last executing test programs: 1.63821896s ago: executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.636594376s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) 1.632373673s ago: executing program 3: openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000400)=0x9, 0x75) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000005142106000000000000000008000100000000000800030000000000f50000505f9dc284368dd59e3515914a8697e0c1bc8271ceae582fc6de"], 0x20}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0500080000000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='`\'\x00\x00', @ANYRES16=r2, @ANYBLOB="00042abd7000fddbdf257c0000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000000000a000600ffffffffffff00000a00060008021100000000000a00060008021100000100000a000600ffffffffffff0000"], 0x68}, 0x1, 0x0, 0x0, 0x24040004}, 0x40801) mmap(&(0x7f0000219000/0x3000)=nil, 0x3000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r4, 0x0, r5, 0x0, 0x10500, 0x0) 1.632169865s ago: executing program 4: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000080)=0x8) 1.632012989s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) 1.630955064s ago: executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000480)={0x1f, @none}, 0x8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) listen(r1, 0x0) listen(r0, 0x0) 1.630734863s ago: executing program 2: r0 = socket(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r3, 0xffffffcf, &(0x7f00000008c0)}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x10012, r1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) 1.587850921s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000019c0)=ANY=[], 0x2f0}}, 0x0) recvmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x2000, &(0x7f0000000540)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0xa, 0x0, 0xf0ffffffff}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000005f40)={0x0, 0x0, &(0x7f0000005f00)={&(0x7f0000003900)={0x750, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@private0}, @nested={0x725, 0x0, 0x0, 0x1, [@generic="f65f692481dd5398c804d8147f1301477597d0a6fb312127f6dfff6351bbbf731dacb3205738de67dadf5cea8ee618ded94b85186f824025460675c6198035b72dd41b92acf5bc23c61152cd00dc3a3507f7cdc201db13e8dff1acb300ab7a616d41afcd919843f70c5294bae1ecbe3a03c75b346d61aa8d0523811854b734d38d8df2eef58e9c97d5", @typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x690, 0x0, 0x0, 0x0, @binary="71374791a653cfd1b5c9a52c64c2655dd8fbe0bb7f41cd430bee8e7a6e1ffa0e45eeb1ad96e6c009c382dd3761dec82957b51749762458048302d95ce1a18da3e9debd9c52022f14b362b3fc33df54f82ecf4ef687db401a79e468c5a752a3a11b81511d1c0a827782e60e1a462870e43815ea141b99e870a1ccfb01c853b7226f818fe2c84bd0a2fd37ba11a73da6c17bc87eccd27134f281074bc7f62dcdf7261ab8a91e92599143887dd3f06815c5425c5af20ccd1ab4c1a3ba9c710049e21038c0329b38e154bb1fc301ede0ce54f3d181b142c8c2c3504a5ccd81b3042f8e41874bda52d449079347094a9499cd9021e78475fc6e9cecb2935d52e0d0e53932de0ac62695daa5fb365c0fa3d4a3d269cc7c2a58794bd85a6c55d9a969eaf03225edae9b11e4a87e10275ffc3625c9f3c92213809f1261f8f1977fb374da6197fb28bd6f439757c4fa67329684676e325c823b8be791abeee8a30caaeae92ed8c191117136f19049be9e83f2be76b2084c28c5620aab1c6e158e68dec8ea0379731bc9ca4f07abaf2aed3135871a48dfa2150b4dfaa24965352f00be66b89df94f15d652551016dfcaa833a953efdf1fb6e5d7fc4c3ac74a4f92428e2b93dfaf7cc2ba557907b05f1a539420531ebed2a9d225d55b39b2e2371a8fd0824c4ea7346fa50e03c39951270a65c1ab4bcba5b324e748d04c740e84d2e4dacffe5bc02cda8a41de20aad423e92cd383c7f69e3c7ea923d4610aec072a6d2a93dec9503d339461a39f268c86682534aa1d804d17ea255fcdc703abeae212b8d09446df8b7280840b78484ab7a2a01466c75fe8cba3853111916e4ce9b70ae916f69fb5c302d50b5d9c5b501a4d657207c2e40e9340d2dfb541df1ec42dbe7e00036464b5e30e866cce2df9a5766c3008209f1bc3e94021ced30a840c0c8ebed971f8057bf5173b61ad04fd61690f55b79487ebefd6f0166ccff47fa572fbd74a6e71303dd3ef5a74ce21d66496bbb27364a9c9c4975ba3c51bd4ab60e2a74c42c2a04eb4711df57858716cf4de573691fd14cc7407e0da0185cae4181d3733b9d266834ed1b740d914d5f2e2743af99f125bb5b338a8a5f69fc3657195e975b69400b7d1d7b78a778f81ceedf40a3b7e87af4a027ffb5625f4ea8359081b2a63395f0898f23dfaa9d45b4ab43577ab8660b62e63006fef21f82bdca70a8271fa9ffa3df391c91b0cb68da4a8f85bdf8de95f6c32ee5b4f5635f7c8a5f3f7cf5cf8f40afb42dbe4c35dc0ef45232af5a3caf72d86c863ad98cdc61e902529e10a69b79b44805883b8269704eb3fa2132647a35588b781ffcd0c9beda06e13f93fe66d497d00482707fd19b31d2964b94dfd76be580235fa05903c3764cc74849c77dd1ce58d62aaab70cbfe9892182e668ba24364c0bf1897c2bea79cf59dbdee2ef663e24a5a36ea1765958d4bc68b2398f11c6926ce037ba15e24852403668d7ec2d7776e8d21aca6ffddb905b53c937566a98af6ad12c42972b8e87dc48c87cd2fe4b9a78eff1abe45118dbfc9c7752fde132c803a0d461ee3df1d990f47a9e121e309ee414d0fcccc4ec5d3de0539f13d36bb9cb49e7d16a394ce1522efbe56399d9fc64fffef7cc27e30ca28a2eddd460cf421a2a8acc709aad257dcfa8aeaa982a0074d6f26e1177ec031398fa96a52823fcab26915267280bcf628b909c5fd66585ec3df9c295cb53b06e11bbc23f401894fdffd69e61bdde0dca765bdb1622ca16788a2c8338ae2add1fd7da43c92a10625ae317db5f5