last executing test programs: 6.474941141s ago: executing program 3 (id=966): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r1, 0x80}], 0x1, 0x0, 0x0, 0x0) close(r0) 6.10946153s ago: executing program 3 (id=972): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 5.61217487s ago: executing program 3 (id=985): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x2c}}, 0x0) 5.104031711s ago: executing program 3 (id=995): r0 = socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x4}, 0x6) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x400443c8, 0x20000002) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @private, 0x15, 0x0, 'dh\x00'}, 0x2c) sendto$inet(r0, 0x0, 0x0, 0x24000001, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r3 = socket(0x1000000010, 0x80002, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r4, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@deltfilter={0x34, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x63, 0x63, 0x3, [@restrict={0x9}, @func={0xb, 0x0, 0x0, 0xc, 0x4}, @typedef={0x2, 0x0, 0x0, 0x8, 0x5}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}, @datasec={0xa, 0x2, 0x0, 0xf, 0x3, [{0x5, 0x4, 0x2}, {0x3, 0x7, 0x80000000}], "294d80"}, @func_proto]}, {0x0, [0x0]}}, &(0x7f0000000240)=""/104, 0x7f, 0x68, 0x0, 0xff}, 0x20) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f00000000c0)={@broadcast, @loopback, 0x1, "e5e17132c8351f867c063e6ff9ea56b007f27e4a3a304d96f6cb1ce0f40a7cf7", 0x1000, 0x5, 0x3}, 0x3c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, r2, 0x7, '\x00', 0x0, r6, 0x3, 0x4, 0x80000000, 0x5}, 0x48) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r7, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f00000002c0)=0x4, 0x4) connect$ax25(r7, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) recvmmsg(r7, &(0x7f0000003ec0)=[{{&(0x7f0000000380)=@pppol2tp, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/16, 0x10}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/176, 0xb0}, {&(0x7f0000000580)=""/210, 0xd2}], 0x4, &(0x7f00000006c0)=""/153, 0x99}, 0x4}, {{&(0x7f0000000780)=@phonet, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/215, 0xd7}, {&(0x7f0000000900)=""/172, 0xac}, {&(0x7f00000009c0)=""/71, 0x47}, {&(0x7f0000000a40)=""/246, 0xf6}, {&(0x7f0000000b40)=""/224, 0xe0}, {&(0x7f0000000c40)}], 0x6, &(0x7f0000000d00)=""/207, 0xcf}}, {{&(0x7f0000000e00)=@isdn, 0x80, &(0x7f0000001080)=[{&(0x7f0000000e80)=""/244, 0xf4}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/64, 0x40}, {&(0x7f0000000fc0)=""/96, 0x60}], 0x4, &(0x7f0000001100)=""/166, 0xa6}, 0x1}, {{&(0x7f00000011c0)=@xdp, 0x80, &(0x7f0000002840)=[{&(0x7f0000001240)=""/6, 0x6}, {&(0x7f0000001280)=""/42, 0x2a}, {&(0x7f00000012c0)=""/200, 0xc8}, {&(0x7f00000013c0)=""/116, 0x74}, {&(0x7f0000002580)=""/158, 0x9e}, {&(0x7f0000001440)=""/30, 0x1e}, {&(0x7f0000002640)=""/179, 0xb3}, {&(0x7f0000001480)=""/35, 0x23}, {&(0x7f0000002780)=""/136, 0x88}], 0x9}, 0x3}, {{&(0x7f0000003900)=@un=@abs, 0x80, &(0x7f00000039c0)=[{&(0x7f0000003980)}], 0x1, &(0x7f0000003a00)=""/162, 0xa2}, 0x7f51}, {{&(0x7f0000003ac0)=@xdp, 0x80, &(0x7f0000003cc0)=[{&(0x7f0000003b40)=""/111, 0x6f}, {&(0x7f0000003bc0)=""/241, 0xf1}], 0x2}, 0xffffffff}, {{&(0x7f0000003d00)=@tipc, 0x80, &(0x7f0000003e80)=[{&(0x7f0000003d80)=""/194, 0xc2}], 0x1}, 0x1}], 0x7, 0x40, 0x0) 4.735623685s ago: executing program 3 (id=1006): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001000128008000100767469000400028010001a"], 0x40}}, 0x0) 4.534689354s ago: executing program 3 (id=1009): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DURATION={0x5}, @IEEE802154_ATTR_SCAN_TYPE={0x5}, @IEEE802154_ATTR_CHANNELS={0x8}]}, 0x2c}}, 0x0) 2.295083236s ago: executing program 4 (id=1045): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.045617284s ago: executing program 4 (id=1049): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 1.942688823s ago: executing program 4 (id=1051): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) socket(0x10, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) 1.507562721s ago: executing program 0 (id=1058): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x4, 0x2dc}) 1.456381047s ago: executing program 0 (id=1059): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2718, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 1.420754611s ago: executing program 1 (id=1060): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 1.410111995s ago: executing program 0 (id=1061): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x541b, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x81, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 1.300719518s ago: executing program 0 (id=1062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, @in6={{0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000000)=0x100) 1.249478941s ago: executing program 1 (id=1064): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000200)={@void, @void, @eth={@broadcast, @random="91d6e8bc19e3", @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "39bd06", 0x8, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[@fragment={0x32}]}}}}}}, 0x42) 1.204813663s ago: executing program 4 (id=1065): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x99, &(0x7f0000000580)=""/153}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000005000000850000002a00000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000001c0)=""/173}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='neigh_update\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}, @printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000d80)='neigh_update\x00', r1}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000280)=0x7) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="e00000001b0001000000000000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080098"], 0xe0}}, 0x0) socket$packet(0x11, 0x2, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.freeze\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xff}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a01040000000000000000010000001400048010000180090001006d6173710000000008000b40000000000900010073797a300000000014000000110001"], 0xcc}}, 0x0) 880.456196ms ago: executing program 2 (id=1069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001900)=@base={0x1f, 0x0, 0x7, 0x5, 0x1000, 0xffffffffffffffff, 0xfd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r3, 0x0, 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r3, 0x0, 0x20000000, 0x2}, 0x20) r4 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x30) r5 = syz_open_procfs$namespace(r4, &(0x7f0000001740)='ns/uts\x00') r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x18, 0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000ffffffff000001000018110000", @ANYRES32=r3, @ANYRES32, @ANYRES64=r5, @ANYRES32, @ANYRESDEC, @ANYRESHEX=r1, @ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x10001, 0x87, &(0x7f0000001c40)=""/135, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000001800)={0x2, 0x1, 0x0, 0xb9e3}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00), 0x10, 0x9}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300), 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x2, 0xc, &(0x7f0000000dc0)=@framed={{0x18, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffe00}, {}, {0x4, 0x0, 0x2, 0x3}}]}, &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x3ff, 0x0, r7, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r8, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x12, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(r11, &(0x7f0000000000)='cgroup.kill\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x8, 0x11, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r9}}, {}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0xd}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xe8, &(0x7f0000000200)=""/232, 0x40f00, 0x0, '\x00', r10, 0x36, r11, 0x8, &(0x7f0000000600)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xb, 0x20, 0xfde0}, 0x10, 0x0, r8, 0x5, &(0x7f0000000680)=[r7], &(0x7f00000006c0)=[{0x1, 0x2, 0xf, 0xa}, {0x1, 0x2, 0xe}, {0x1, 0x2, 0xd, 0xc}, {0x3, 0x2, 0x10, 0xb}, {0x2, 0x1, 0x5, 0x7}], 0x10, 0x5}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0, 0xaf, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000440), 0x0, 0x0, 0x24, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xb, 0xa, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @alu={0x4, 0x1, 0x8, 0x9, 0x4, 0x8}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x9b, &(0x7f0000000240)=""/155, 0x41000, 0x2, '\x00', r10, 0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x3, 0x0, &(0x7f00000006c0)=[{0x4, 0x5, 0x2, 0x5}, {0x3, 0x3, 0x2}, {0x4, 0x5, 0x8, 0xf}], 0x10, 0xfffffff1}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0xd, 0x2e, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff3e2, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}, @map_fd={0x18, 0x9}, @map_fd={0x18, 0x5}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0xa5, 0x66, &(0x7f00000009c0)=""/102, 0x27529284969d994b, 0x19, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000d40)={0xa, 0x4}, 0x8, 0x10, 0x0, 0x0, r12, 0xffffffffffffffff, 0x6, &(0x7f0000000d80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000dc0)=[{0x2, 0x3, 0xb, 0x5}, {0x1, 0x2, 0xa}, {0x5, 0xc7fc, 0xd, 0x9}, {0x4, 0x5, 0x1, 0x8}, {0x2, 0x401, 0xb, 0xb}, {0x0, 0x5}], 0x10, 0x3b}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xe, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda0, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x7e5f791b}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x80000000}]}, &(0x7f00000000c0)='GPL\x00', 0x80000000, 0x5, &(0x7f00000006c0)=""/5, 0x61800, 0x11, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x1, 0xb, 0x6, 0x401}, 0x10, r12, r6, 0x3, 0x0, &(0x7f0000000780)=[{0x4, 0x5, 0x9, 0xc}, {0x4, 0x5, 0xd, 0x5}, {0x4, 0x1, 0x6, 0x8}], 0x10, 0xfffff001}, 0x90) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000500)={r3, 0x0, 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r2, &(0x7f00000008c0)="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", &(0x7f00000002c0)=""/164}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48) close(r0) 818.039051ms ago: executing program 2 (id=1070): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000040)={0x2, 0x0, 0x5, 0x4, 0x2dc}) 742.999094ms ago: executing