last executing test programs: 2.039222173s ago: executing program 0 (id=132): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) close(0x3) 1.986177348s ago: executing program 1 (id=134): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x29, 0x0, @local, @local, {[@hopopts={0x88, 0x1, '\x00', [@generic={0x13, 0x7, "7152d593bad94b"}]}], "c32960dbe43639ce"}}}}}, 0x0) 1.8512503s ago: executing program 3 (id=136): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x7c, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x50, 0x2, [@TCA_U32_SEL={0x1a, 0x5, {0xb, 0xf, 0x3, 0x2, 0x7ae, 0x9, 0xb11, 0x65, [{0x7fff, 0x401, 0x5, 0x6}, {0x0, 0xe1, 0x7, 0xfffffffd}, {0x3ff, 0xa, 0x76800, 0xd}]}}, @TCA_U32_CLASSID={0x8, 0x1, {0x1, 0x3}}, @TCA_U32_HASH={0x0, 0x2, 0x9}]}}]}, 0x7c}}, 0x20040054) 1.72355241s ago: executing program 1 (id=137): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000001e008d2a2abd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00'], 0x24}}, 0x0) 1.527487778s ago: executing program 2 (id=139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10) 1.430954473s ago: executing program 1 (id=140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 1.389331276s ago: executing program 3 (id=141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 1.222348125s ago: executing program 4 (id=142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 1.171134569s ago: executing program 2 (id=143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, 0x0, 0x0) 1.154804891s ago: executing program 0 (id=144): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000008000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0xfffffef3, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x5562, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 995.373338ms ago: executing program 2 (id=145): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x8e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x2, 0x11, 0x0, 0x0, {[@sack={0x5, 0x2a, [0x84, 0x5, 0x6, 0xffff, 0x3214, 0x4, 0xffff, 0x80000, 0x4, 0x9]}, @window={0x3, 0x3}, @exp_smc={0xfe, 0x6}, @fastopen={0x22, 0x8, "51e4f3b8c6c6"}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 962.659291ms ago: executing program 4 (id=146): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 919.36654ms ago: executing program 3 (id=147): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x29, 0x0, @local, @local, {[@hopopts={0x88, 0x1, '\x00', [@generic={0x13, 0x7, "7152d593bad94b"}]}], "c32960dbe43639ce"}}}}}, 0x0) 807.762182ms ago: executing program 0 (id=148): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0) 735.076516ms ago: executing program 4 (id=149): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0xff, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x200, 0x0, 0x4}}}}}}}, 0x0) 654.565236ms ago: executing program 3 (id=150): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) 632.982547ms ago: executing program 0 (id=151): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f00000000c0), &(0x7f0000000040), &(0x7f0000000000), 0xf4a, r0}, 0x38) 592.387724ms ago: executing program 1 (id=152): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000300)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x10000000000, 0x12) 583.756553ms ago: executing program 2 (id=153): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) sendto$inet(r0, &(0x7f0000000640)="25c6", 0x2, 0x44088, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 519.39349ms ago: executing program 4 (id=154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x0, 0x0}, 0x10) 335.188482ms ago: executing program 2 (id=155): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 334.018564ms ago: executing program 0 (id=156): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 333.748099ms ago: executing program 1 (id=157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x44, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_ACT={0x4}, @TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c021}, 0x2004c8d4) 250.885884ms ago: executing program 4 (id=158): r0 = socket(0xa, 0x5, 0x0) r1 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000700)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x5}, &(0x7f0000000240)=0x8) 217.616274ms ago: executing program 3 (id=159): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3010000}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x51}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 87.088496ms ago: executing program 0 (id=160): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x20, 0x29, 0x0, @local, @local, {[@hopopts={0x88, 0x1, '\x00', [@generic={0x13, 0x7, "7152d593bad94b"}]}], "c32960dbe43639ce"}}}}}, 0x0) 86.629736ms ago: executing program 2 (id=161): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000000f00)="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", 0x50f}], 0x1}}], 0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 11.354363ms ago: executing program 1 (id=162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000054000380500000803e0001"], 0x80}}, 0x8000) 11.003283ms ago: executing program 4 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d80)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) 0s ago: executing program 3 (id=164): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) sendmsg$NFT_BATCH(r0, 0x0, 0x40) syz_emit_ethernet(0xfc0, &(0x7f00000013c0)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, "6196b2", 0xf8a, 0x11, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, {[@srh={0x67, 0x0, 0x4, 0x0, 0x5, 0x28, 0x2}], {0x4e24, 0x4e20, 0xf82, 0x0, @gue={{0x2, 0x1, 0x1, 0x3, 0x100, @val=0x80}, "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"}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. [ 78.755959][ T5835] cgroup: Unknown subsys name 'net' [ 78.891470][ T5835] cgroup: Unknown subsys name 'cpuset' [ 78.900895][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.638588][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.916390][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.939512][ T5862] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.942429][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.953697][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.954924][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.963566][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.977276][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.984907][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.994228][ T5861] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.002681][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.007915][ T5862] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.018471][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.018757][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.033903][ T5862] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.034420][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.041329][ T5862] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.048434][ T5865] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.061023][ T5862] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.065477][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.070512][ T5862] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.076608][ T5865] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.083635][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.103763][ T5865] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.111001][ T5856] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.132659][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.840082][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 85.906407][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 85.967394][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 85.978911][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 86.268032][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.275665][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.285123][ T5859] bridge_slave_0: entered allmulticast mode [ 86.293211][ T5859] bridge_slave_0: entered promiscuous mode [ 86.337369][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.345287][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.352680][ T5847] bridge_slave_0: entered allmulticast mode [ 86.360805][ T5847] bridge_slave_0: entered promiscuous mode [ 86.369342][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.376522][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.384323][ T5847] bridge_slave_1: entered allmulticast mode [ 86.392742][ T5847] bridge_slave_1: entered promiscuous mode [ 86.412939][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.420280][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.427452][ T5859] bridge_slave_1: entered allmulticast mode [ 86.435305][ T5859] bridge_slave_1: entered promiscuous mode [ 86.442303][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 86.466801][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.474317][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.482070][ T5845] bridge_slave_0: entered allmulticast mode [ 86.489473][ T5845] bridge_slave_0: entered promiscuous mode [ 86.533071][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.540836][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.548640][ T5846] bridge_slave_0: entered allmulticast mode [ 86.555782][ T5846] bridge_slave_0: entered promiscuous mode [ 86.564125][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.572620][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.579981][ T5845] bridge_slave_1: entered allmulticast mode [ 86.587100][ T5845] bridge_slave_1: entered promiscuous mode [ 86.597235][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.633366][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.642915][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.650249][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.657430][ T5846] bridge_slave_1: entered allmulticast mode [ 86.666157][ T5846] bridge_slave_1: entered promiscuous mode [ 86.689374][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.715852][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.822397][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.834145][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.855286][ T5847] team0: Port device team_slave_0 added [ 86.864773][ T5847] team0: Port device team_slave_1 added [ 86.943775][ T5859] team0: Port device team_slave_0 added [ 86.960351][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.979598][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.072027][ T5859] team0: Port device team_slave_1 added [ 87.158411][ T5166] Bluetooth: hci1: command tx timeout [ 87.159192][ T5865] Bluetooth: hci2: command tx timeout [ 87.164072][ T5166] Bluetooth: hci3: command tx timeout [ 87.184485][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.197127][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.228615][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.237818][ T5854] Bluetooth: hci0: command tx timeout [ 87.244829][ T5166] Bluetooth: hci4: command tx timeout [ 87.282416][ T5845] team0: Port device team_slave_0 added [ 87.288842][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.296148][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.303966][ T5849] bridge_slave_0: entered allmulticast mode [ 87.312601][ T5849] bridge_slave_0: entered promiscuous mode [ 87.321508][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.329392][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.356123][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.385622][ T5846] team0: Port device team_slave_0 added [ 87.393920][ T5845] team0: Port device team_slave_1 added [ 87.416207][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.425303][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.433186][ T5849] bridge_slave_1: entered allmulticast mode [ 87.441727][ T5849] bridge_slave_1: entered promiscuous mode [ 87.458102][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.465186][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.491283][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.505964][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.513375][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.540054][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.553194][ T5846] team0: Port device team_slave_1 added [ 