d70b2750f19f5f901d387cfb20c69cc01f10ac4a5452761ae63ad360c706de960a07882210f994c92eef598143d29d77c3bb40d676ca3648866fd311533d815260c06151f8ff34c41a1ba8ec256b3696679740b4568a9c9aa3eb9a829084e4a25d2ec5f38299dbb32ce5e3c114211b10c5545892af590596d41bb19338edd2313ee4ae48949a39a80e0e73272c2efee49089d951a1776ea03b1d9b1d75f4d9ff1c864bf58bdb4ce5defe311c4b7d0712bedf4902625b41190d820ff66e6751bdbf8943a3332fa3a7451409e5be20a2cb1b7918d6b5a368323055b3ad191493f102a932d63e14b12ef0436534a35b29d661010bd14b2fb4dfe8f4041421708f521b07d7b308e65bd7d6215ea8675715bae017ae3a773942b418d5ba7cc92c618a618e24a5893bc0bf97e782fa67c41f91b4346b42700e70522131255386d30fd4dc8f30c473eda8532d13d17dbcc40980ebf2d88fb883a17728dbdac184e829de325c35fea28581ff7ced45d16ca7e97930a9f550161b8af81c53b3e73cb6804095e958be1f2e1bdc0e42a9d340dfecb0eb449a"}]}]}, 0x750}}, 0x0) 1.528468093s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.378655558s ago: executing program 0: sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000140)=@abs, 0x6e, 0x0}}], 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000140)=""/192, 0xc0, 0x0, &(0x7f0000000200)=""/146, 0x92}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722701800000", 0x0, 0x0, 0x0, 0x200000a1, 0x0, &(0x7f0000000080)="fd97a6633528276901d509de9400a14fb5913c6c253c7551be40c62b0d1da063ba", 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x10d, 0xd, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_PORT={0x6}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x6d05}]}}}]}, 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33}, 0x90) r4 = accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000480)={'wg0\x00', 0x0}) connect$packet(r4, &(0x7f00000004c0)={0x11, 0x15, r5, 0x1, 0x7, 0x6, @broadcast}, 0x14) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00'}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x37, 0x0, 0x1f03, @prog_fd}, 0x20) 1.359366579s ago: executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000200"], 0x3c}}, 0x0) 1.237065824s ago: executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup, 0xffffffffffffffff, 0x24}, 0xa) 1.202005695s ago: executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r0]}, 0x90) 1.140392376s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 1.07428927s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x2c, 0x2, {{0x0, 0x0, 0x0, 0xfffffffd}, [@TCA_NETEM_CORR={0x10}]}}}]}, 0x5c}}, 0x0) 1.008050456s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) 982.33505ms ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0x80047c7, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 871.142079ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) 830.51817ms ago: executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x4}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 768.684593ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_AF_SPEC={0x4}]}, 0x3c}}, 0x0) 721.461618ms ago: executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28712829bdda0a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) 621.875175ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0xe343, 0xffff}) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) 589.911601ms ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18}]}}]}, 0x48}}, 0x0) 481.505516ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002080)=ANY=[@ANYBLOB="3c00000013000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c001a80110002800c00018008001a"], 0x3c}}, 0x0) 373.938315ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 311.215663ms ago: executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x36, 0x20000000, 0x4) 216.619577ms ago: executing program 4: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r0, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) write$cgroup_int(r1, &(0x7f0000000100)=0x1, 0x12) 113.474109ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001240)=@generic={&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) 109.11909ms ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x1aa, 0x4) sendto$unix(r0, &(0x7f0000000840)="a4a8", 0x2, 0x4081, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x40002042, 0x0, 0xfff6) 0s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000800)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [{@pci={{0x8}, {0x11}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0x5c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x1c, 0x22, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="b7"]}, 0x1c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. 