program 2 (id=1071): r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x2718, &(0x7f0000000440)=""/102400, &(0x7f00000000c0)=0x41) 695.907386ms ago: executing program 2 (id=1072): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x541b, &(0x7f0000000340)={'bridge0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x34, r1, 0x81, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 632.216186ms ago: executing program 2 (id=1073): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14415}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 393.15957ms ago: executing program 1 (id=1074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_ID={0x8}]}], {0x14, 0x10}}, 0x7c}}, 0x0) 340.689068ms ago: executing program 0 (id=1075): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x0, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) socket(0x10, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000900)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1}}}, 0x24}}, 0x0) 253.679511ms ago: executing program 1 (id=1076): unshare(0x20000400) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r0, &(0x7f0000000100)=@abs={0x27}, 0x6e) 247.617429ms ago: executing program 4 (id=1077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) 183.202944ms ago: executing program 4 (id=1078): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='ext4_forget\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) 144.701642ms ago: executing program 2 (id=1079): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x3, 0x0, 0x20000000) 134.835961ms ago: executing program 1 (id=1080): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d40)={0x6, 0x8, &(0x7f0000000b40)=@raw=[@cb_func, @kfunc, @tail_call], &(0x7f0000000bc0)='syzkaller\x00', 0x6, 0x10, &(0x7f0000000c00)=""/16}, 0x90) 64.622552ms ago: executing program 0 (id=1081): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xe8, 0x0, &(0x7f0000000100)) 0s ago: executing program 1 (id=1082): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000004c0)={0x0, 0x7, "3a8c2021d17c12"}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x24, &(0x7f00000002c0), 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. [ 64.016685][ T5093] cgroup: Unknown subsys name 'net' [ 64.183087][ T5093] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.925736][ T5093] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.630522][ T5114] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.630734][ T5112] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.646768][ T5111] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.655162][ T5111] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.660283][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.663962][ T5111] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 66.670644][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.677226][ T5111] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.684650][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.692149][ T5111] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 66.704575][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.713568][ T5111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.714009][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.722314][ T5111] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.729179][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.735243][ T5111] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.743469][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.749137][ T5111] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 66.757620][ T5112] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.764707][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.770478][ T5112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.778893][ T5119] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.785144][ T5112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.790623][ T5111] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.797753][ T5112] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 66.804339][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.820189][ T5111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.827723][ T5111] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.839084][ T4492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 66.853595][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.425160][ T5113] chnl_net:caif_netlink_parms(): no params data found [ 67.480439][ T5104] chnl_net:caif_netlink_parms(): no params data found [ 67.549504][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 67.668922][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 67.777269][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.784944][ T5113] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.792189][ T5113] bridge_slave_0: entered allmulticast mode [ 67.799805][ T5113] bridge_slave_0: entered promiscuous mode [ 67.820403][ T5103] chnl_net:caif_netlink_parms(): no params data found [ 67.849264][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.856602][ T5113] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.864021][ T5113] bridge_slave_1: entered allmulticast mode [ 67.870971][ T5113] bridge_slave_1: entered promiscuous mode [ 67.927857][ T5104] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.935166][ T5104] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.942410][ T5104] bridge_slave_0: entered allmulticast mode [ 67.949403][ T5104] bridge_slave_0: entered promiscuous mode [ 67.964976][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.972121][ T5104] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.979388][ T5104] bridge_slave_1: entered allmulticast mode [ 67.986640][ T5104] bridge_slave_1: entered promiscuous mode [ 68.027130][ T5113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.061039][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.068509][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.076097][ T5102] bridge_slave_0: entered allmulticast mode [ 68.083659][ T5102] bridge_slave_0: entered promiscuous mode [ 68.098754][ T5113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.142913][ T5104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.152853][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.160006][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.167339][ T5102] bridge_slave_1: entered allmulticast mode [ 68.174978][ T5102] bridge_slave_1: entered promiscuous mode [ 68.215080][ T5104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.263544][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.270750][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.278703][ T5110] bridge_slave_0: entered allmulticast mode [ 68.286146][ T5110] bridge_slave_0: entered promiscuous mode [ 68.297407][ T5113] team0: Port device team_slave_0 added [ 68.304067][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.311186][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.318906][ T5110] bridge_slave_1: entered allmulticast mode [ 68.325956][ T5110] bridge_slave_1: entered promiscuous mode [ 68.367718][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.379163][ T5113] team0: Port device team_slave_1 added [ 68.425555][ T5104] team0: Port device team_slave_0 added [ 68.446965][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.497234][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.508851][ T5104] team0: Port device team_slave_1 added [ 68.527785][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.535341][ T5103] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.542786][ T5103] bridge_slave_0: entered allmulticast mode [ 68.549827][ T5103] bridge_slave_0: entered promiscuous mode [ 68.571340][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.578479][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.604682][ T5113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.619413][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.656092][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.663668][ T5103] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.670851][ T5103] bridge_slave_1: entered allmulticast mode [ 68.678120][ T5103] bridge_slave_1: entered promiscuous mode [ 68.710518][ T5113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.717691][ T5113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.743785][ T5113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.777512][ T5110] team0: Port device team_slave_0 added [ 68.784671][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.791651][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.817925][ T5104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.831009][ T5104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.838531][ T5104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.865495][ T5115] Bluetooth: hci0: command tx timeout [ 68.871180][ T5104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.878531][ T5115] Bluetooth: hci1: command tx timeout [ 68.899883][ T5102] team0: Port device team_slave_0 added [ 68.909306][ T5102] team0: Port device team_slave_1 added [ 68.919312][ T5110] team0: Port device team_slave_1 added [ 68.942463][ T4492] Bluetooth: hci2: command tx timeout [ 68.942605][ T5114] Bluetooth: hci3: command tx timeout [ 68.948187][ T5115] Bluetooth: hci4: command tx timeout [ 68.966350][ T5103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.026189][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.033583][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.060091][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.076129][ T5103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.102147][ T5113] hsr_slave_0: entered promiscuous mode [ 69.109638][ T5113] hsr_slave_1: entered promiscuous mode [ 69.131464][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.138796][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.165152][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.195749][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.203128][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.229272][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.278447][ T5104] hsr_slave_0: entered promiscuous mode [ 69.285433][ T5104] hsr_slave_1: entered promiscuous mode [ 69.291665][ T5104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.300008][ T5104] Cannot create hsr debugfs directory [ 