87.590271][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.597240][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.624159][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.668214][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.698720][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.705709][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.732384][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.756339][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.770658][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.779833][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.807324][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.819939][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.827099][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.854103][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.963602][ T5849] team0: Port device team_slave_0 added [ 87.977424][ T5847] hsr_slave_0: entered promiscuous mode [ 87.986713][ T5847] hsr_slave_1: entered promiscuous mode [ 88.013115][ T5845] hsr_slave_0: entered promiscuous mode [ 88.019887][ T5845] hsr_slave_1: entered promiscuous mode [ 88.026200][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.034740][ T5845] Cannot create hsr debugfs directory [ 88.056322][ T5849] team0: Port device team_slave_1 added [ 88.094657][ T5859] hsr_slave_0: entered promiscuous mode [ 88.103509][ T5859] hsr_slave_1: entered promiscuous mode [ 88.109915][ T5859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.118006][ T5859] Cannot create hsr debugfs directory [ 88.203246][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.211194][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.238966][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.271928][ T5846] hsr_slave_0: entered promiscuous mode [ 88.279362][ T5846] hsr_slave_1: entered promiscuous mode [ 88.285841][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.300103][ T5846] Cannot create hsr debugfs directory [ 88.332212][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.340608][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.367832][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.569184][ T5849] hsr_slave_0: entered promiscuous mode [ 88.576024][ T5849] hsr_slave_1: entered promiscuous mode [ 88.582620][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.592490][ T5849] Cannot create hsr debugfs directory [ 88.994424][ T5859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.009990][ T5859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.035367][ T5859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.049331][ T5859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.139486][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.156428][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.189274][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.215376][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.237835][ T5166] Bluetooth: hci2: command tx timeout [ 89.238543][ T5854] Bluetooth: hci1: command tx timeout [ 89.243286][ T5166] Bluetooth: hci3: command tx timeout [ 89.299503][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.315104][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.322538][ T5166] Bluetooth: hci4: command tx timeout [ 89.322589][ T5854] Bluetooth: hci0: command tx timeout [ 89.360751][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.373487][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.471754][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.491788][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.510871][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.541305][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.556400][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.621746][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.657924][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.665194][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.683728][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.691053][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.786859][ T5849] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.822822][ T5849] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.856874][ T5849] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.872928][ T5849] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.015650][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.044984][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.134930][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.184330][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.191569][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.230887][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.250778][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.280277][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.287525][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.314465][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.321665][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.354566][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.366936][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.374172][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.413704][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.420891][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.462370][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.469584][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.504766][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.551690][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.617115][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.705251][ T4560] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.712614][ T4560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.754947][ T4560] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.762277][ T4560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.891557][ T5859] veth0_vlan: entered promiscuous mode [ 90.993550][ T5859] veth1_vlan: entered promiscuous mode [ 91.167249][ T5859] veth0_macvtap: entered promiscuous mode [ 91.203266][ T5859] veth1_macvtap: entered promiscuous mode [ 91.319093][ T5854] Bluetooth: hci1: command tx timeout [ 91.319147][ T5166] Bluetooth: hci2: command tx timeout [ 91.324530][ T5865] Bluetooth: hci3: command tx timeout [ 91.338420][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.371740][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.400373][ T5854] Bluetooth: hci4: command tx timeout [ 91.405837][ T5854] Bluetooth: hci0: command tx timeout [ 91.421074][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.460260][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.495494][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.508678][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.538852][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.573118][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.651693][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.671625][ T5846] veth0_vlan: entered promiscuous mode [ 91.690536][ T5845] veth0_vlan: entered promiscuous mode [ 91.706124][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.822987][ T5846] veth1_vlan: entered promiscuous mode [ 91.840382][ T5845] veth1_vlan: entered promiscuous mode [ 91.858729][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.866705][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.969127][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.977167][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.977804][ T1207] cfg80211: failed to load regulatory.db [ 92.077442][ T5847] veth0_vlan: entered promiscuous mode [ 92.105506][ T5859] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.124950][ T5845] veth0_macvtap: entered promiscuous mode [ 92.136278][ T5846] veth0_macvtap: entered promiscuous mode [ 92.170824][ T5845] veth1_macvtap: entered promiscuous mode [ 92.193686][ T5846] veth1_macvtap: entered promiscuous mode [ 92.219665][ T5847] veth1_vlan: entered promiscuous mode [ 92.323499][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.337203][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.352340][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.392685][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.401988][ T154] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412801][ T154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.444010][ T154] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.453865][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.474381][ T5849] veth0_vlan: entered promiscuous mode [ 92.499239][ T4560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.541528][ T4560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.555194][ T4560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.567462][ T5847] veth0_macvtap: entered promiscuous mode [ 92.598884][ T4560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.632277][ T5847] veth1_macvtap: entered promiscuous mode [ 92.651756][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 92.687268][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.708305][ T5849] veth1_vlan: entered promiscuous mode [ 92.779236][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.860873][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.873454][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.885009][ T1323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.902159][ T5849] veth0_macvtap: entered promiscuous mode [ 92.932426][ T1323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.958071][ T1323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974471][ T5849] veth1_macvtap: entered promiscuous mode [ 93.005004][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.021383][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.037546][ T1323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.154236][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.171524][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.214420][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.230901][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.241949][ T5977] xt_TCPMSS: Only works on TCP SYN packets [ 93.323142][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.375151][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.401932][ T5854] Bluetooth: hci1: command tx timeout [ 93.407401][ T5854] Bluetooth: hci2: command tx timeout [ 93.413719][ T5865] Bluetooth: hci3: command tx timeout [ 93.469949][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.479260][ T5854] Bluetooth: hci0: command tx timeout [ 93.484708][ T5854] Bluetooth: hci4: command tx timeout [ 93.499633][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.526531][ T154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.590053][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.623353][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.693002][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.794518][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.841735][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.095424][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.123910][ T5996] bridge: RTM_NEWNEIGH with invalid ether address [ 94.133296][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.189678][ T5998] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.371712][ T4560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.417242][ T4560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.934214][ T6017] Zero length message leads to an empty skb [ 95.221019][ T6025] bridge: RTM_NEWNEIGH with invalid ether address [ 95.314893][ T6027] team0: Port device ip6gretap1 added [ 95.634140][ T6037] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.896382][ T6041] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.607354][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.47'. [ 99.408014][ T6090] sctp: [Deprecated]: syz.0.57 (pid 6090) Use of int in max_burst socket option deprecated. [ 99.408014][ T6090] Use struct sctp_assoc_value instead [ 99.661183][ T6095] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 99.672006][ T6098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.61'. [ 100.201721][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 100.587910][ T6122] sctp: [Deprecated]: syz.1.74 (pid 6122) Use of int in max_burst socket option deprecated. [ 100.587910][ T6122] Use struct sctp_assoc_value instead [ 100.786177][ T6127] team0: Port device ip6gretap1 added [ 101.894913][ T6169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.95'. [ 102.102402][ T6178] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 102.153866][ T6180] netlink: 'syz.1.99': attribute