last executing test programs: 7.21888531s ago: executing program 2 (id=365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7c}], 0x1, 0x7, 0x0) 5.994871972s ago: executing program 2 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x0, 0x0, 0x4de, 0x0, 0x1, 0x0, @dev, @local}}}}}}, 0x0) 5.699259951s ago: executing program 2 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[], 0x66) 5.679585284s ago: executing program 4 (id=389): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) close(r1) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) 5.612177465s ago: executing program 0 (id=391): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5.409845162s ago: executing program 4 (id=393): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x804}, 0x0) 4.939172991s ago: executing program 0 (id=398): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) 2.697295622s ago: executing program 1 (id=415): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000020000014001a80100004800c000ac0"], 0x34}}, 0x60040050) 2.607210098s ago: executing program 4 (id=416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 2.519151202s ago: executing program 2 (id=417): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000010c0)) 2.473205271s ago: executing program 0 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 2.415800234s ago: executing program 2 (id=420): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xfdef) 2.414599677s ago: executing program 1 (id=421): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000580)={@local, @local, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8864, 0x5, 0x1, 0x3}}, {@generic={0x88fb}}}, 0x0) 2.07100987s ago: executing program 0 (id=423): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380), &(0x7f00000003c0)=0x14) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0300120006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x7, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x11, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x88) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x6}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket(0x10, 0x803, 0x0) 1.999336107s ago: executing program 3 (id=424): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 1.976797532s ago: executing program 1 (id=425): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000006a001c000000000000000000000008000000", @ANYRES64=r1], 0x38}, 0x0) 1.899100516s ago: executing program 4 (id=426): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB], 0x270}, 0x1, 0x0, 0x0, 0x804}, 0x0) 1.666253074s ago: executing program 3 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6a845ecb4f20be70}, 0x24008080) 1.631229943s ago: executing program 1 (id=428): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x703d25, 0x0, {0x7, 0x0, 0x68, r1, 0x900, 0x22265}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x8004) 1.451293523s ago: executing program 3 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r2}, 0xc) 1.400629825s ago: executing program 3 (id=430): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb265a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4f8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c956fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d68d7489cfcb0176"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0xb) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000004c0)=@proc={0x10, 0x0, 0x1, 0x200}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 298.980758ms ago: executing program 0 (id=431): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) sendto$inet(r0, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) 266.899334ms ago: executing program 4 (id=432): sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x69}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000020000014001a80100004800c000ac0"], 0x34}}, 0x60040050) 247.073895ms ago: executing program 3 (id=433): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x58cc874c008f2775, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(0x3) 246.15364ms ago: executing program 1 (id=434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x20}}, 0x80) 135.215522ms ago: executing program 2 (id=435): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20040051}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x40050}, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000580)={@local, @local, @val={@val={0x88a8, 0x5, 0x0, 0x1}, {0x8864, 0x5, 0x1, 0x3}}, {@generic={0x88fb}}}, 0x0) 69.377518ms ago: executing program 0 (id=436): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790b8f33ed64746f783dcbca965f77a4ebc4ee05aaa5e68d551b3cb668bb5be8cb0f5c6d64346d4aa329d80f904bee073", 0xc1}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x352}], 0x1}}], 0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 39.036447ms ago: executing program 3 (id=437): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)}, {&(0x7f00000027c0)="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", 0x5c2}, {0x0}], 0x3}, 0x8080) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3) 37.493148ms ago: executing program 4 (id=438): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3c}}, 0x10) 0s ago: executing