69.329840][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.338539][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.364931][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.406081][ T5103] team0: Port device team_slave_0 added [ 69.450348][ T5103] team0: Port device team_slave_1 added [ 69.527496][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.535206][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.561333][ T5103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.595123][ T5110] hsr_slave_0: entered promiscuous mode [ 69.601658][ T5110] hsr_slave_1: entered promiscuous mode [ 69.608083][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.615907][ T5110] Cannot create hsr debugfs directory [ 69.656821][ T5103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.670282][ T5103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.697096][ T5103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.744092][ T5102] hsr_slave_0: entered promiscuous mode [ 69.750701][ T5102] hsr_slave_1: entered promiscuous mode [ 69.757343][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.765165][ T5102] Cannot create hsr debugfs directory [ 69.899271][ T5103] hsr_slave_0: entered promiscuous mode [ 69.906223][ T5103] hsr_slave_1: entered promiscuous mode [ 69.913131][ T5103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.920868][ T5103] Cannot create hsr debugfs directory [ 70.172031][ T5113] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.184039][ T5113] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.200183][ T5113] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.264699][ T5113] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.337868][ T5104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.360089][ T5104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.370262][ T5104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.392362][ T5104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.497171][ T5110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.509443][ T5110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.520307][ T5110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.534997][ T5110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.650408][ T5102] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.661583][ T5102] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.685923][ T5102] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.698270][ T5102] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.786101][ T5103] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.800573][ T5103] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.831071][ T5113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.841508][ T5103] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.856411][ T5103] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.911332][ T5104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.942885][ T5115] Bluetooth: hci1: command tx timeout [ 70.944603][ T5114] Bluetooth: hci0: command tx timeout [ 70.999810][ T5104] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.009951][ T5113] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.022498][ T5114] Bluetooth: hci3: command tx timeout [ 71.023371][ T5115] Bluetooth: hci4: command tx timeout [ 71.027915][ T5114] Bluetooth: hci2: command tx timeout [ 71.069059][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.076482][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.087771][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.094959][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.126654][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.133824][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.181484][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.188661][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.238015][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.371624][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.406405][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.446007][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.469602][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.476773][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.521810][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.529007][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.599157][ T5156] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.606721][ T5156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.624543][ T5156] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.631726][ T5156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.710481][ T5103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.752795][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.760260][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.760614][ T5113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.851778][ T5103] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.885005][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.892156][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.907332][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.914491][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.999579][ T5104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.197275][ T5113] veth0_vlan: entered promiscuous mode [ 72.227912][ T5103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.286593][ T5113] veth1_vlan: entered promiscuous mode [ 72.322185][ T5104] veth0_vlan: entered promiscuous mode [ 72.351958][ T5104] veth1_vlan: entered promiscuous mode [ 72.379024][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.496362][ T5113] veth0_macvtap: entered promiscuous mode [ 72.558121][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.571700][ T5113] veth1_macvtap: entered promiscuous mode [ 72.616337][ T5104] veth0_macvtap: entered promiscuous mode [ 72.661096][ T5104] veth1_macvtap: entered promiscuous mode [ 72.695949][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.726276][ T5110] veth0_vlan: entered promiscuous mode [ 72.748425][ T5103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.760967][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.774017][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.796524][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.814429][ T5113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.830578][ T5110] veth1_vlan: entered promiscuous mode [ 72.850141][ T5104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.861985][ T5104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.875767][ T5104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.891790][ T5113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.907034][ T5113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.919439][ T5113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.928767][ T5113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.956378][ T5104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.973581][ T5104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.982566][ T5104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.991312][ T5104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.023400][ T5114] Bluetooth: hci0: command tx timeout [ 73.032777][ T5114] Bluetooth: hci1: command tx timeout [ 73.103277][ T4492] Bluetooth: hci4: command tx timeout [ 73.104167][ T5115] Bluetooth: hci3: command tx timeout [ 73.108788][ T5114] Bluetooth: hci2: command tx timeout [ 73.137928][ T5103] veth0_vlan: entered promiscuous mode [ 73.241289][ T5110] veth0_macvtap: entered promiscuous mode [ 73.255347][ T5103] veth1_vlan: entered promiscuous mode [ 73.287587][ T5110] veth1_macvtap: entered promiscuous mode [ 73.311172][ T5102] veth0_vlan: entered promiscuous mode [ 73.312703][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.326015][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.378540][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.384985][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.397225][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.403837][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.416203][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.426995][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.438352][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.482895][ T2445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.490744][ T2445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.508473][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.520615][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.530620][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.541088][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.552666][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.581253][ T5102] veth1_vlan: entered promiscuous mode [ 73.656172][ T5103] veth0_macvtap: entered promiscuous mode [ 73.668965][ T5103] veth1_macvtap: entered promiscuous mode [ 73.678456][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.680473][ T5110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.696003][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.696397][ T5110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.712088][ T5110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.721693][ T5110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.777893][ T5102] veth0_macvtap: entered promiscuous mode [ 73.847196][ T5102] veth1_macvtap: entered promiscuous mode [ 73.885228][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.902869][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.913109][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.923869][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.940312][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.951084][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.971064][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.022182][ T5188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.028728][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.072402][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098056][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.113970][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.126111][ T5103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.137427][ T5103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.150257][ T5103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.179988][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 