2024/06/21 13:08:24 fuzzer started 2024/06/21 13:08:24 dialing manager at 10.128.0.169:30018 [ 74.333826][ T5093] cgroup: Unknown subsys name 'net' [ 74.503548][ T5093] cgroup: Unknown subsys name 'rlimit' 2024/06/21 13:08:26 starting 5 executor processes [ 76.002801][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.827057][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.835637][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.844795][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.853007][ T5120] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.861462][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.869894][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.874902][ T5120] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.889601][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.890691][ T5120] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.904126][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.915799][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.927691][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.989558][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.998154][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.006485][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.014972][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.022982][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.030474][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.082068][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.090456][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.098869][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.108929][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.117153][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.124715][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.142370][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.155333][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.164072][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.174670][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.183138][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.192889][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 77.611822][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 77.679273][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 77.870779][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.879410][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.886965][ T5114] bridge_slave_0: entered allmulticast mode [ 77.898460][ T5114] bridge_slave_0: entered promiscuous mode [ 77.915672][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 77.963159][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.970370][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.978683][ T5114] bridge_slave_1: entered allmulticast mode [ 77.985883][ T5114] bridge_slave_1: entered promiscuous mode [ 78.085024][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.094322][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.102235][ T5115] bridge_slave_0: entered allmulticast mode [ 78.109287][ T5115] bridge_slave_0: entered promiscuous mode [ 78.119160][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.126810][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.134356][ T5115] bridge_slave_1: entered allmulticast mode [ 78.142391][ T5115] bridge_slave_1: entered promiscuous mode [ 78.223563][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.239972][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.263738][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.277683][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.287179][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 78.391203][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.398772][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.406307][ T5122] bridge_slave_0: entered allmulticast mode [ 78.414014][ T5122] bridge_slave_0: entered promiscuous mode [ 78.469455][ T5114] team0: Port device team_slave_0 added [ 78.476358][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.484300][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.491498][ T5122] bridge_slave_1: entered allmulticast mode [ 78.498803][ T5122] bridge_slave_1: entered promiscuous mode [ 78.524942][ T5115] team0: Port device team_slave_0 added [ 78.541619][ T5114] team0: Port device team_slave_1 added [ 78.575646][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.592490][ T5115] team0: Port device team_slave_1 added [ 78.655293][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.709597][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.716762][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.746676][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.783209][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.790220][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.818277][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.833541][ T5127] chnl_net:caif_netlink_parms(): no params data found [ 78.852135][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.859138][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.887330][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.912894][ T53] Bluetooth: hci1: command tx timeout [ 78.928994][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.937327][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.946052][ T5125] bridge_slave_0: entered allmulticast mode [ 