program 1 (id=439): gettid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. [ 99.445872][ T5837] cgroup: Unknown subsys name 'net' [ 99.625439][ T5837] cgroup: Unknown subsys name 'cpuset' [ 99.634969][ T5837] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 101.478626][ T5837] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.872003][ T978] cfg80211: failed to load regulatory.db [ 104.455145][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.465590][ T5857] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 104.475133][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 104.484856][ T5857] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 104.486195][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.493252][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.507695][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 104.517493][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.521655][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.529392][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.546891][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.549987][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.564066][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.574553][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.590940][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 104.591130][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.600745][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 104.613352][ T5868] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 104.615152][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 104.622530][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.638330][ T5869] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.648093][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.658084][ T5866] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.781254][ T5166] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 104.793649][ T5869] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 105.466172][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 105.596839][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 105.704717][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 105.759390][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 105.866736][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.880441][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.889050][ T5853] bridge_slave_0: entered allmulticast mode [ 105.903168][ T5853] bridge_slave_0: entered promiscuous mode [ 105.959008][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.966980][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.975198][ T5851] bridge_slave_0: entered allmulticast mode [ 105.984074][ T5851] bridge_slave_0: entered promiscuous mode [ 105.994781][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.004182][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.013883][ T5853] bridge_slave_1: entered allmulticast mode [ 106.023366][ T5853] bridge_slave_1: entered promiscuous mode [ 106.052296][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.060674][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.068218][ T5851] bridge_slave_1: entered allmulticast mode [ 106.077385][ T5851] bridge_slave_1: entered promiscuous mode [ 106.092408][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 106.191295][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.248098][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.263537][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.317379][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.344203][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.352588][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.360413][ T5850] bridge_slave_0: entered allmulticast mode [ 106.368791][ T5850] bridge_slave_0: entered promiscuous mode [ 106.442676][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.450671][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.459193][ T5850] bridge_slave_1: entered allmulticast mode [ 106.468579][ T5850] bridge_slave_1: entered promiscuous mode [ 106.477704][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.486875][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.495549][ T5861] bridge_slave_0: entered allmulticast mode [ 106.504190][ T5861] bridge_slave_0: entered promiscuous mode [ 106.554457][ T5851] team0: Port device team_slave_0 added [ 106.563125][ T5853] team0: Port device team_slave_0 added [ 106.573649][ T5853] team0: Port device team_slave_1 added [ 106.626950][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.639104][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.647942][ T5861] bridge_slave_1: entered allmulticast mode [ 106.655833][ T5861] bridge_slave_1: entered promiscuous mode [ 106.678402][ T5851] team0: Port device team_slave_1 added [ 106.710746][ T51] Bluetooth: hci2: command tx timeout [ 106.710751][ T5869] Bluetooth: hci4: command tx timeout [ 106.728777][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.771842][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.780857][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.788680][ T5852] bridge_slave_0: entered allmulticast mode [ 