74.220050][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.245852][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.259440][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.271724][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.282004][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.295373][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.307290][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.318444][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.350567][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.431743][ T5103] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.464685][ T5103] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.487794][ T5103] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.497731][ T5103] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.511952][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.527429][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.531684][ T5199] netlink: 172 bytes leftover after parsing attributes in process `syz.1.9'. [ 74.539534][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.557753][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.580858][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.602541][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.635387][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.646451][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.659752][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.691047][ T5102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.712954][ T5102] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.722005][ T5102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731617][ T5102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.748345][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.764392][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.888428][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.912568][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.080622][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.106750][ T5114] Bluetooth: hci1: command tx timeout [ 75.106759][ T5115] Bluetooth: hci0: command tx timeout [ 75.119837][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.182876][ T5114] Bluetooth: hci2: command tx timeout [ 75.183181][ T5115] Bluetooth: hci3: command tx timeout [ 75.188341][ T4492] Bluetooth: hci4: command tx timeout [ 75.223133][ T2483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.242924][ T5208] netlink: 'syz.0.13': attribute type 1 has an invalid length. [ 75.275401][ T2483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.288978][ T5208] NCSI netlink: No device for ifindex 0 [ 75.317103][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.350591][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.468755][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.509690][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.562146][ T5215] netlink: 103 bytes leftover after parsing attributes in process `syz.3.15'. [ 76.300112][ T5244] netlink: 'syz.0.23': attribute type 15 has an invalid length. [ 76.327659][ T5247] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 76.344035][ T5244] netlink: 666 bytes leftover after parsing attributes in process `syz.0.23'. [ 76.373806][ T5246] warning: `syz.3.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 76.463230][ T5249] netlink: 'syz.1.25': attribute type 1 has an invalid length. [ 76.484683][ T5249] NCSI netlink: No device for ifindex 0 [ 76.558969][ T5254] netlink: 103 bytes leftover after parsing attributes in process `syz.3.27'. [ 76.572558][ T5240] tun0: tun_chr_ioctl cmd 2147767519 [ 76.581770][ T5240] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22'. [ 77.253366][ T5276] netlink: 'syz.3.36': attribute type 15 has an invalid length. [ 77.293904][ T5276] netlink: 666 bytes leftover after parsing attributes in process `syz.3.36'. [ 77.809386][ T5299] netlink: 24 bytes leftover after parsing attributes in process `syz.3.46'. [ 78.132706][ T5320] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 78.341234][ T5312] tun0: tun_chr_ioctl cmd 2147767519 [ 78.360150][ T5312] netlink: 12 bytes leftover after parsing attributes in process `syz.0.49'. [ 79.163127][ T5359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 79.242683][ T5359] xfrm1: entered promiscuous mode [ 79.247789][ T5359] xfrm1: entered allmulticast mode [ 79.368894][ T5369] netlink: 'syz.1.70': attribute type 2 has an invalid length. [ 79.478394][ T5375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 79.591901][ T5381] netlink: 6 bytes leftover after parsing attributes in process `syz.4.73'. [ 79.634139][ T5386] netlink: 172 bytes leftover after parsing attributes in process `syz.1.74'. [ 79.642266][ T5381] netlink: 6 bytes leftover after parsing attributes in process `syz.4.73'. [ 79.680682][ T5381] netlink: 6 bytes leftover after parsing attributes in process `syz.4.73'. [ 79.711187][ T5381] netlink: 6 bytes leftover after parsing attributes in process `syz.4.73'. [ 79.729678][ T5383] Zero length message leads to an empty skb [ 80.191711][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.0.86'. [ 80.318212][ T5418] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 80.379392][ T5425] netlink: 172 bytes leftover after parsing attributes in process `syz.3.89'. [ 81.200327][ T5452] netlink: 'syz.4.98': attribute type 3 has an invalid length. [ 81.237348][ T5452] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.98'. [ 81.292811][ T5456] netlink: 'syz.4.98': attribute type 4 has an invalid length. [ 81.425468][ T5460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 81.486668][ T5456] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 81.613528][ T5464] netlink: 'syz.0.104': attribute type 2 has an invalid length. [ 81.699968][ T5467] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 81.930108][ T5481] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.252627][ T5495] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 82.334944][ T5498] xfrm1: entered promiscuous mode [ 82.372439][ T5498] xfrm1: entered allmulticast mode [ 82.782640][ T5513] block nbd0: not configured, cannot reconfigure [ 83.511693][ T5537] netlink: 'syz.2.134': attribute type 3 has an invalid length. [ 83.550164][ T5537] netlink: 'syz.2.134': attribute type 4 has an invalid length. [ 83.685568][ T5543] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 83.721041][ T5544] nbd: socks must be embedded in a SOCK_ITEM attr [ 83.833038][ T5548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.882523][ T5549] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 84.317675][ T5570] bridge_slave_1: left allmulticast mode [ 84.338781][ T5570] bridge_slave_1: left promiscuous mode [ 84.363641][ T5570] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.436687][ T5570] netlink: 'syz.0.147': attribute type 2 has an invalid length. [ 84.460565][ T5570] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 84.612766][ T5582] nbd: socks must be embedded in a SOCK_ITEM attr [ 84.643324][ T5586] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 84.903997][ T5600] Bluetooth: MGMT ver 1.22 [ 85.025313][ T5610] __nla_validate_parse: 8 callbacks suppressed [ 85.025335][ T5610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.164'. [ 85.084666][ T5614] netlink: 56 bytes leftover after parsing attributes in process `syz.0.166'. [ 85.149592][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 85.167644][ T5618] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 85.255051][ T5620] netlink: 'syz.0.169': attribute type 3 has an invalid length. [ 85.269010][ T5620] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.169'. [ 85.359960][ T5622] dummy0: entered promiscuous mode [ 85.449831][ T5622] dummy0: left promiscuous mode [ 85.559486][ T5584] netlink: 'syz.3.153': attribute type 10 has an invalid length. [ 85.571097][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.579697][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.739843][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.747122][ T5584] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.754787][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.762722][ T5584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.962565][ T5584] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 86.076372][ T5655] netlink: 56 bytes leftover after parsing attributes in process `syz.1.180'. [ 86.288595][ T5666] netlink: 224 bytes leftover after parsing attributes in process `syz.2.186'. [ 86.327358][ T5666] batadv0: entered promiscuous mode [ 86.338097][ T5666] veth0: entered promiscuous mode [ 86.390644][ T5668] nbd: socks must be embedded in a SOCK_ITEM attr [ 86.507577][ T5674] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 86.515608][ T5674] nbd: illegal input index 19464200 [ 86.528816][ T5672] dummy0: entered promiscuous mode [ 86.540165][ T5672] dummy0: left promiscuous mode [ 86.621867][ T5678] syz.0.191 uses obsolete (PF_INET,SOCK_PACKET) [ 86.768633][ T5685] netlink: 76 bytes leftover after parsing attributes in process `syz.2.195'. [ 86.991279][ T5695] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.119768][ T45] cfg80211: failed to load regulatory.db [ 87.391444][ T5716] netlink: 76 bytes leftover after parsing attributes in process `syz.4.208'. [ 87.848760][ T5739] netlink: 'syz.2.219': attribute type 1 has an invalid length. [ 87.856882][ T5739] nbd: illegal input index 19464200 [ 87.958669][ T5745] netlink: 28 bytes leftover after parsing attributes in process `syz.4.220'. [ 88.111261][ T5753] trusted_key: syz.2.224 sent an empty control message without MSG_MORE. [ 88.338559][ T5758] netlink: 'syz.4.225': attribute type 10 has an invalid length. [ 88.416701][ T5758] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.424585][ T5758] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.505638][ T5758] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.512915][ T5758] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.520486][ T5758] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.527739][ T5758] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.647784][ T5758] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 88.849965][ T5769] bond0: entered promiscuous mode [ 88.859604][ T5769] bond_slave_0: entered promiscuous mode [ 88.866970][ T5769] bond_slave_1: entered