78.953762][ T5125] bridge_slave_0: entered promiscuous mode [ 78.971759][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.978935][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.009439][ T53] Bluetooth: hci0: command tx timeout [ 79.016016][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.041559][ T5122] team0: Port device team_slave_0 added [ 79.047914][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.055641][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.062951][ T5125] bridge_slave_1: entered allmulticast mode [ 79.069983][ T5125] bridge_slave_1: entered promiscuous mode [ 79.076099][ T53] Bluetooth: hci2: command tx timeout [ 79.124670][ T5122] team0: Port device team_slave_1 added [ 79.149112][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.232563][ T5120] Bluetooth: hci3: command tx timeout [ 79.239105][ T53] Bluetooth: hci4: command tx timeout [ 79.251699][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.273892][ T5114] hsr_slave_0: entered promiscuous mode [ 79.281635][ T5114] hsr_slave_1: entered promiscuous mode [ 79.311605][ T5115] hsr_slave_0: entered promiscuous mode [ 79.324303][ T5115] hsr_slave_1: entered promiscuous mode [ 79.330676][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.340152][ T5115] Cannot create hsr debugfs directory [ 79.365184][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.373232][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.401047][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.464774][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.471761][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.499339][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.529876][ T5125] team0: Port device team_slave_0 added [ 79.605995][ T5125] team0: Port device team_slave_1 added [ 79.642813][ T5127] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.649965][ T5127] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.658747][ T5127] bridge_slave_0: entered allmulticast mode [ 79.671548][ T5127] bridge_slave_0: entered promiscuous mode [ 79.680759][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.688303][ T5127] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.696020][ T5127] bridge_slave_1: entered allmulticast mode [ 79.709361][ T5127] bridge_slave_1: entered promiscuous mode [ 79.748508][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.758089][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.785402][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.859845][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.867069][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.893437][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.995068][ T5127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.009079][ T5122] hsr_slave_0: entered promiscuous mode [ 80.018174][ T5122] hsr_slave_1: entered promiscuous mode [ 80.024524][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.033007][ T5122] Cannot create hsr debugfs directory [ 80.059942][ T5127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.163354][ T5125] hsr_slave_0: entered promiscuous mode [ 80.169861][ T5125] hsr_slave_1: entered promiscuous mode [ 80.176760][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.184878][ T5125] Cannot create hsr debugfs directory [ 80.222549][ T5127] team0: Port device team_slave_0 added [ 80.237578][ T5127] team0: Port device team_slave_1 added [ 80.288559][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.296033][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.322673][ T5127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.371826][ T5127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.379265][ T5127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.405624][ T5127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.529266][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.542818][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.597315][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.613922][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.630722][ T5127] hsr_slave_0: entered promiscuous mode [ 80.638712][ T5127] hsr_slave_1: entered promiscuous mode [ 80.645270][ T5127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.653397][ T5127] Cannot create hsr debugfs directory [ 80.847478][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.898132][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.909735][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.944067][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.993165][ T53] Bluetooth: hci1: command tx timeout [ 81.017300][ T5122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.028572][ T5122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.039837][ T5122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.079852][ T5122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.082149][ T53] Bluetooth: hci0: command tx timeout [ 81.152720][ T53] Bluetooth: hci2: command tx