106.790687][ T51] Bluetooth: hci1: command tx timeout [ 106.798922][ T5852] bridge_slave_0: entered promiscuous mode [ 106.801483][ T51] Bluetooth: hci0: command tx timeout [ 106.831037][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.838691][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.870247][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.880652][ T51] Bluetooth: hci3: command tx timeout [ 106.887924][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.915787][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.926102][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.934091][ T5852] bridge_slave_1: entered allmulticast mode [ 106.944273][ T5852] bridge_slave_1: entered promiscuous mode [ 106.953118][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.961164][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.990992][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.004683][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.013381][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.044033][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.089901][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.104733][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.146219][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.156810][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.188462][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.220216][ T5850] team0: Port device team_slave_0 added [ 107.246460][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.261024][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.294266][ T5850] team0: Port device team_slave_1 added [ 107.437332][ T5861] team0: Port device team_slave_0 added [ 107.446507][ T5852] team0: Port device team_slave_0 added [ 107.456793][ T5852] team0: Port device team_slave_1 added [ 107.471726][ T5853] hsr_slave_0: entered promiscuous mode [ 107.479106][ T5853] hsr_slave_1: entered promiscuous mode [ 107.487878][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.496132][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.526059][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.546029][ T5851] hsr_slave_0: entered promiscuous mode [ 107.553477][ T5851] hsr_slave_1: entered promiscuous mode [ 107.560677][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.569635][ T5851] Cannot create hsr debugfs directory [ 107.577626][ T5861] team0: Port device team_slave_1 added [ 107.632998][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.640914][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.667843][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.708106][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.716804][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.746146][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.761307][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.769095][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.799838][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.814973][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.823719][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.851745][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.902511][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.910602][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.938447][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.098059][ T5861] hsr_slave_0: entered promiscuous mode [ 108.105110][ T5861] hsr_slave_1: entered promiscuous mode [ 108.112913][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.120956][ T5861] Cannot create hsr debugfs directory [ 108.148886][ T5850] hsr_slave_0: entered promiscuous mode [ 108.157538][ T5850] hsr_slave_1: entered promiscuous mode [ 108.165015][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.173842][ T5850] Cannot create hsr debugfs directory [ 108.213248][ T5852] hsr_slave_0: entered promiscuous mode [ 108.221069][ T5852] hsr_slave_1: entered promiscuous mode [ 108.228094][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.236609][ T5852] Cannot create hsr debugfs directory [ 108.789716][ T5869] Bluetooth: hci2: command tx timeout [ 108.796498][ T51] Bluetooth: hci4: command tx timeout [ 108.851722][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.869875][ T5869] Bluetooth: hci0: command tx timeout [ 108.872870][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.875773][ T51] Bluetooth: hci1: command tx timeout [ 108.895012][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.917370][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.960348][ T51] Bluetooth: hci3: command tx timeout [ 108.997645][ T5861] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.011672][ T5861] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.025849][ T5861] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.046402][ T5861] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.164389][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.183382][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.198347][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.227102][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.363633][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.377015][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.394592][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.408663][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.527975][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.552777][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.567054][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.579391][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.608126][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.665574][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.696190][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.704431][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.732362][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.775888][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.785412][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.886805][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.927321][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.964015][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.972648][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.037584][ T196] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.045773][ T196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.077548][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.132406][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.140931][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.158747][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.167352][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.199342][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.277349][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.314464][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.361112][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.369119][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.407183][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.415859][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.441429][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.471735][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.480357][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.493531][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.501109][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.559106][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.869888][ T51] Bluetooth: hci4: command tx timeout [ 110.875941][ T51] Bluetooth: hci2: command tx timeout [ 110.903216][ T5853] veth0_vlan: entered promiscuous mode [ 110.951467][ T5869] Bluetooth: hci0: command tx timeout [ 110.959561][ T51] Bluetooth: hci1: command tx timeout [ 110.993470][ T5853] veth1_vlan: entered promiscuous mode [ 111.030093][ T51] Bluetooth: hci3: command tx timeout [ 111.187757][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.257260][ T5853] veth0_macvtap: entered promiscuous mode [ 111.306572][ T5853] veth1_macvtap: entered promiscuous mode [ 111.373876][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.400878][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.432805][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.447522][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.487807][ T5861] veth0_vlan: entered promiscuous mode [ 111.528182][ T5861] veth1_vlan: entered promiscuous mode [ 111.546713][ T196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.558171][ T196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.586216][ T196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.597094][ T196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.644210][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.664992][ T5851] veth0_vlan: entered promiscuous mode [ 111.696684][ T5850] veth0_vlan: entered promiscuous mode [ 111.745146][ T5861] veth0_macvtap: entered promiscuous mode [ 111.758488][ T5851] veth1_vlan: entered promiscuous mode [ 111.786167][ T5850] veth1_vlan: entered promiscuous mode [ 111.802612][ T5861] veth1_macvtap: entered promiscuous mode [ 111.935043][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.966403][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.977606][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.018363][ T5851] veth0_macvtap: entered promiscuous mode [ 112.055770][ T5850] veth0_macvtap: entered promiscuous mode [ 112.069104][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.105246][ T5851] veth1_macvtap: entered promiscuous mode [ 112.116403][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.122157][ T5850] veth1_macvtap: entered promiscuous mode [ 112.134207][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.150565][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.216546][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.258009][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.269186][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.300635][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 112.347133][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.406245][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.435574][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.466838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.486983][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 