promiscuous mode [ 89.064908][ T5779] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 89.133357][ T5774] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 90.260042][ T5800] bond0: entered promiscuous mode [ 90.267299][ T5800] bond_slave_0: entered promiscuous mode [ 90.274043][ T5800] bond_slave_1: entered promiscuous mode [ 90.689006][ T25] IPVS: starting estimator thread 0... [ 90.794286][ T5817] IPVS: using max 18 ests per chain, 43200 per kthread [ 90.822520][ T5819] __nla_validate_parse: 1 callbacks suppressed [ 90.822541][ T5819] netlink: 188 bytes leftover after parsing attributes in process `syz.0.250'. [ 90.871001][ T5819] netlink: 'syz.0.250': attribute type 1 has an invalid length. [ 91.055501][ T5823] netlink: 'syz.0.252': attribute type 3 has an invalid length. [ 91.073411][ T5823] netlink: 'syz.0.252': attribute type 11 has an invalid length. [ 91.081722][ T5823] netlink: 128512 bytes leftover after parsing attributes in process `syz.0.252'. [ 92.039262][ T5846] netlink: 188 bytes leftover after parsing attributes in process `syz.0.262'. [ 92.059206][ T4492] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.068053][ T4492] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.078071][ T4492] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.088482][ T4492] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.096840][ T5846] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 92.109448][ T4492] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 92.117481][ T4492] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 92.120840][ T5850] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 92.131247][ T5850] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 92.179170][ T5113] syz-executor (5113) used greatest stack depth: 18384 bytes left [ 92.323842][ T5861] netlink: 168 bytes leftover after parsing attributes in process `syz.0.266'. [ 92.340998][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.472654][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.598112][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.728022][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.979723][ T5884] netlink: 188 bytes leftover after parsing attributes in process `syz.0.275'. [ 92.998787][ T5884] netlink: 'syz.0.275': attribute type 1 has an invalid length. [ 93.174486][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 93.226680][ T5873] netlink: 32 bytes leftover after parsing attributes in process `syz.3.267'. [ 93.238111][ T5894] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 93.425229][ T1102] bridge_slave_1: left allmulticast mode [ 93.431285][ T1102] bridge_slave_1: left promiscuous mode [ 93.440044][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.461303][ T1102] bridge_slave_0: left allmulticast mode [ 93.467260][ T1102] bridge_slave_0: left promiscuous mode [ 93.475559][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.805460][ T5912] netlink: 188 bytes leftover after parsing attributes in process `syz.2.287'. [ 93.815277][ T5912] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 93.979028][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.001156][ T1102] bond_slave_0: left promiscuous mode [ 94.016468][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.033319][ T1102] bond_slave_1: left promiscuous mode [ 94.048387][ T1102] bond0 (unregistering): Released all slaves [ 94.161145][ T5921] netlink: 'syz.2.291': attribute type 3 has an invalid length. [ 94.188542][ T5921] netlink: 'syz.2.291': attribute type 11 has an invalid length. [ 94.205952][ T5921] netlink: 128512 bytes leftover after parsing attributes in process `syz.2.291'. [ 94.222781][ T4492] Bluetooth: hci4: command tx timeout [ 94.250111][ T5928] xt_CONNSECMARK: invalid mode: 0 [ 94.467506][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.475183][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.492566][ T5847] bridge_slave_0: entered allmulticast mode [ 94.500586][ T5847] bridge_slave_0: entered promiscuous mode [ 94.628181][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.645249][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.652841][ T5847] bridge_slave_1: entered allmulticast mode [ 94.660546][ T5847] bridge_slave_1: entered promiscuous mode [ 94.797082][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.816013][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.860528][ T5847] team0: Port device team_slave_0 added [ 94.871094][ T5847] team0: Port device team_slave_1 added [ 94.926956][ T5953] netlink: 480 bytes leftover after parsing attributes in process `syz.0.300'. [ 94.977724][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.991481][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.020090][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.067167][ T1102] hsr_slave_0: left promiscuous mode [ 95.078441][ T1102] hsr_slave_1: left promiscuous mode [ 95.085023][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.093874][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.105353][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.113088][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.138556][ T1102] veth1_macvtap: left promiscuous mode [ 95.148500][ T1102] veth0_macvtap: left promiscuous mode [ 95.158279][ T1102] veth1_vlan: left promiscuous mode [ 95.168790][ T1102] veth0_vlan: left promiscuous mode [ 95.823145][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 95.856445][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 96.201356][ T5956] bond0: option mode: unable to set because the bond device has slaves [ 96.213341][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.224893][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.259589][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.304509][ T4492] Bluetooth: hci4: command tx timeout [ 96.447393][ T5847] hsr_slave_0: entered promiscuous mode [ 96.470683][ T5847] hsr_slave_1: entered promiscuous mode [ 97.246831][ T6010] netlink: 52 bytes leftover after parsing attributes in process `syz.0.321'. [ 97.394948][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.420128][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.473175][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.495535][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.678331][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.689128][ T6028] Bluetooth: MGMT ver 1.22 [ 97.758986][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.795310][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.802559][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.854726][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.861924][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.926693][ T5847] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.244690][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.314595][ T6055] netlink: 480 bytes leftover after parsing attributes in process `syz.0.340'. [ 98.364481][ T5847] veth0_vlan: entered promiscuous mode [ 98.379420][ T6055] bond0: option mode: unable to set because the bond device has slaves [ 98.382847][ T4492] Bluetooth: hci4: command tx timeout [ 98.409634][ T5847] veth1_vlan: entered promiscuous mode [ 98.520332][ T5847] veth0_macvtap: entered promiscuous mode [ 98.560570][ T5847] veth1_macvtap: entered promiscuous mode [ 98.641816][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.663523][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.678197][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.692460][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.710428][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.721127][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.733536][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.744333][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.756770][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.771296][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.786639][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.796727][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.807756][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.819170][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.830064][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.852328][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.865753][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.878474][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.910456][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.919582][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.929571][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.938959][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.089805][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.101372][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.165222][ T2483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.196324][ T2483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.725190][ T6109] bond_slave_0: entered promiscuous mode [ 99.731250][ T6109] bond_slave_1: entered promiscuous mode [ 99.737125][ T6109] bridge0: entered promiscuous mode [ 99.775596][ T6109] macsec1: entered promiscuous mode [ 99.877258][ T6109] bond0: entered promiscuous mode [ 99.943529][ T6109] macsec1: entered allmulticast mode [ 99.949057][ T6109] bond0: entered allmulticast mode [ 99.954477][ T6109] bond_slave_0: entered allmulticast mode [ 99.960280][ T6109] bond_slave_1: entered allmulticast mode [ 99.967570][ T6109] bridge0: entered allmulticast mode [ 99.980027][ T6109] bond0: left allmulticast mode [ 99.994475][ T6109] bond_slave_0: left allmulticast mode [ 100.008030][ T6109] bond_slave_1: left allmulticast mode [ 100.022435][ T6109] bridge0: left allmulticast mode [ 100.038010][ T6109] bond0: left promiscuous mode [ 100.111149][ T6109] bond_slave_0: left promiscuous mode [ 100.116720][ T6109] bond_slave_1: left promiscuous mode [ 100.122502][ T6109] bridge0: left promiscuous mode [ 100.462369][ T4492] Bluetooth: hci4: command tx timeout [ 100.608953][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.371'. [ 100.999514][ T6160] netlink: 28 bytes leftover after parsing attributes in process `syz.4.372'. [ 101.207624][ T6167] macvlan2: entered promiscuous mode [ 101.221409][ T6167] veth1_to_bond: entered promiscuous mode [ 101.241195][ T6167] team0: Port device macvlan2 added [ 101.325845][ T6166] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 