an invalid length. [ 138.825731][ T7388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.779'. [ 139.611708][ T7418] netlink: 872 bytes leftover after parsing attributes in process `syz.4.789'. [ 140.201658][ T7445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.799'. [ 140.332055][ T7445] netlink: 'syz.2.799': attribute type 29 has an invalid length. [ 140.368965][ T7445] netlink: 'syz.2.799': attribute type 29 has an invalid length. [ 140.768484][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.778857][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.791272][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 140.809862][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 140.817753][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 140.828213][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.082233][ T7333] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.146335][ T7468] IPv6: sit1: Disabled Multicast RS [ 141.272680][ T7333] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.407517][ T7485] netlink: 20 bytes leftover after parsing attributes in process `syz.0.813'. [ 141.425365][ T7333] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.544333][ T7333] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.998718][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.818'. [ 142.016668][ T7507] vlan2: entered allmulticast mode [ 142.022771][ T7507] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 142.039255][ T7504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.819'. [ 142.053726][ T7506] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.820'. [ 142.150075][ T7460] chnl_net:caif_netlink_parms(): no params data found [ 142.278287][ T7333] bridge_slave_1: left allmulticast mode [ 142.294824][ T7333] bridge_slave_1: left promiscuous mode [ 142.306855][ T7333] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.326782][ T7333] bridge_slave_0: left allmulticast mode [ 142.337967][ T7333] bridge_slave_0: left promiscuous mode [ 142.348032][ T7521] netlink: 'syz.2.822': attribute type 9 has an invalid length. [ 142.356091][ T7333] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.375748][ T7521] netlink: 'syz.2.822': attribute type 7 has an invalid length. [ 142.386628][ T7521] netlink: 'syz.2.822': attribute type 8 has an invalid length. [ 142.918631][ T7333] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.928434][ T5096] Bluetooth: hci2: command tx timeout [ 142.954226][ T7333] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.977430][ T7333] bond0 (unregistering): Released all slaves [ 143.204095][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.827'. [ 143.213442][ T7333] tipc: Left network mode [ 143.495951][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.504769][ T7460] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.512419][ T7460] bridge_slave_0: entered allmulticast mode [ 143.533114][ T7460] bridge_slave_0: entered promiscuous mode [ 143.550779][ T7460] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.558001][ T7460] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.599893][ T7460] bridge_slave_1: entered allmulticast mode [ 143.607552][ T7460] bridge_slave_1: entered promiscuous mode [ 143.646655][ T7550] sctp: [Deprecated]: syz.4.832 (pid 7550) Use of int in max_burst socket option deprecated. [ 143.646655][ T7550] Use struct sctp_assoc_value instead [ 143.691710][ T7530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.826'. [ 143.850238][ T7460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.913352][ T7555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.074081][ T7557] ip6gretap0: entered promiscuous mode [ 144.104629][ T7557] bridge0: entered promiscuous mode [ 144.137980][ T7460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.256509][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.838'. [ 144.434212][ T7568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 144.480518][ T7333] hsr_slave_0: left promiscuous mode [ 144.515652][ T7333] hsr_slave_1: left promiscuous mode [ 144.595093][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.605123][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.631593][ T7333] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.646030][ T7333] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.690555][ T7333] veth1_macvtap: left promiscuous mode [ 144.703768][ T7333] veth1_vlan: left promiscuous mode [ 144.717679][ T7333] veth0_vlan: left promiscuous mode [ 145.001710][ T5096] Bluetooth: hci2: command tx timeout [ 145.346828][ T7333] team0 (unregistering): Port device team_slave_1 removed [ 145.398923][ T7333] team0 (unregistering): Port device team_slave_0 removed [ 145.820221][ T7460] team0: Port device team_slave_0 added [ 145.893376][ T7460] team0: Port device team_slave_1 added [ 145.977843][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.995809][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.064955][ T7460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.086657][ T7460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.104494][ T7460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.148974][ T7460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.355910][ T7460] hsr_slave_0: entered promiscuous mode [ 146.388323][ T7460] hsr_slave_1: entered promiscuous mode [ 146.410967][ T7460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.433116][ T7460] Cannot create hsr debugfs directory [ 146.620805][ T7603] netlink: 52 bytes leftover after parsing attributes in process `syz.1.852'. [ 146.656784][ T7608] netlink: zone id is out of range [ 146.665641][ T7608] netlink: zone id is out of range [ 146.671065][ T7608] netlink: zone id is out of range [ 146.696749][ T7608] netlink: set zone limit has 4 unknown bytes [ 146.794125][ T7611] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.979550][ T7619] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 147.006572][ T7615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.856'. [ 147.009990][ T7619] netlink: 'syz.0.858': attribute type 7 has an invalid length. [ 147.040714][ T7619] netlink: 'syz.0.858': attribute type 8 has an invalid length. [ 147.048427][ T7619] netlink: 224 bytes leftover after parsing attributes in process `syz.0.858'. [ 147.086431][ T5096] Bluetooth: hci2: command tx timeout [ 147.488760][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.861'. [ 147.889181][ T7628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.859'. [ 148.250573][ T7460] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.278658][ T7460] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.332223][ T7460] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.387185][ T7460] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.741804][ T7460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.769188][ T7460] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.810351][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.817568][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.911979][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.919269][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.987888][ T7675] Bluetooth: MGMT ver 1.22 [ 148.987914][ T7674] x_tables: duplicate underflow at hook 2 [ 149.096247][ T7460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.159866][ T5096] Bluetooth: hci2: command tx timeout [ 149.751983][ T7707] netlink: 4 bytes leftover after parsing attributes in process `syz.4.886'. [ 149.777939][ T7711] netlink: 188 bytes leftover after parsing attributes in process `syz.2.888'. [ 149.799020][ T7707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.886'. [ 149.906510][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.0.875'. [ 149.963214][ T7460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.280825][ T7460] veth0_vlan: entered promiscuous mode [ 150.354709][ T7460] veth1_vlan: entered promiscuous mode [ 150.610273][ T7460] veth0_macvtap: entered promiscuous mode [ 150.697643][ T7460] veth1_macvtap: entered promiscuous mode [ 150.804470][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.816800][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.832369][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.857419][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.871917][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.886186][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.897341][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.916397][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.933233][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.941258][ T7746] netlink: 'syz.1.899': attribute type 10 has an invalid length. [ 150.949107][ T7746] netlink: 40 bytes leftover after parsing attributes in process `syz.1.899'. [ 