timeout [ 81.204794][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.244510][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.258961][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.271535][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.297048][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.313007][ T53] Bluetooth: hci3: command tx timeout [ 81.313043][ T5120] Bluetooth: hci4: command tx timeout [ 81.387810][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.435604][ T5127] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.453588][ T5127] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.466772][ T5127] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.481575][ T5127] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.495593][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.503040][ T5118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.593304][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.600466][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.696813][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.727299][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.828389][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.838767][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.859104][ T5114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.869955][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.903220][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.910423][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.929263][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.937953][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.971850][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.980004][ T5118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.031761][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.041364][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.086911][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.175696][ T5127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.209673][ T5115] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.232879][ T5115] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.258049][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.311330][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.318520][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.343697][ T5127] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.370373][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.377937][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.418094][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.455570][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.462819][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.503258][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.510449][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.768246][ T5127] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.827024][ T5114] veth0_vlan: entered promiscuous mode [ 82.888588][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.931238][ T5114] veth1_vlan: entered promiscuous mode [ 82.953862][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.072547][ T5120] Bluetooth: hci1: command tx timeout [ 83.136783][ T5114] veth0_macvtap: entered promiscuous mode [ 83.155115][ T5120] Bluetooth: hci0: command tx timeout [ 83.181524][ T5114] veth1_macvtap: entered promiscuous mode [ 83.233412][ T5120] Bluetooth: hci2: command tx timeout [ 83.244525][ T5122] veth0_vlan: entered promiscuous mode [ 83.272517][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.301626][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.331014][ T5122] veth1_vlan: entered promiscuous mode [ 83.355686][ T5127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.369111][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379706][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.389932][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.399931][ T5120] Bluetooth: hci3: command tx timeout [ 83.402053][ T53] Bluetooth: hci4: command tx timeout [ 83.405575][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.456564][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.560904][ T5115] veth0_vlan: entered promiscuous mode [ 83.599018][ T5127] veth0_vlan: entered promiscuous mode [ 83.610700][ T5115] veth1_vlan: entered promiscuous mode [ 83.634859][ T5122] veth0_macvtap: entered promiscuous mode [ 83.650970][ T5122] veth1_macvtap: entered promiscuous mode [ 83.708732][ T5127] veth1_vlan: entered promiscuous mode [ 83.736420][ T5125] veth0_vlan: entered promiscuous mode [ 83.789633][ T5125] veth1_vlan: entered promiscuous mode [ 83.808648][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.819836][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.833170][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.851671][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.852799][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.868964][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.881197][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.894697][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.940210][ T5122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.950996][ T5122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.964091][ T5122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.973436][ T5122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.008125][ T1260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.027758][ T1260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.031193][ T5115] veth0_macvtap: entered promiscuous mode [ 84.060853][ T5125] veth0_macvtap: entered promiscuous mode [ 84.076601][ T5125] veth1_macvtap: entered promiscuous mode [ 84.088927][ T5115] veth1_macvtap: entered promiscuous mode [ 84.204846][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.237355][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.255092][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.267966][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.283594][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.288103][ T5193] ebt_among: src integrity fail: 300 [ 84.294051][ T5127] veth0_macvtap: entered promiscuous mode [ 84.310691][ T5127] veth1_macvtap: entered promiscuous mode [ 84.359592][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.381105][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.392774][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.403575][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.420918][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.433072][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.453067][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.473192][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.484758][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.495780][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.507154][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.520839][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.551815][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.576514][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.587072][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.599263][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.610462][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.624945][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.637494][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.663660][ T1260] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.671621][ T1260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.674430][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.705219][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.716242][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.730023][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.744483][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.757348][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.767771][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.778336][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.790627][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.799869][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.809059][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818930][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.827873][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.844342][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.854776][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.864538][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.873386][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.911035][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.924615][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.935091][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.946144][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.956061][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.967891][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.977789][ T5127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.988336][ T5127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.001689][ T5127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.058639][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.067568][ T5127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.067615][ T5127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.067648][ T5127] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.067680][ T5127] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.164499][ T53] Bluetooth: hci1: command tx timeout [ 85.190359][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.233658][ T53] Bluetooth: hci0: command tx timeout [ 85.322055][ T53] Bluetooth: hci2: command tx timeout [ 85.393400][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.401253][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.474862][ T53] Bluetooth: hci4: command tx timeout [ 