101.723240][ T6195] tipc: Can't bind to reserved service type 2 [ 101.837232][ T6204] netlink: 228 bytes leftover after parsing attributes in process `syz.1.400'. [ 101.854116][ T6204] netlink: 'syz.1.400': attribute type 2 has an invalid length. [ 101.961876][ T6208] netlink: 28 bytes leftover after parsing attributes in process `syz.0.401'. [ 103.579570][ T6241] bond_slave_0: entered promiscuous mode [ 103.585418][ T6241] bond_slave_1: entered promiscuous mode [ 103.591241][ T6241] bridge0: entered promiscuous mode [ 103.613580][ T6241] macsec1: entered promiscuous mode [ 103.618857][ T6241] bond0: entered promiscuous mode [ 103.624742][ T6241] macsec1: entered allmulticast mode [ 103.630071][ T6241] bond0: entered allmulticast mode [ 103.719730][ T6241] bond_slave_0: entered allmulticast mode [ 103.762631][ T6241] bond_slave_1: entered allmulticast mode [ 103.768425][ T6241] bridge0: entered allmulticast mode [ 103.821284][ T6241] bond0: left allmulticast mode [ 103.947419][ T6241] bond_slave_0: left allmulticast mode [ 103.954957][ T6241] bond_slave_1: left allmulticast mode [ 103.970713][ T6241] bridge0: left allmulticast mode [ 104.007575][ T6241] bond0: left promiscuous mode [ 104.017291][ T6241] bond_slave_0: left promiscuous mode [ 104.022805][ T6241] bond_slave_1: left promiscuous mode [ 104.028410][ T6241] bridge0: left promiscuous mode [ 104.097230][ T6244] bridge0: port 2(bridge_slave_1) entered listening state [ 104.117772][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.419'. [ 104.513908][ T6288] macvlan2: entered promiscuous mode [ 104.519610][ T6288] veth1_to_bond: entered promiscuous mode [ 104.534428][ T6288] team0: Port device macvlan2 added [ 104.650678][ T6295] bond_slave_0: entered promiscuous mode [ 104.656724][ T6295] bond_slave_1: entered promiscuous mode [ 104.669675][ T6295] macsec1: entered promiscuous mode [ 104.671631][ T6298] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 104.677918][ T6295] bond0: entered promiscuous mode [ 104.697173][ T6295] macsec1: entered allmulticast mode [ 104.712011][ T6295] bond0: entered allmulticast mode [ 104.717759][ T6295] bond_slave_0: entered allmulticast mode [ 104.728059][ T6295] bond_slave_1: entered allmulticast mode [ 104.739850][ T6295] bond0: left allmulticast mode [ 104.745095][ T6295] bond_slave_0: left allmulticast mode [ 104.750816][ T6295] bond_slave_1: left allmulticast mode [ 104.758487][ T6295] bond0: left promiscuous mode [ 104.764404][ T6295] bond_slave_0: left promiscuous mode [ 104.769900][ T6295] bond_slave_1: left promiscuous mode [ 104.837865][ T29] audit: type=1804 audit(1719331710.699:2): pid=6301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.435" name="/root/syzkaller.3dXs0y/26/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 104.994379][ T29] audit: type=1804 audit(1719331710.849:3): pid=6300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.435" name="/root/syzkaller.3dXs0y/26/cgroup.controllers" dev="sda1" ino=1972 res=1 errno=0 [ 105.358437][ T6325] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 105.650299][ T6336] bridge0: port 2(bridge_slave_1) entered listening state [ 105.831238][ T6349] netlink: 228 bytes leftover after parsing attributes in process `syz.2.460'. [ 105.841749][ T6349] netlink: 'syz.2.460': attribute type 2 has an invalid length. [ 105.983412][ T6354] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.036102][ T6354] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 107.124817][ T6416] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 107.374692][ T6425] netlink: 228 bytes leftover after parsing attributes in process `syz.1.490'. [ 107.384114][ T6425] netlink: 'syz.1.490': attribute type 2 has an invalid length. [ 108.756333][ T6444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.498'. [ 108.771824][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.498'. [ 109.293999][ T6472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 109.455410][ T6478] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.483165][ T6478] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.836478][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.4.511'. [ 111.076814][ T6522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.531'. [ 111.126057][ T6525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 112.499840][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 112.692757][ T6556] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 112.693504][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz.1.549'. [ 112.780779][ T6564] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 113.216267][ T6589] netlink: 'syz.1.560': attribute type 3 has an invalid length. [ 113.266693][ T6591] netlink: 'syz.0.561': attribute type 10 has an invalid length. [ 113.330838][ T6591] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 113.343881][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 113.373169][ T6591] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 113.446161][ T6594] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 113.642360][ T6607] netlink: 28 bytes leftover after parsing attributes in process `syz.4.564'. [ 113.786413][ T6614] netlink: 'syz.1.573': attribute type 3 has an invalid length. [ 113.818817][ T6617] netlink: 24 bytes leftover after parsing attributes in process `syz.0.574'. [ 114.060228][ T6630] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.393758][ T6650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.588'. [ 114.405559][ T6649] netlink: 'syz.2.589': attribute type 3 has an invalid length. [ 114.577526][ T6662] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 114.594664][ T6659] netlink: 830 bytes leftover after parsing attributes in process `syz.0.594'. [ 114.870524][ T6677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.601'. [ 114.991632][ T6687] netlink: 'syz.2.604': attribute type 3 has an invalid length. [ 115.245312][ T6700] unknown channel width for channel at 909000KHz? [ 115.253802][ T6700] unknown channel width for channel at 909000KHz? [ 115.439945][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 115.527750][ T6707] team1: Mode changed to "activebackup" [ 115.687391][ T6713] vxcan1: tx address claim with dest, not broadcast [ 116.013829][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 116.160961][ T6728] pim6reg: entered allmulticast mode [ 116.182990][ T6728] pim6reg: left allmulticast mode [ 116.298697][ T6735] netlink: 'syz.3.624': attribute type 3 has an invalid length. [ 116.950856][ T6772] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.968036][ T6772] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.653462][ T6793] netlink: 'syz.1.652': attribute type 1 has an invalid length. [ 117.661190][ T6793] netlink: 'syz.1.652': attribute type 2 has an invalid length. [ 117.997709][ T6797] sctp: [Deprecated]: syz.3.651 (pid 6797) Use of int in max_burst socket option. [ 117.997709][ T6797] Use struct sctp_assoc_value instead [ 119.353676][ T6823] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 119.407580][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.672'. [ 119.434550][ T6823] netlink: 'syz.3.665': attribute type 2 has an invalid length. [ 119.510985][ T6843] unknown channel width for channel at 909000KHz? [ 119.519908][ T6843] unknown channel width for channel at 909000KHz? [ 119.643586][ T6847] ip6tnl1: entered allmulticast mode [ 119.948507][ T6868] netlink: 'syz.4.678': attribute type 11 has an invalid length. [ 120.351026][ T6884] sctp: [Deprecated]: syz.0.692 (pid 6884) Use of int in max_burst socket option. [ 120.351026][ T6884] Use struct sctp_assoc_value instead [ 120.363748][ T6866] netlink: 64 bytes leftover after parsing attributes in process `syz.1.686'. [ 120.977238][ T6908] netlink: 'syz.2.704': attribute type 11 has an invalid length. [ 121.113587][ T6918] sctp: [Deprecated]: syz.2.707 (pid 6918) Use of int in max_burst socket option. [ 121.113587][ T6918] Use struct sctp_assoc_value instead [ 121.277118][ T6927] netlink: 'syz.3.709': attribute type 1 has an invalid length. [ 121.284990][ T6927] netlink: 'syz.3.709': attribute type 2 has an invalid length. [ 121.572845][ T6939] netlink: 'syz.2.718': attribute type 11 has an invalid length. [ 121.979932][ T6970] netlink: 'syz.0.734': attribute type 11 has an invalid length. [ 122.362176][ T6998] netlink: 'syz.1.747': attribute type 11 has an invalid length. [ 122.778251][ T7025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 123.515549][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 123.543544][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 123.570946][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 123.580457][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 123.590844][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 123.609295][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 123.979771][ T7062] chnl_net:caif_netlink_parms(): no params data found [ 124.131953][ T7062] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.144947][ T7062] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.176819][ T7062] bridge_slave_0: entered allmulticast mode [ 124.225758][ T7062] bridge_slave_0: entered promiscuous mode [ 124.358708][ T7062] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.372439][ T7062] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.388132][ T7062] bridge_slave_1: entered allmulticast mode [ 124.404340][ T7062] bridge_slave_1: entered promiscuous mode [ 124.507087][ T7062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.530522][ T7062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.685758][ T2445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.803479][ T7062] team0: Port device team_slave_0 added [ 124.809922][ T7116] netlink: 'syz.1.795': attribute type 4 has an invalid length. [ 124.854209][ T7125] netlink: 'syz.1.795': attribute type 4 has an invalid length. [ 124.909426][ T2445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.944280][ T7062] team0: Port device team_slave_1 added [ 125.033277][ T2445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.063368][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.080598][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.108840][ T7062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.126211][ T7062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.137561][ T7062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.164875][ T7062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.218027][ T2445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.314851][ T7062] hsr_slave_0: entered promiscuous mode [ 125.321501][ T7062] hsr_slave_1: entered promiscuous mode [ 125.329951][ T7062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.338266][ T7062] Cannot create hsr debugfs directory [ 125.384873][ T7116] syz.1.795 (7116) used greatest stack depth: 18096 bytes left [ 125.630900][ T7153] netlink: 'syz.0.813': attribute type 12 has an invalid length. [ 125.654980][ T7153] netlink: 132 bytes leftover after parsing attributes in process `syz.0.813'. [ 125.664541][ T4492] Bluetooth: hci5: command tx timeout [ 125.779931][ T2445] bridge_slave_1: left allmulticast mode [ 125.788097][ T2445] bridge_slave_1: left promiscuous mode [ 125.805725][ T2445] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.826608][ T2445] bridge_slave_0: left allmulticast mode [ 125.842334][ T2445] bridge_slave_0: left promiscuous mode [ 125.848386][ T2445] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.306235][ T2445] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 126.506698][ T2445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.538500][ T2445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.555373][ T2445] bond0 (unregistering): Released all slaves [ 126.672382][ T7200] netlink: 'syz.2.836': attribute type 1 has an invalid length. [ 126.680161][ T7200] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.836'. [ 127.239630][ T2445] hsr_slave_0: left promiscuous mode [ 127.260077][ T2445] hsr_slave_1: left promiscuous mode [ 127.274332][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.291409][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.300000][ T7229] netlink: 'syz.2.848': attribute type 1 has an invalid length. [ 127.301492][ T2445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.308074][ T7229] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.848'. [ 127.324105][ T2445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.385862][ T2445] veth1_macvtap: left promiscuous mode [ 127.404123][ T2445] veth0_macvtap: left promiscuous mode [ 127.409840][ T2445] veth1_vlan: left promiscuous mode [ 127.438265][ T2445] veth0_vlan: left promiscuous mode [ 127.743033][ T4492] Bluetooth: hci5: command tx timeout [ 128.059910][ T2445] team0 (unregistering): Port device team_slave_1 removed [ 128.101879][ T2445] team0 (unregistering): Port device team_slave_0 removed [ 128.599904][ T7233] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 128.656478][ T7062] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 128.703244][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.726546][ T7062] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 128.777613][ T7062] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 128.843150][ T7062] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 128.979980][ T7270] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 129.046552][ T7271] vxcan1: tx address claim with dest, not broadcast [ 129.107493][ T7062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.153682][ T7062] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.191415][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.198638][ T4876] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.229772][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.237064][ T4876] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.330512][ T7062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.670853][ T7062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.801105][ T7062] veth0_vlan: entered promiscuous mode [ 129.817968][ T7290] netlink: 'syz.0.873': attribute type 3 has an invalid length. [ 129.826408][ T4492] Bluetooth: hci5: command tx timeout [ 129.848196][ T7062] veth1_vlan: entered promiscuous mode [ 129.920963][ T7062] veth0_macvtap: entered promiscuous mode [ 129.949889][ T7062] veth1_macvtap: entered promiscuous mode [ 129.999409][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.017302][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.038563][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.049302][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.065693][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.090985][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.115150][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.136487][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.150389][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.170162][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.183273][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.197063][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.208554][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.218769][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.230958][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.254217][ T7062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.267913][ T7062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.279819][ T7062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.291259][ T7299] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 130.331895][ T7062] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.353998][ T7062] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.363999][ T7062] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.372945][ T7062] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.394294][ T7309] netlink: 'syz.1.877': attribute type 4 has an invalid length. [ 130.534663][ T2806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.550790][ T2806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.650269][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.659164][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.756593][ T7324] vxcan1: tx address claim with dest, not broadcast [ 131.682811][ T7379] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 131.742882][ T7379] netlink: 'syz.2.902': attribute type 4 has an invalid length. [ 131.904292][ T4492] Bluetooth: hci5: command tx timeout [ 131.920158][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 133.188809][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198275][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.404156][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.3.933'. [ 133.501619][ T5154] IPVS: starting estimator thread 0... [ 133.511765][ T7482] ax25_connect(): syz.2.938 uses autobind, please contact jreuter@yaina.de [ 133.592587][ T7483] IPVS: using max 16 ests per chain, 38400 per kthread [ 133.939550][ T7506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.950'. [ 134.129702][ T7515] ax25_connect(): syz.2.952 uses autobind, please contact jreuter@yaina.de [ 134.877471][ T5204] IPVS: starting estimator thread 0... [ 134.900098][ T7558] ax25_connect(): syz.4.964 uses autobind, please contact jreuter@yaina.de [ 134.972634][ T7559] IPVS: using max 18 ests per chain, 43200 per kthread [ 135.376930][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.977'. [ 135.402571][ T7581] netlink: 60 bytes leftover after parsing attributes in process `syz.2.976'. [ 135.455100][ T7583] raw_sendmsg: syz.0.978 forgot to set AF_INET. Fix it! [ 135.543374][ T7589] ax25_connect(): syz.0.982 uses autobind, please contact jreuter@yaina.de [ 135.903422][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.2.991'. [ 136.311103][ T5204] IPVS: starting estimator thread 0... [ 136.328015][ T7631] ax25_connect(): syz.3.995 uses autobind, please contact jreuter@yaina.de [ 136.422691][ T7632] IPVS: using max 17 ests per chain, 40800 per kthread [ 136.671470][ T7656] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1003'. [ 137.095477][ T7671] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1014'. [ 137.151026][ T7676] ax25_connect(): syz.2.1017 uses autobind, please contact jreuter@yaina.de [ 137.310669][ T7682] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 137.535137][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.558389][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.571558][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.596337][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.607578][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.622332][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.071952][ T7716] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1030'. [ 138.111088][ T7692] chnl_net:caif_netlink_parms(): no params data found [ 138.418400][ T7692] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.432508][ T7692] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.440021][ T7692] bridge_slave_0: entered allmulticast mode [ 138.448582][ T7692] bridge_slave_0: entered promiscuous mode [ 138.531639][ T7731] hsr0: entered promiscuous mode [ 138.604880][ T7692] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.612552][ T7692] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.619928][ T7692] bridge_slave_1: entered allmulticast mode [ 138.629358][ T7692] bridge_slave_1: entered promiscuous mode [ 138.636061][ T7740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'. [ 138.793864][ T1093] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.843297][ T7692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.867965][ T7692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.936936][ T1093] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.072553][ T1093] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.172459][ T7692] team0: Port device team_slave_0 added [ 139.234824][ T1093] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.269442][ T7692] team0: Port device team_slave_1 added [ 139.401335][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.408671][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.485995][ T7692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.525342][ T7692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.547063][ T7692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.609495][ T7692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.651941][ T7776] hsr0: entered promiscuous mode [ 139.663079][ T4492] Bluetooth: hci3: command tx timeout [ 139.961450][ T7692] hsr_slave_0: entered promiscuous mode [ 139.981225][ T7692] hsr_slave_1: entered promiscuous mode [ 140.000846][ T7692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.012417][ T7692] Cannot create hsr debugfs directory [ 140.104836][ T1093] bridge_slave_1: left allmulticast mode [ 140.119460][ T1093] bridge_slave_1: left promiscuous mode [ 140.126728][ T1093] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.146205][ T1093] bridge_slave_0: left allmulticast mode [ 140.162618][ T1093] bridge_slave_0: left promiscuous mode [ 140.166222][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1065'. [ 140.169187][ T1093] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.667159][ T1093] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.681405][ T1093] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.693581][ T1093] bond0 (unregistering): Released all slaves [ 140.710675][ T1093] bond1 (unregistering): Released all slaves [ 141.213488][ T1102] ================================================================== [ 141.221682][ T1102] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 141.229811][ T1102] Read of size 8 at addr ffff8880623e18b8 by task kworker/u8:7/1102 [ 141.237809][ T1102] [ 141.240162][ T1102] CPU: 1 PID: 1102 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 141.250411][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.260492][ T1102] Workqueue: l2tp l2tp_tunnel_del_work [ 141.265981][ T1102] Call Trace: [ 141.269265][ T1102] [ 141.272200][ T1102] dump_stack_lvl+0x241/0x360 [ 141.276901][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.282107][ T1102] ? __pfx__printk+0x10/0x10 [ 141.286705][ T1102] ? _printk+0xd5/0x120 [ 141.290878][ T1102] ? __virt_addr_valid+0x183/0x520 [ 141.296008][ T1102] ? __virt_addr_valid+0x183/0x520 [ 141.301134][ T1102] print_report+0x169/0x550 [ 141.305644][ T1102] ? __virt_addr_valid+0x183/0x520 [ 141.310766][ T1102] ? __virt_addr_valid+0x183/0x520 [ 141.315885][ T1102] ? __virt_addr_valid+0x44e/0x520 [ 141.321002][ T1102] ? __phys_addr+0xba/0x170 [ 141.325516][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 141.330809][ T1102] kasan_report+0x143/0x180 [ 141.335321][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 141.340616][ T1102] l2tp_tunnel_del_work+0xe5/0x330 [ 141.345739][ T1102] ? process_scheduled_works+0x945/0x1830 [ 141.351460][ T1102] process_scheduled_works+0xa2c/0x1830 [ 141.357044][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 141.363036][ T1102] ? assign_work+0x364/0x3d0 [ 141.367632][ T1102] worker_thread+0x86d/0xd70 [ 141.372238][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.378152][ T1102] ? __kthread_parkme+0x169/0x1d0 [ 141.383181][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 141.388295][ T1102] kthread+0x2f0/0x390 [ 141.392392][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 141.397505][ T1102] ? __pfx_kthread+0x10/0x10 [ 141.402098][ T1102] ret_from_fork+0x4b/0x80 [ 141.406520][ T1102] ? __pfx_kthread+0x10/0x10 [ 141.411201][ T1102] ret_from_fork_asm+0x1a/0x30 [ 141.415980][ T1102] [ 141.418997][ T1102] [ 141.421316][ T1102] Allocated by task 7828: [ 141.425743][ T1102] kasan_save_track+0x3f/0x80 [ 141.430419][ T1102] __kasan_kmalloc+0x98/0xb0 [ 141.435012][ T1102] __kmalloc_noprof+0x1f9/0x400 [ 141.439864][ T1102] l2tp_session_create+0x3b/0xc20 [ 141.444894][ T1102] pppol2tp_connect+0xca3/0x17a0 [ 141.449836][ T1102] __sys_connect+0x2df/0x310 [ 141.454428][ T1102] __x64_sys_connect+0x7a/0x90 [ 141.459188][ T1102] do_syscall_64+0xf3/0x230 [ 141.463697][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.469607][ T1102] [ 141.471923][ T1102] Freed by task 16: [ 141.475723][ T1102] kasan_save_track+0x3f/0x80 [ 141.480411][ T1102] kasan_save_free_info+0x40/0x50 [ 141.485429][ T1102] poison_slab_object+0xe0/0x150 [ 141.490365][ T1102] __kasan_slab_free+0x37/0x60 [ 141.495130][ T1102] kfree+0x149/0x360 [ 141.499030][ T1102] __sk_destruct+0x58/0x5f0 [ 141.503545][ T1102] rcu_core+0xafd/0x1830 [ 141.507791][ T1102] handle_softirqs+0x2c4/0x970 [ 141.512573][ T1102] run_ksoftirqd+0xca/0x130 [ 141.517161][ T1102] smpboot_thread_fn+0x544/0xa30 [ 141.522130][ T1102] kthread+0x2f0/0x390 [ 141.526217][ T1102] ret_from_fork+0x4b/0x80 [ 141.530646][ T1102] ret_from_fork_asm+0x1a/0x30 [ 141.535415][ T1102] [ 141.537733][ T1102] Last potentially related work creation: [ 141.543456][ T1102] kasan_save_stack+0x3f/0x60 [ 141.548174][ T1102] __kasan_record_aux_stack+0xac/0xc0 [ 141.553557][ T1102] call_rcu+0x167/0xa70 [ 141.557719][ T1102] pppol2tp_release+0x24b/0x350 [ 141.562583][ T1102] sock_close+0xbc/0x240 [ 141.566837][ T1102] __fput+0x406/0x8b0 [ 141.570826][ T1102] task_work_run+0x24f/0x310 [ 141.575425][ T1102] syscall_exit_to_user_mode+0x168/0x370 [ 141.581063][ T1102] do_syscall_64+0x100/0x230 [ 141.585697][ T1102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.591602][ T1102] [ 141.593944][ T1102] The buggy address belongs to the object at ffff8880623e1800 [ 141.593944][ T1102] which belongs to the cache kmalloc-1k of size 1024 [ 141.608010][ T1102] The buggy address is located 184 bytes inside of [ 141.608010][ T1102] freed 1024-byte region [ffff8880623e1800, ffff8880623e1c00) [ 141.621909][ T1102] [ 141.624239][ T1102] The buggy address belongs to the physical page: [ 141.630672][ T1102] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x623e0 [ 141.639434][ T1102] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 141.647936][ T1102] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 141.655496][ T1102] page_type: 0xffffefff(slab) [ 141.660212][ T1102] raw: 00fff00000000040 ffff888015041dc0 ffffea0001e7ec00 dead000000000002 [ 141.668800][ T1102] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 141.677392][ T1102] head: 00fff00000000040 ffff888015041dc0 ffffea0001e7ec00 dead000000000002 [ 141.686084][ T1102] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 141.694756][ T1102] head: 00fff00000000003 ffffea000188f801 ffffffffffffffff 0000000000000000 [ 141.703427][ T1102] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 141.712105][ T1102] page dumped because: kasan: bad access detected [ 141.718525][ T1102] page_owner tracks the page as allocated [ 141.724258][ T1102] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 783, tgid 783 (kworker/0:2), ts 75714328015, free_ts 24021613666 [ 141.744696][ T1102] post_alloc_hook+0x1f3/0x230 [ 141.749469][ T1102] get_page_from_freelist+0x2e43/0x2f00 [ 141.755025][ T1102] __alloc_pages_noprof+0x256/0x6c0 [ 141.760231][ T1102] alloc_slab_page+0x5f/0x120 [ 141.764914][ T1102] allocate_slab+0x5a/0x2f0 [ 141.769425][ T1102] ___slab_alloc+0xcd1/0x14b0 [ 141.774239][ T1102] __slab_alloc+0x58/0xa0 [ 141.778591][ T1102] __kmalloc_noprof+0x257/0x400 [ 141.783538][ T1102] ___neigh_create+0x691/0x2470 [ 141.788414][ T1102] ip6_finish_output2+0x1631/0x1680 [ 141.793623][ T1102] ip6_finish_output+0x41e/0x810 [ 141.798562][ T1102] NF_HOOK+0x9e/0x430 [ 141.802547][ T1102] mld_sendpack+0x843/0xdb0 [ 141.807053][ T1102] mld_ifc_work+0x7d6/0xd90 [ 141.811559][ T1102] process_scheduled_works+0xa2c/0x1830 [ 141.817119][ T1102] worker_thread+0x86d/0xd70 [ 141.821786][ T1102] page last free pid 1 tgid 1 stack trace: [ 141.827591][ T1102] free_unref_page+0xd22/0xea0 [ 141.832368][ T1102] free_contig_range+0x9e/0x160 [ 141.837235][ T1102] destroy_args+0x8a/0x890 [ 141.841660][ T1102] debug_vm_pgtable+0x4be/0x550 [ 141.846514][ T1102] do_one_initcall+0x248/0x880 [ 141.851287][ T1102] do_initcall_level+0x157/0x210 [ 141.856242][ T1102] do_initcalls+0x3f/0x80 [ 141.860572][ T1102] kernel_init_freeable+0x435/0x5d0 [ 141.865776][ T1102] kernel_init+0x1d/0x2b0 [ 141.870119][ T1102] ret_from_fork+0x4b/0x80 [ 141.874544][ T1102] ret_from_fork_asm+0x1a/0x30 [ 141.879339][ T1102] [ 141.881654][ T1102] Memory state around the buggy address: [ 141.887277][ T1102] ffff8880623e1780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 141.895332][ T1102] ffff8880623e1800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.903581][ T1102] >ffff8880623e1880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.911639][ T1102] ^ [ 141.917526][ T1102] ffff8880623e1900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.925583][ T1102] ffff8880623e1980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 141.933635][ T1102] ================================================================== [ 141.941803][ T1102] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 141.949011][ T1102] CPU: 1 PID: 1102 Comm: kworker/u8:7 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 141.959267][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 141.969342][ T1102] Workqueue: l2tp l2tp_tunnel_del_work [ 141.974852][ T1102] Call Trace: [ 141.978161][ T1102] [ 141.981123][ T1102] dump_stack_lvl+0x241/0x360 [ 141.985836][ T1102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.991071][ T1102] ? __pfx__printk+0x10/0x10 [ 141.995689][ T1102] ? vscnprintf+0x5d/0x90 [ 142.000050][ T1102] panic+0x349/0x860 [ 142.003987][ T1102] ? check_panic_on_warn+0x21/0xb0 [ 142.009135][ T1102] ? __pfx_panic+0x10/0x10 [ 142.013590][ T1102] ? mark_lock+0x9a/0x350 [ 142.017948][ T1102] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 142.023881][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.029800][ T1102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 142.036149][ T1102] ? print_report+0x502/0x550 [ 142.040840][ T1102] check_panic_on_warn+0x86/0xb0 [ 142.045793][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 142.051088][ T1102] end_report+0x77/0x160 [ 142.055340][ T1102] kasan_report+0x154/0x180 [ 142.059851][ T1102] ? l2tp_tunnel_del_work+0xe5/0x330 [ 142.065157][ T1102] l2tp_tunnel_del_work+0xe5/0x330 [ 142.070279][ T1102] ? process_scheduled_works+0x945/0x1830 [ 142.076020][ T1102] process_scheduled_works+0xa2c/0x1830 [ 142.081577][ T1102] ? __pfx_process_scheduled_works+0x10/0x10 [ 142.087559][ T1102] ? assign_work+0x364/0x3d0 [ 142.092155][ T1102] worker_thread+0x86d/0xd70 [ 142.096757][ T1102] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 142.102664][ T1102] ? __kthread_parkme+0x169/0x1d0 [ 142.107791][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 142.112905][ T1102] kthread+0x2f0/0x390 [ 142.116977][ T1102] ? __pfx_worker_thread+0x10/0x10 [ 142.122088][ T1102] ? __pfx_kthread+0x10/0x10 [ 142.126684][ T1102] ret_from_fork+0x4b/0x80 [ 142.131111][ T1102] ? __pfx_kthread+0x10/0x10 [ 142.135709][ T1102] ret_from_fork_asm+0x1a/0x30 [ 142.140490][ T1102] [ 142.143809][ T1102] Kernel Offset: disabled [ 142.148133][ T1102] Rebooting in 86400 seconds..