151.032423][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.046050][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.067301][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.089999][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.100141][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.119561][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.130840][ T7460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.148532][ T7460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.161860][ T7460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.310964][ T7460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.332689][ T7460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.366666][ T7460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.378847][ T7767] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 151.400515][ T7460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.856459][ T5902] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.874494][ T7780] netlink: 20 bytes leftover after parsing attributes in process `syz.1.910'. [ 151.880934][ T5902] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.910387][ T7758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 151.958698][ T7784] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 151.978957][ T7329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.020123][ T7329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.206246][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.797'. [ 152.530130][ T7806] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 152.567380][ T7807] netlink: 52 bytes leftover after parsing attributes in process `syz.0.919'. [ 152.646476][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.4.920'. [ 152.973546][ T7822] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.924'. [ 152.990169][ T7822] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 153.357061][ T7834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.926'. [ 153.803699][ T7832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.925'. [ 153.918645][ T7850] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 153.965580][ T7848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 154.415391][ T7868] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 154.470037][ T7868] netlink: 9352 bytes leftover after parsing attributes in process `syz.4.938'. [ 154.486716][ T7868] netlink: 'syz.4.938': attribute type 1 has an invalid length. [ 154.496588][ T7868] netlink: 'syz.4.938': attribute type 2 has an invalid length. [ 154.719618][ T7880] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 155.043998][ T7891] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 155.071469][ T7890] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 155.202292][ T7893] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 155.561129][ T7918] netlink: 'syz.3.951': attribute type 1 has an invalid length. [ 156.723112][ T7966] IPVS: persistence engine module ip_vs_pe_X not found [ 156.969918][ T7982] __nla_validate_parse: 5 callbacks suppressed [ 156.969944][ T7982] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.973'. [ 157.119762][ T2476] ================================================================== [ 157.127909][ T2476] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 157.136027][ T2476] Read of size 8 at addr ffff88802abea8b8 by task kworker/u8:8/2476 [ 157.144045][ T2476] [ 157.146431][ T2476] CPU: 0 PID: 2476 Comm: kworker/u8:8 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 157.156822][ T2476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.166891][ T2476] Workqueue: l2tp l2tp_tunnel_del_work [ 157.172410][ T2476] Call Trace: [ 157.175697][ T2476] [ 157.178634][ T2476] dump_stack_lvl+0x241/0x360 [ 157.183332][ T2476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.188545][ T2476] ? __pfx__printk+0x10/0x10 [ 157.193146][ T2476] ? _printk+0xd5/0x120 [ 157.197310][ T2476] ? __virt_addr_valid+0x183/0x520 [ 157.202441][ T2476] ? __virt_addr_valid+0x183/0x520 [ 157.207571][ T2476] print_report+0x169/0x550 [ 157.212184][ T2476] ? __virt_addr_valid+0x183/0x520 [ 157.217323][ T2476] ? __virt_addr_valid+0x183/0x520 [ 157.222457][ T2476] ? __virt_addr_valid+0x44e/0x520 [ 157.227620][ T2476] ? __phys_addr+0xba/0x170 [ 157.232141][ T2476] ? l2tp_tunnel_del_work+0xe5/0x330 [ 157.237439][ T2476] kasan_report+0x143/0x180 [ 157.241959][ T2476] ? l2tp_tunnel_del_work+0xe5/0x330 [ 157.247258][ T2476] l2tp_tunnel_del_work+0xe5/0x330 [ 157.252487][ T2476] ? process_scheduled_works+0x945/0x1830 [ 157.258236][ T2476] process_scheduled_works+0xa2c/0x1830 [ 157.263841][ T2476] ? __pfx_process_scheduled_works+0x10/0x10 [ 157.269833][ T2476] ? assign_work+0x364/0x3d0 [ 157.274442][ T2476] worker_thread+0x86d/0xd50 [ 157.279047][ T2476] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 157.284988][ T2476] ? __kthread_parkme+0x169/0x1d0 [ 157.290062][ T2476] ? __pfx_worker_thread+0x10/0x10 [ 157.295401][ T2476] kthread+0x2f0/0x390 [ 157.299487][ T2476] ? __pfx_worker_thread+0x10/0x10 [ 157.304604][ T2476] ? __pfx_kthread+0x10/0x10 [ 157.309219][ T2476] ret_from_fork+0x4b/0x80 [ 157.313675][ T2476] ? __pfx_kthread+0x10/0x10 [ 157.318310][ T2476] ret_from_fork_asm+0x1a/0x30 [ 157.323132][ T2476] [ 157.326241][ T2476] [ 157.328562][ T2476] Allocated by task 7986: [ 157.332918][ T2476] kasan_save_track+0x3f/0x80 [ 157.337608][ T2476] __kasan_kmalloc+0x98/0xb0 [ 157.342210][ T2476] __kmalloc_noprof+0x1f9/0x400 [ 157.347070][ T2476] l2tp_session_create+0x3b/0xc20 [ 157.352102][ T2476] pppol2tp_connect+0xca3/0x17a0 [ 157.357070][ T2476] __sys_connect+0x2df/0x310 [ 157.361668][ T2476] __x64_sys_connect+0x7a/0x90 [ 157.366441][ T2476] do_syscall_64+0xf3/0x230 [ 157.370974][ T2476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.376883][ T2476] [ 157.379205][ T2476] Freed by task 7992: [ 157.383185][ T2476] kasan_save_track+0x3f/0x80 [ 157.387872][ T2476] kasan_save_free_info+0x40/0x50 [ 157.392913][ T2476] poison_slab_object+0xe0/0x150 [ 157.397866][ T2476] __kasan_slab_free+0x37/0x60 [ 157.402637][ T2476] kfree+0x149/0x360 [ 157.406541][ T2476] __sk_destruct+0x58/0x5f0 [ 157.411154][ T2476] rcu_core+0xafd/0x1830 [ 157.415403][ T2476] handle_softirqs+0x2c4/0x970 [ 157.420182][ T2476] do_softirq+0x11b/0x1e0 [ 157.424524][ T2476] __local_bh_enable_ip+0x1bb/0x200 [ 157.429742][ T2476] __dev_queue_xmit+0x1763/0x3e90 [ 157.434901][ T2476] __netlink_deliver_tap+0x54d/0x7c0 [ 157.440308][ T2476] netlink_deliver_tap+0x19d/0x1b0 [ 157.445439][ T2476] netlink_unicast+0x7be/0x990 [ 157.450216][ T2476] netlink_sendmsg+0x8e4/0xcb0 [ 157.454989][ T2476] __sock_sendmsg+0x221/0x270 [ 157.459673][ T2476] ____sys_sendmsg+0x525/0x7d0 [ 157.464448][ T2476] __sys_sendmsg+0x2b0/0x3a0 [ 157.469063][ T2476] do_syscall_64+0xf3/0x230 [ 157.473573][ T2476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.479504][ T2476] [ 157.481840][ T2476] Last potentially related work creation: [ 157.487552][ T2476] kasan_save_stack+0x3f/0x60 [ 157.492242][ T2476] __kasan_record_aux_stack+0xac/0xc0 [ 157.497626][ T2476] call_rcu+0x167/0xa70 [ 157.501790][ T2476] pppol2tp_release+0x24b/0x350 [ 157.506648][ T2476] sock_close+0xbc/0x240 [ 157.510894][ T2476] __fput+0x406/0x8b0 [ 157.514913][ T2476] task_work_run+0x24f/0x310 [ 157.519544][ T2476] syscall_exit_to_user_mode+0x168/0x370 [ 157.525196][ T2476] do_syscall_64+0x100/0x230 [ 157.529797][ T2476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.535716][ T2476] [ 157.538053][ T2476] The buggy address belongs to the object at ffff88802abea800 [ 157.538053][ T2476] which belongs to the cache kmalloc-1k of size 1024 [ 157.552118][ T2476] The buggy address is located 184 bytes inside of [ 157.552118][ T2476] freed 1024-byte region [ffff88802abea800, ffff88802abeac00) [ 157.566033][ T2476] [ 157.568362][ T2476] The buggy address belongs to the physical page: [ 157.574795][ T2476] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802abea000 pfn:0x2abe8 [ 157.584869][ T2476] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 157.593372][ T2476] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 157.601886][ T2476] page_type: 0xffffefff(slab) [ 157.606567][ T2476] raw: 00fff00000000240 ffff888015041dc0 ffffea0001e0e610 ffffea0001f37e10 [ 157.615158][ T2476] raw: ffff88802abea000 000000000010000d 00000001ffffefff 0000000000000000 [ 157.623764][ T2476] head: 00fff00000000240 ffff888015041dc0 ffffea0001e0e610 ffffea0001f37e10 [ 157.632461][ T2476] head: ffff88802abea000 000000000010000d 00000001ffffefff 0000000000000000 [ 157.641157][ T2476] head: 00fff00000000003 ffffea0000aafa01 ffffffffffffffff 0000000000000000 [ 157.649868][ T2476] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 157.658538][ T2476] page dumped because: kasan: bad access detected [ 157.664963][ T2476] page_owner tracks the page as allocated [ 157.670677][ T2476] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5143, tgid 5143 (kworker/1:6), ts 80730511280, free_ts 80632024495 [ 157.689877][ T2476] post_alloc_hook+0x1f3/0x230 [ 157.694682][ T2476] get_page_from_freelist+0x2e4c/0x2f10 [ 157.700350][ T2476] __alloc_pages_noprof+0x256/0x6c0 [ 157.705560][ T2476] alloc_slab_page+0x5f/0x120 [ 157.710244][ T2476] allocate_slab+0x5a/0x2f0 [ 157.714755][ T2476] ___slab_alloc+0xcd1/0x14b0 [ 157.719449][ T2476] __slab_alloc+0x58/0xa0 [ 157.723798][ T2476] __kmalloc_noprof+0x257/0x400 [ 157.728660][ T2476] ___neigh_create+0x691/0x2470 [ 157.733613][ T2476] ip6_finish_output2+0x1631/0x1680 [ 157.738823][ T2476] ip6_finish_output+0x41e/0x810 [ 157.743777][ T2476] NF_HOOK+0x9e/0x430 [ 157.747771][ T2476] mld_sendpack+0x843/0xdb0 [ 157.752289][ T2476] mld_ifc_work+0x7d6/0xd90 [ 157.756823][ T2476] process_scheduled_works+0xa2c/0x1830 [ 157.762377][ T2476] worker_thread+0x86d/0xd50 [ 157.766982][ T2476] page last free pid 5107 tgid 5107 stack trace: [ 157.773567][ T2476] free_unref_page+0xd22/0xea0 [ 157.778366][ T2476] __put_partials+0xeb/0x130 [ 157.782980][ T2476] put_cpu_partial+0x17c/0x250 [ 157.787777][ T2476] __slab_free+0x2ea/0x3d0 [ 157.792200][ T2476] qlist_free_all+0x9e/0x140 [ 157.796816][ T2476] kasan_quarantine_reduce+0x14f/0x170 [ 157.802299][ T2476] __kasan_slab_alloc+0x23/0x80 [ 157.807168][ T2476] kmalloc_trace_noprof+0x132/0x2c0 [ 157.812371][ T2476] ____ip_mc_inc_group+0x31d/0xbf0 [ 157.817512][ T2476] ip_mc_up+0x124/0x300 [ 157.821676][ T2476] inetdev_event+0x1025/0x15c0 [ 157.826453][ T2476] notifier_call_chain+0x19f/0x3e0 [ 157.831570][ T2476] __dev_notify_flags+0x207/0x400 [ 157.836606][ T2476] dev_change_flags+0xf0/0x1a0 [ 157.841382][ T2476] do_setlink+0xccd/0x41f0 [ 157.845804][ T2476] rtnl_newlink+0x180d/0x20a0 [ 157.850491][ T2476] [ 157.852817][ T2476] Memory state around the buggy address: [ 157.858530][ T2476] ffff88802abea780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 157.866604][ T2476] ffff88802abea800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.874668][ T2476] >ffff88802abea880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.882817][ T2476] ^ [ 157.888711][ T2476] ffff88802abea900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.896779][ T2476] ffff88802abea980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 157.904838][ T2476] ================================================================== [ 157.912981][ T2476] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 157.920208][ T2476] CPU: 0 PID: 2476 Comm: kworker/u8:8 Not tainted 6.10.0-rc5-syzkaller-01200-gcda91d5b911a #0 [ 157.930480][ T2476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 157.940572][ T2476] Workqueue: l2tp l2tp_tunnel_del_work [ 157.946082][ T2476] Call Trace: [ 157.949397][ T2476] [ 157.952356][ T2476] dump_stack_lvl+0x241/0x360 [ 157.957161][ T2476] ? __pfx_dump_stack_lvl+0x10/0x10 [ 157.962413][ T2476] ? __pfx__printk+0x10/0x10 [ 157.967045][ T2476] ? vscnprintf+0x5d/0x90 [ 157.971457][ T2476] panic+0x349/0x860 [ 157.975383][ T2476] ? check_panic_on_warn+0x21/0xb0 [ 157.980534][ T2476] ? __pfx_panic+0x10/0x10 [ 157.984977][ T2476] ? mark_lock+0x9a/0x350 [ 157.989330][ T2476] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 157.995251][ T2476] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.001160][ T2476] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.007519][ T2476] ? print_report+0x502/0x550 [ 158.012214][ T2476] check_panic_on_warn+0x86/0xb0 [ 158.017164][ T2476] ? l2tp_tunnel_del_work+0xe5/0x330 [ 158.022463][ T2476] end_report+0x77/0x160 [ 158.026721][ T2476] kasan_report+0x154/0x180 [ 158.031249][ T2476] ? l2tp_tunnel_del_work+0xe5/0x330 [ 158.036548][ T2476] l2tp_tunnel_del_work+0xe5/0x330 [ 158.041677][ T2476] ? process_scheduled_works+0x945/0x1830 [ 158.047403][ T2476] process_scheduled_works+0xa2c/0x1830 [ 158.052967][ T2476] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.059044][ T2476] ? assign_work+0x364/0x3d0 [ 158.063640][ T2476] worker_thread+0x86d/0xd50 [ 158.068242][ T2476] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.074154][ T2476] ? __kthread_parkme+0x169/0x1d0 [ 158.079191][ T2476] ? __pfx_worker_thread+0x10/0x10 [ 158.084327][ T2476] kthread+0x2f0/0x390 [ 158.088435][ T2476] ? __pfx_worker_thread+0x10/0x10 [ 158.093573][ T2476] ? __pfx_kthread+0x10/0x10 [ 158.098186][ T2476] ret_from_fork+0x4b/0x80 [ 158.102705][ T2476] ? __pfx_kthread+0x10/0x10 [ 158.107306][ T2476] ret_from_fork_asm+0x1a/0x30 [ 158.112102][ T2476] [ 158.115405][ T2476] Kernel Offset: disabled [ 158.119739][ T2476] Rebooting in 86400 seconds..