85.474892][ T5120] Bluetooth: hci3: command tx timeout [ 85.558502][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.569384][ T2830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.603508][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.605455][ T2830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.670538][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.685907][ T5211] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 85.704511][ T3587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.722123][ T3587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.772060][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.798044][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.879831][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.904023][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.202355][ T5221] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.301010][ T5221] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 86.646450][ T5234] ebt_among: src integrity fail: 300 [ 86.842110][ T5246] syz-executor.0 uses obsolete (PF_INET,SOCK_PACKET) [ 87.382435][ T5269] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.431210][ T5269] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 87.766728][ T5281] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.802944][ T5281] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.028265][ T36] ================================================================== [ 88.036479][ T36] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 88.044637][ T36] Read of size 8 at addr ffff88802a9708b8 by task kworker/u8:3/36 [ 88.052468][ T36] [ 88.054828][ T36] CPU: 1 PID: 36 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 88.065014][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 2024/06/21 13:08:39 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 88.075093][ T36] Workqueue: l2tp l2tp_tunnel_del_work [ 88.080650][ T36] Call Trace: [ 88.084039][ T36] [ 88.086992][ T36] dump_stack_lvl+0x241/0x360 [ 88.091713][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.096946][ T36] ? __pfx__printk+0x10/0x10 [ 88.101571][ T36] ? _printk+0xd5/0x120 [ 88.105764][ T36] ? __virt_addr_valid+0x183/0x520 [ 88.111029][ T36] ? __virt_addr_valid+0x183/0x520 [ 88.116302][ T36] print_report+0x169/0x550 [ 88.120853][ T36] ? __virt_addr_valid+0x183/0x520 [ 88.126008][ T36] ? __virt_addr_valid+0x183/0x520 [ 88.131167][ T36] ? __virt_addr_valid+0x44e/0x520 [ 88.136325][ T36] ? __phys_addr+0xba/0x170 [ 88.140864][ T36] ? l2tp_tunnel_del_work+0xe5/0x330 [ 88.146187][ T36] kasan_report+0x143/0x180 [ 88.150725][ T36] ? l2tp_tunnel_del_work+0xe5/0x330 [ 88.156064][ T36] l2tp_tunnel_del_work+0xe5/0x330 [ 88.165182][ T36] ? process_scheduled_works+0x945/0x1830 [ 88.171652][ T36] process_scheduled_works+0xa2c/0x1830 [ 88.177253][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.183271][ T36] ? assign_work+0x364/0x3d0 [ 88.187914][ T36] worker_thread+0x86d/0xd70 [ 88.192541][ T36] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.198660][ T36] ? __kthread_parkme+0x169/0x1d0 [ 88.203721][ T36] ? __pfx_worker_thread+0x10/0x10 [ 88.208864][ T36] kthread+0x2f0/0x390 [ 88.212977][ T36] ? __pfx_worker_thread+0x10/0x10 [ 88.218121][ T36] ? __pfx_kthread+0x10/0x10 [ 88.222744][ T36] ret_from_fork+0x4b/0x80 [ 88.227189][ T36] ? __pfx_kthread+0x10/0x10 [ 88.231803][ T36] ret_from_fork_asm+0x1a/0x30 [ 88.236616][ T36] [ 88.239653][ T36] [ 88.241997][ T36] Allocated by task 5286: [ 88.246337][ T36] kasan_save_track+0x3f/0x80 [ 88.251151][ T36] __kasan_kmalloc+0x98/0xb0 [ 88.255774][ T36] __kmalloc_noprof+0x1f9/0x400 [ 88.260651][ T36] l2tp_session_create+0x3b/0xc20 [ 88.265714][ T36] pppol2tp_connect+0xca3/0x17a0 [ 88.270690][ T36] __sys_connect+0x2df/0x310 [ 88.275309][ T36] __x64_sys_connect+0x7a/0x90 [ 88.280119][ T36] do_syscall_64+0xf3/0x230 [ 88.284649][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.290586][ T36] [ 88.292927][ T36] Freed by task 24: [ 88.296749][ T36] kasan_save_track+0x3f/0x80 [ 88.301467][ T36] kasan_save_free_info+0x40/0x50 [ 88.306509][ T36] poison_slab_object+0xe0/0x150 [ 88.311473][ T36] __kasan_slab_free+0x37/0x60 [ 88.316266][ T36] kfree+0x149/0x360 [ 88.320190][ T36] __sk_destruct+0x58/0x5f0 [ 88.324725][ T36] rcu_core+0xafd/0x1830 [ 88.328990][ T36] handle_softirqs+0x2c4/0x970 [ 88.333955][ T36] run_ksoftirqd+0xca/0x130 [ 88.338479][ T36] smpboot_thread_fn+0x544/0xa30 [ 88.343448][ T36] kthread+0x2f0/0x390 [ 88.347559][ T36] ret_from_fork+0x4b/0x80 [ 88.351998][ T36] ret_from_fork_asm+0x1a/0x30 [ 88.356805][ T36] [ 88.359144][ T36] Last potentially related work creation: [ 88.364870][ T36] kasan_save_stack+0x3f/0x60 [ 88.369575][ T36] __kasan_record_aux_stack+0xac/0xc0 [ 88.374971][ T36] call_rcu+0x167/0xa70 [ 88.379335][ T36] pppol2tp_release+0x24b/0x350 [ 88.384225][ T36] sock_close+0xbc/0x240 [ 88.388498][ T36] __fput+0x406/0x8b0 [ 88.392498][ T36] task_work_run+0x24f/0x310 [ 88.397135][ T36] syscall_exit_to_user_mode+0x168/0x370 [ 88.402805][ T36] do_syscall_64+0x100/0x230 [ 88.407688][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.413621][ T36] [ 88.415958][ T36] The buggy address belongs to the object at ffff88802a970800 [ 88.415958][ T36] which belongs to the cache kmalloc-1k of size 1024 [ 88.430565][ T36] The buggy address is located 184 bytes inside of [ 88.430565][ T36] freed 1024-byte region [ffff88802a970800, ffff88802a970c00) [ 88.454144][ T36] [ 88.456579][ T36] The buggy address belongs to the physical page: [ 88.464014][ T36] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a970 [ 88.472911][ T36] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 88.481441][ T36] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 88.489549][ T36] page_type: 0xffffefff(slab) [ 88.494255][ T36] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 88.502869][ T36] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 88.511571][ T36] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 88.520270][ T36] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 88.528966][ T36] head: 00fff00000000003 ffffea0000aa5c01 ffffffffffffffff 0000000000000000 [ 88.537662][ T36] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 88.546374][ T36] page dumped because: kasan: bad access detected [ 88.552823][ T36] page_owner tracks the page as allocated [ 88.558549][ T36] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 22064968875, free_ts 0 [ 88.577762][ T36] post_alloc_hook+0x1f3/0x230 [ 88.582576][ T36] get_page_from_freelist+0x2e43/0x2f00 [ 88.588152][ T36] __alloc_pages_noprof+0x256/0x6c0 [ 88.593374][ T36] alloc_slab_page+0x5f/0x120 [ 88.598359][ T36] allocate_slab+0x5a/0x2f0 [ 88.602887][ T36] ___slab_alloc+0xcd1/0x14b0 [ 88.607591][ T36] __slab_alloc+0x58/0xa0 [ 88.611940][ T36] kmalloc_node_track_caller_noprof+0x281/0x440 [ 88.618213][ T36] kmalloc_reserve+0x111/0x2a0 [ 88.623008][ T36] pskb_expand_head+0x202/0x1390 [ 88.627983][ T36] netlink_trim+0x183/0x220 [ 88.632514][ T36] netlink_broadcast_filtered+0x76/0x1290 [ 88.638268][ T36] genlmsg_multicast_allns+0x24a/0x340 [ 88.643751][ T36] genl_ctrl_event+0x73a/0xc90 [ 88.648543][ T36] genl_register_family+0x147f/0x1910 [ 88.653944][ T36] tipc_netlink_start+0x16/0x50 [ 88.658831][ T36] page_owner free stack trace missing [ 88.664213][ T36] [ 88.666549][ T36] Memory state around the buggy address: [ 88.672724][ T36] ffff88802a970780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 88.688698][ T36] ffff88802a970800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.698813][ T36] >ffff88802a970880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.709028][ T36] ^ [ 88.715846][ T36] ffff88802a970900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.725145][ T36] ffff88802a970980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 88.733227][ T36] ================================================================== [ 88.741417][ T36] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 88.748633][ T36] CPU: 1 PID: 36 Comm: kworker/u8:3 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 88.759163][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.769895][ T36] Workqueue: l2tp l2tp_tunnel_del_work [ 88.778237][ T36] Call Trace: [ 88.784611][ T36] [ 88.787771][ T36] dump_stack_lvl+0x241/0x360 [ 88.793831][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.799075][ T36] ? __pfx__printk+0x10/0x10 [ 88.803700][ T36] ? vscnprintf+0x5d/0x90 [ 88.808157][ T36] panic+0x349/0x860 [ 88.812090][ T36] ? check_panic_on_warn+0x21/0xb0 [ 88.817234][ T36] ? __pfx_panic+0x10/0x10 [ 88.821677][ T36] ? mark_lock+0x9a/0x350 [ 88.826120][ T36] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 88.832046][ T36] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.837994][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 88.844377][ T36] ? print_report+0x502/0x550 [ 88.849100][ T36] check_panic_on_warn+0x86/0xb0 [ 88.854075][ T36] ? l2tp_tunnel_del_work+0xe5/0x330 [ 88.859400][ T36] end_report+0x77/0x160 [ 88.863673][ T36] kasan_report+0x154/0x180 [ 88.868203][ T36] ? l2tp_tunnel_del_work+0xe5/0x330 [ 88.873698][ T36] l2tp_tunnel_del_work+0xe5/0x330 [ 88.878850][ T36] ? process_scheduled_works+0x945/0x1830 [ 88.884594][ T36] process_scheduled_works+0xa2c/0x1830 [ 88.890178][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.896208][ T36] ? assign_work+0x364/0x3d0 [ 88.900828][ T36] worker_thread+0x86d/0xd70 [ 88.905450][ T36] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 88.911392][ T36] ? __kthread_parkme+0x169/0x1d0 [ 88.916464][ T36] ? __pfx_worker_thread+0x10/0x10 [ 88.921608][ T36] kthread+0x2f0/0x390 [ 88.925709][ T36] ? __pfx_worker_thread+0x10/0x10 [ 88.930940][ T36] ? __pfx_kthread+0x10/0x10 [ 88.935556][ T36] ret_from_fork+0x4b/0x80 [ 88.940009][ T36] ? __pfx_kthread+0x10/0x10 [ 88.944636][ T36] ret_from_fork_asm+0x1a/0x30 [ 88.949459][ T36] [ 88.952874][ T36] Kernel Offset: disabled [ 88.957201][ T36] Rebooting in 86400 seconds..