112.487563][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.512093][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.535031][ T1088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.552845][ T1088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.574148][ T5970] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 112.591120][ T1088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.602352][ T1088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.659193][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.676252][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.726373][ T1088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.768478][ T5852] veth0_vlan: entered promiscuous mode [ 112.789170][ T1088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.845614][ T1088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.866492][ T1088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.949735][ T51] Bluetooth: hci2: command tx timeout [ 112.955598][ T51] Bluetooth: hci4: command tx timeout [ 113.001346][ T5852] veth1_vlan: entered promiscuous mode [ 113.030175][ T5869] Bluetooth: hci0: command tx timeout [ 113.036614][ T51] Bluetooth: hci1: command tx timeout [ 113.110137][ T51] Bluetooth: hci3: command tx timeout [ 113.119869][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.128091][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.192701][ T5979] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 113.213038][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.252190][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.365591][ T196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.370633][ T5852] veth0_macvtap: entered promiscuous mode [ 113.402498][ T196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.483920][ T5852] veth1_macvtap: entered promiscuous mode [ 113.526458][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 113.537041][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.555431][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.654390][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.703188][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.811522][ T1088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.837751][ T1088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.919639][ T1088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.961868][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.274592][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.277328][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.349776][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.739703][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.091235][ T6012] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.370875][ T6020] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.565231][ T6042] netlink: 'syz.0.29': attribute type 10 has an invalid length. [ 117.841027][ T6022] netlink: 'syz.4.21': attribute type 25 has an invalid length. [ 117.849210][ T6022] netlink: 184 bytes leftover after parsing attributes in process `syz.4.21'. [ 117.996173][ T6042] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.077043][ T6044] Zero length message leads to an empty skb [ 118.333640][ T6047] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.847076][ T6066] netlink: 'syz.3.40': attribute type 25 has an invalid length. [ 118.867475][ T6066] netlink: 184 bytes leftover after parsing attributes in process `syz.3.40'. [ 122.921288][ T6118] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 123.486252][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.66'. [ 123.515194][ T6128] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.822443][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'. [ 124.525997][ T6168] netlink: 'syz.0.84': attribute type 5 has an invalid length. [ 124.557541][ T6168] netlink: 4 bytes leftover after parsing attributes in process `syz.0.84'. [ 124.741678][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 124.846712][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 125.443373][ T6200] netlink: 'syz.2.99': attribute type 5 has an invalid length. [ 125.452154][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 125.587381][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 126.370941][ T6229] netlink: 'syz.0.110': attribute type 5 has an invalid length. [ 126.459701][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.110'. [ 126.508301][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.114'. [ 127.631901][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.128'. [ 128.073249][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'. [ 128.133516][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.134'. [ 130.184212][ T6350] __nla_validate_parse: 4 callbacks suppressed [ 130.184233][ T6350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 131.522606][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 131.692031][ T6395] tipc: Started in network mode [ 131.704769][ T6395] tipc: Node identity , cluster identity 4711 [ 131.717703][ T6395] tipc: Failed to obtain node identity [ 131.727370][ T6395] tipc: Enabling of bearer rejected, failed to enable media [ 132.329616][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032d0b400: rx timeout, send abort [ 132.832578][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032d0ac00: rx timeout, send abort [ 132.842726][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032d0b400: abort rx timeout. Force session deactivation [ 133.341934][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888032d0ac00: abort rx timeout. Force session deactivation [ 136.037479][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803358ac00: rx timeout, send abort [ 136.450884][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.231'. [ 136.537634][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803358b000: rx timeout, send abort [ 136.548488][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803358ac00: abort rx timeout. Force session deactivation [ 137.046872][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88803358b000: abort rx timeout. Force session deactivation [ 137.223172][ T6542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 138.065484][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.258'. [ 138.246878][ T6579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 138.718089][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.725574][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.834684][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 138.986673][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ae3400: rx timeout, send abort [ 139.407444][ T30] audit: type=1107 audit(1752632813.671:2): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 139.470389][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 139.480017][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 139.486816][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ae0c00: rx timeout, send abort [ 139.500352][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ae3400: abort rx timeout. Force session deactivation [ 139.659218][ T6629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.286'. [ 140.009929][ C1] vcan0: j1939_tp_rxtimer: 0xffff888033ae0c00: abort rx timeout. Force session deactivation [ 140.634966][ T6663] netlink: 'syz.3.301': attribute type 1 has an invalid length. [ 141.852993][ T6661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.300'. [ 141.864876][ T6663] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 142.281133][ T6683] wg2: entered promiscuous mode [ 142.302150][ T6683] wg2: entered allmulticast mode [ 142.632283][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.315'. [ 143.520051][ T6725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.329'. [ 144.140728][ T6747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 144.676417][ T6769] ªªªªªª: renamed from vlan0 (while UP) [ 144.926603][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 145.304054][ T1110] tipc: Subscription rejected, illegal request [ 145.958113][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.1.370'. [ 149.965133][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 150.415798][ T6919] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 150.882784][ T6926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.423'. [ 152.454812][ T6947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.432'. [ 152.554581][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.2.435'. [ 152.681968][ T6955] ================================================================== [ 152.693784][ T6955] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 152.702765][ T6955] Read of size 4 at addr ffff8880340a86d0 by task syz.0.436/6955 [ 152.711326][ T6955] [ 152.713835][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.0.436 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 152.713863][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 152.713885][ T6955] Call Trace: [ 152.713894][ T6955] [ 152.713905][ T6955] dump_stack_lvl+0x189/0x250 [ 152.713936][ T6955] ? rcu_is_watching+0x15/0xb0 [ 152.713961][ T6955] ? __kasan_check_byte+0x12/0x40 [ 152.713988][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.714012][ T6955] ? rcu_is_watching+0x15/0xb0 [ 152.714037][ T6955] ? lock_release+0x4b/0x3e0 [ 152.714058][ T6955] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 152.714085][ T6955] ? __virt_addr_valid+0x1c8/0x5c0 [ 152.714112][ T6955] ? __virt_addr_valid+0x4a5/0x5c0 [ 152.714141][ T6955] print_report+0xd2/0x2b0 [ 152.714161][ T6955] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 152.714187][ T6955] kasan_report+0x118/0x150 [ 152.714213][ T6955] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 152.714244][ T6955] tcp_prune_ofo_queue+0x37e/0x6e0 [ 152.714279][ T6955] tcp_try_rmem_schedule+0xb6b/0x1830 [ 152.714313][ T6955] tcp_data_queue+0x4e3/0x6380 [ 152.714350][ T6955] ? __pfx_tcp_data_queue+0x10/0x10 [ 152.714373][ T6955] ? __pfx_tcp_urg+0x10/0x10 [ 152.714395][ T6955] ? read_tsc+0x9/0x20 [ 152.714416][ T6955] tcp_rcv_established+0xf9e/0x1eb0 [ 152.714442][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 152.714478][ T6955] ? __pfx_tcp_rcv_established+0x10/0x10 [ 152.714500][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 152.714529][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 152.714561][ T6955] ? rt_is_expired+0x250/0x2d0 [ 152.714591][ T6955] ? __pfx_ipv4_dst_check+0x10/0x10 [ 152.714622][ T6955] ? __pfx_ipv4_dst_check+0x10/0x10 [ 152.714666][ T6955] tcp_v4_do_rcv+0xa23/0xce0 [ 152.714698][ T6955] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 152.714726][ T6955] __release_sock+0x21c/0x350 [ 152.714754][ T6955] release_sock+0x5f/0x1f0 [ 152.714782][ T6955] tcp_sendmsg+0x39/0x50 [ 152.714807][ T6955] __sock_sendmsg+0x19c/0x270 [ 152.714834][ T6955] __sys_sendto+0x3bd/0x520 [ 152.714865][ T6955] ? __pfx___sys_sendto+0x10/0x10 [ 152.714893][ T6955] ? do_futex+0x333/0x420 [ 152.714941][ T6955] ? rcu_is_watching+0x15/0xb0 [ 152.714968][ T6955] __x64_sys_sendto+0xde/0x100 [ 152.715000][ T6955] do_syscall_64+0xfa/0x3b0 [ 152.715029][ T6955] ? lockdep_hardirqs_on+0x9c/0x150 [ 152.715055][ T6955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.715076][ T6955] ? clear_bhb_loop+0x60/0xb0 [ 152.715099][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.715121][ T6955] RIP: 0033:0x7f245238e929 [ 152.715146][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.715164][ T6955] RSP: 002b:00007f2453204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 152.715192][ T6955] RAX: ffffffffffffffda RBX: 00007f24525b5fa0 RCX: 00007f245238e929 [ 152.715208][ T6955] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 152.715222][ T6955] RBP: 00007f2452410b39 R08: 0000000000000000 R09: 0000000000000000 [ 152.715236][ T6955] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 152.715255][ T6955] R13: 0000000000000000 R14: 00007f24525b5fa0 R15: 00007ffe711d8948 [ 152.715279][ T6955] [ 152.715287][ T6955] [ 153.070692][ T6955] Allocated by task 6955: [ 153.076122][ T6955] kasan_save_track+0x3e/0x80 [ 153.081509][ T6955] __kasan_slab_alloc+0x6c/0x80 [ 153.087710][ T6955] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 153.094272][ T6955] __alloc_skb+0x112/0x2d0 [ 153.099278][ T6955] tcp_stream_alloc_skb+0x3d/0x340 [ 153.104683][ T6955] tcp_write_xmit+0xeec/0x67f0 [ 153.109601][ T6955] __tcp_push_pending_frames+0x97/0x360 [ 153.115365][ T6955] tcp_rcv_established+0x1012/0x1eb0 [ 153.120855][ T6955] tcp_v4_do_rcv+0xa23/0xce0 [ 153.125816][ T6955] __release_sock+0x21c/0x350 [ 153.131120][ T6955] release_sock+0x5f/0x1f0 [ 153.135746][ T6955] tcp_sendmsg+0x39/0x50 [ 153.140024][ T6955] __sock_sendmsg+0x19c/0x270 [ 153.144735][ T6955] __sys_sendto+0x3bd/0x520 [ 153.149352][ T6955] __x64_sys_sendto+0xde/0x100 [ 153.154164][ T6955] do_syscall_64+0xfa/0x3b0 [ 153.158877][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.164798][ T6955] [ 153.167136][ T6955] Freed by task 6955: [ 153.171349][ T6955] kasan_save_track+0x3e/0x80 [ 153.176406][ T6955] kasan_save_free_info+0x46/0x50 [ 153.182146][ T6955] __kasan_slab_free+0x62/0x70 [ 153.187293][ T6955] kmem_cache_free+0x18f/0x400 [ 153.192421][ T6955] tcp_prune_ofo_queue+0x198/0x6e0 [ 153.198515][ T6955] tcp_try_rmem_schedule+0xb6b/0x1830 [ 153.204794][ T6955] tcp_data_queue+0x4e3/0x6380 [ 153.209689][ T6955] tcp_rcv_established+0xf9e/0x1eb0 [ 153.215026][ T6955] tcp_v4_do_rcv+0xa23/0xce0 [ 153.219749][ T6955] __release_sock+0x21c/0x350 [ 153.224682][ T6955] release_sock+0x5f/0x1f0 [ 153.229170][ T6955] tcp_sendmsg+0x39/0x50 [ 153.233549][ T6955] __sock_sendmsg+0x19c/0x270 [ 153.239045][ T6955] __sys_sendto+0x3bd/0x520 [ 153.243850][ T6955] __x64_sys_sendto+0xde/0x100 [ 153.248817][ T6955] do_syscall_64+0xfa/0x3b0 [ 153.253728][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.260631][ T6955] [ 153.263205][ T6955] The buggy address belongs to the object at ffff8880340a8500 [ 153.263205][ T6955] which belongs to the cache skbuff_fclone_cache of size 488 [ 153.279823][ T6955] The buggy address is located 464 bytes inside of [ 153.279823][ T6955] freed 488-byte region [ffff8880340a8500, ffff8880340a86e8) [ 153.295631][ T6955] [ 153.298495][ T6955] The buggy address belongs to the physical page: [ 153.307614][ T6955] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x340a8 [ 153.317109][ T6955] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.326939][ T6955] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 153.336722][ T6955] page_type: f5(slab) [ 153.341076][ T6955] raw: 00fff00000000040 ffff888140ae0b40 0000000000000000 dead000000000001 [ 153.350462][ T6955] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 153.360155][ T6955] head: 00fff00000000040 ffff888140ae0b40 0000000000000000 dead000000000001 [ 153.371105][ T6955] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 153.381112][ T6955] head: 00fff00000000001 ffffea0000d02a01 00000000ffffffff 00000000ffffffff [ 153.390237][ T6955] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 153.399261][ T6955] page dumped because: kasan: bad access detected [ 153.406015][ T6955] page_owner tracks the page as allocated [ 153.412286][ T6955] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6010, tgid 6009 (syz.0.19), ts 116393975654, free_ts 116209665435 [ 153.435773][ T6955] post_alloc_hook+0x240/0x2a0 [ 153.440727][ T6955] get_page_from_freelist+0x21e4/0x22c0 [ 153.446563][ T6955] __alloc_frozen_pages_noprof+0x181/0x370 [ 153.452399][ T6955] alloc_pages_mpol+0x232/0x4a0 [ 153.457273][ T6955] allocate_slab+0x8a/0x3b0 [ 153.461975][ T6955] ___slab_alloc+0xbfc/0x1480 [ 153.466730][ T6955] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 153.473268][ T6955] __alloc_skb+0x112/0x2d0 [ 153.478605][ T6955] tcp_stream_alloc_skb+0x3d/0x340 [ 153.484295][ T6955] tcp_sendmsg_locked+0xefc/0x56d0 [ 153.489604][ T6955] tcp_sendmsg+0x2f/0x50 [ 153.494509][ T6955] __sock_sendmsg+0x19c/0x270 [ 153.499497][ T6955] __sys_sendto+0x3bd/0x520 [ 153.504456][ T6955] __x64_sys_sendto+0xde/0x100 [ 153.509529][ T6955] do_syscall_64+0xfa/0x3b0 [ 153.515034][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.521419][ T6955] page last free pid 6028 tgid 6028 stack trace: [ 153.528206][ T6955] __free_frozen_pages+0xc71/0xe70 [ 153.533901][ T6955] pagetable_dtor_free+0x2d2/0x3b0 [ 153.539520][ T6955] __mmdrop+0xb5/0x460 [ 153.544086][ T6955] exit_mm+0x1da/0x2c0 [ 153.548464][ T6955] do_exit+0x648/0x22e0 [ 153.552954][ T6955] do_group_exit+0x21c/0x2d0 [ 153.557940][ T6955] __x64_sys_exit_group+0x3f/0x40 [ 153.563240][ T6955] x64_sys_call+0x21ba/0x21c0 [ 153.568135][ T6955] do_syscall_64+0xfa/0x3b0 [ 153.573020][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.579729][ T6955] [ 153.582413][ T6955] Memory state around the buggy address: [ 153.588628][ T6955] ffff8880340a8580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.597679][ T6955] ffff8880340a8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.606405][ T6955] >ffff8880340a8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 153.614924][ T6955] ^ [ 153.622961][ T6955] ffff8880340a8700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.632828][ T6955] ffff8880340a8780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 153.643908][ T6955] ================================================================== [ 153.668246][ T6955] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.676142][ T6955] CPU: 1 UID: 0 PID: 6955 Comm: syz.0.436 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 153.690674][ T6955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 153.701738][ T6955] Call Trace: [ 153.705055][ T6955] [ 153.708018][ T6955] dump_stack_lvl+0x99/0x250 [ 153.714517][ T6955] ? __asan_memcpy+0x40/0x70 [ 153.723459][ T6955] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.728989][ T6955] ? __pfx__printk+0x10/0x10 [ 153.734314][ T6955] panic+0x2db/0x790 [ 153.738609][ T6955] ? __pfx_preempt_schedule+0x10/0x10 [ 153.744194][ T6955] ? __pfx_panic+0x10/0x10 [ 153.749192][ T6955] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 153.755323][ T6955] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 153.761705][ T6955] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 153.768778][ T6955] check_panic_on_warn+0x89/0xb0 [ 153.774307][ T6955] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 153.779639][ T6955] end_report+0x78/0x160 [ 153.784100][ T6955] kasan_report+0x129/0x150 [ 153.788979][ T6955] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 153.794308][ T6955] tcp_prune_ofo_queue+0x37e/0x6e0 [ 153.799452][ T6955] tcp_try_rmem_schedule+0xb6b/0x1830 [ 153.804932][ T6955] tcp_data_queue+0x4e3/0x6380 [ 153.809728][ T6955] ? __pfx_tcp_data_queue+0x10/0x10 [ 153.814936][ T6955] ? __pfx_tcp_urg+0x10/0x10 [ 153.819633][ T6955] ? read_tsc+0x9/0x20 [ 153.823716][ T6955] tcp_rcv_established+0xf9e/0x1eb0 [ 153.828943][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 153.833669][ T6955] ? __pfx_tcp_rcv_established+0x10/0x10 [ 153.839347][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 153.844163][ T6955] ? rt_is_expired+0x1c/0x2d0 [ 153.849417][ T6955] ? rt_is_expired+0x250/0x2d0 [ 153.854308][ T6955] ? __pfx_ipv4_dst_check+0x10/0x10 [ 153.860325][ T6955] ? __pfx_ipv4_dst_check+0x10/0x10 [ 153.866293][ T6955] tcp_v4_do_rcv+0xa23/0xce0 [ 153.871308][ T6955] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 153.876722][ T6955] __release_sock+0x21c/0x350 [ 153.881822][ T6955] release_sock+0x5f/0x1f0 [ 153.886458][ T6955] tcp_sendmsg+0x39/0x50 [ 153.891121][ T6955] __sock_sendmsg+0x19c/0x270 [ 153.896355][ T6955] __sys_sendto+0x3bd/0x520 [ 153.901599][ T6955] ? __pfx___sys_sendto+0x10/0x10 [ 153.907102][ T6955] ? do_futex+0x333/0x420 [ 153.911481][ T6955] ? rcu_is_watching+0x15/0xb0 [ 153.916277][ T6955] __x64_sys_sendto+0xde/0x100 [ 153.921424][ T6955] do_syscall_64+0xfa/0x3b0 [ 153.926137][ T6955] ? lockdep_hardirqs_on+0x9c/0x150 [ 153.931744][ T6955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.938224][ T6955] ? clear_bhb_loop+0x60/0xb0 [ 153.943316][ T6955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.949349][ T6955] RIP: 0033:0x7f245238e929 [ 153.954080][ T6955] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.974601][ T6955] RSP: 002b:00007f2453204038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 153.983413][ T6955] RAX: ffffffffffffffda RBX: 00007f24525b5fa0 RCX: 00007f245238e929 [ 153.991426][ T6955] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 153.999428][ T6955] RBP: 00007f2452410b39 R08: 0000000000000000 R09: 0000000000000000 [ 154.007426][ T6955] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 154.015944][ T6955] R13: 0000000000000000 R14: 00007f24525b5fa0 R15: 00007ffe711d8948 [ 154.023948][ T6955] [ 154.027301][ T6955] Kernel Offset: disabled [ 154.031624][ T6955] Rebooting in 86400 seconds..