type 4 has an invalid length. [ 102.422726][ T6186] team0: Port device ip6gretap1 added [ 102.618891][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.4.108'. [ 103.166836][ T6213] netlink: 'syz.4.115': attribute type 1 has an invalid length. [ 104.450532][ T6220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.326371][ T6220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.450367][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 107.509871][ T6317] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 108.120539][ T6341] ================================================================== [ 108.128662][ T6341] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 108.137110][ T6341] Read of size 4 at addr ffff888030d8ebd0 by task syz.2.161/6341 [ 108.144832][ T6341] [ 108.147172][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.2.161 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 108.147191][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 108.147200][ T6341] Call Trace: [ 108.147207][ T6341] [ 108.147213][ T6341] dump_stack_lvl+0x189/0x250 [ 108.147235][ T6341] ? rcu_is_watching+0x15/0xb0 [ 108.147252][ T6341] ? __kasan_check_byte+0x12/0x40 [ 108.147271][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.147287][ T6341] ? rcu_is_watching+0x15/0xb0 [ 108.147303][ T6341] ? lock_release+0x4b/0x3e0 [ 108.147319][ T6341] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 108.147337][ T6341] ? __virt_addr_valid+0x1c8/0x5c0 [ 108.147355][ T6341] ? __virt_addr_valid+0x4a5/0x5c0 [ 108.147373][ T6341] print_report+0xd2/0x2b0 [ 108.147387][ T6341] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 108.147406][ T6341] kasan_report+0x118/0x150 [ 108.147424][ T6341] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 108.147444][ T6341] tcp_prune_ofo_queue+0x37e/0x6e0 [ 108.147468][ T6341] tcp_try_rmem_schedule+0xb6b/0x1830 [ 108.147489][ T6341] tcp_data_queue+0x4e3/0x6380 [ 108.147512][ T6341] ? __pfx_tcp_data_queue+0x10/0x10 [ 108.147529][ T6341] ? __pfx_tcp_urg+0x10/0x10 [ 108.147544][ T6341] ? read_tsc+0x9/0x20 [ 108.147558][ T6341] tcp_rcv_established+0xf9e/0x1eb0 [ 108.147587][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 108.147617][ T6341] ? __pfx_tcp_rcv_established+0x10/0x10 [ 108.147636][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 108.147662][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 108.147690][ T6341] ? rt_is_expired+0x250/0x2d0 [ 108.147717][ T6341] ? __pfx_ipv4_dst_check+0x10/0x10 [ 108.147745][ T6341] ? __pfx_ipv4_dst_check+0x10/0x10 [ 108.147768][ T6341] tcp_v4_do_rcv+0xa23/0xce0 [ 108.147790][ T6341] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 108.147807][ T6341] __release_sock+0x21c/0x350 [ 108.147825][ T6341] release_sock+0x5f/0x1f0 [ 108.147844][ T6341] tcp_sendmsg+0x39/0x50 [ 108.147861][ T6341] __sock_sendmsg+0x19c/0x270 [ 108.147878][ T6341] __sys_sendto+0x3bd/0x520 [ 108.147898][ T6341] ? __pfx___sys_sendto+0x10/0x10 [ 108.147916][ T6341] ? do_futex+0x395/0x420 [ 108.147944][ T6341] ? rcu_is_watching+0x15/0xb0 [ 108.147962][ T6341] __x64_sys_sendto+0xde/0x100 [ 108.147982][ T6341] do_syscall_64+0xfa/0x3b0 [ 108.148001][ T6341] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.148019][ T6341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.148032][ T6341] ? clear_bhb_loop+0x60/0xb0 [ 108.148048][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.148061][ T6341] RIP: 0033:0x7fa9a2f8e929 [ 108.148075][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.148087][ T6341] RSP: 002b:00007fa9a3dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 108.148104][ T6341] RAX: ffffffffffffffda RBX: 00007fa9a31b5fa0 RCX: 00007fa9a2f8e929 [ 108.148115][ T6341] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 108.148124][ T6341] RBP: 00007fa9a3010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 108.148133][ T6341] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 108.148142][ T6341] R13: 0000000000000000 R14: 00007fa9a31b5fa0 R15: 00007fff22ddebc8 [ 108.148157][ T6341] [ 108.148162][ T6341] [ 108.467407][ T6341] Allocated by task 6341: [ 108.471740][ T6341] kasan_save_track+0x3e/0x80 [ 108.476428][ T6341] __kasan_slab_alloc+0x6c/0x80 [ 108.481298][ T6341] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 108.487370][ T6341] __alloc_skb+0x112/0x2d0 [ 108.491795][ T6341] tcp_stream_alloc_skb+0x3d/0x340 [ 108.496993][ T6341] tcp_write_xmit+0xeec/0x67f0 [ 108.501766][ T6341] __tcp_push_pending_frames+0x97/0x360 [ 108.507415][ T6341] tcp_rcv_established+0x1012/0x1eb0 [ 108.512697][ T6341] tcp_v4_do_rcv+0xa23/0xce0 [ 108.517374][ T6341] __release_sock+0x21c/0x350 [ 108.522312][ T6341] release_sock+0x5f/0x1f0 [ 108.526742][ T6341] tcp_sendmsg+0x39/0x50 [ 108.531071][ T6341] __sock_sendmsg+0x19c/0x270 [ 108.535749][ T6341] __sys_sendto+0x3bd/0x520 [ 108.540262][ T6341] __x64_sys_sendto+0xde/0x100 [ 108.545289][ T6341] do_syscall_64+0xfa/0x3b0 [ 108.549974][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.555909][ T6341] [ 108.558235][ T6341] Freed by task 6341: [ 108.562381][ T6341] kasan_save_track+0x3e/0x80 [ 108.567238][ T6341] kasan_save_free_info+0x46/0x50 [ 108.572263][ T6341] __kasan_slab_free+0x62/0x70 [ 108.577026][ T6341] kmem_cache_free+0x18f/0x400 [ 108.581796][ T6341] tcp_prune_ofo_queue+0x198/0x6e0 [ 108.586927][ T6341] tcp_try_rmem_schedule+0xb6b/0x1830 [ 108.592413][ T6341] tcp_data_queue+0x4e3/0x6380 [ 108.597204][ T6341] tcp_rcv_established+0xf9e/0x1eb0 [ 108.602423][ T6341] tcp_v4_do_rcv+0xa23/0xce0 [ 108.607025][ T6341] __release_sock+0x21c/0x350 [ 108.611793][ T6341] release_sock+0x5f/0x1f0 [ 108.616226][ T6341] tcp_sendmsg+0x39/0x50 [ 108.620704][ T6341] __sock_sendmsg+0x19c/0x270 [ 108.625480][ T6341] __sys_sendto+0x3bd/0x520 [ 108.629982][ T6341] __x64_sys_sendto+0xde/0x100 [ 108.634919][ T6341] do_syscall_64+0xfa/0x3b0 [ 108.639469][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.645372][ T6341] [ 108.647891][ T6341] The buggy address belongs to the object at ffff888030d8ea00 [ 108.647891][ T6341] which belongs to the cache skbuff_fclone_cache of size 488 [ 108.663256][ T6341] The buggy address is located 464 bytes inside of [ 108.663256][ T6341] freed 488-byte region [ffff888030d8ea00, ffff888030d8ebe8) [ 108.677485][ T6341] [ 108.679810][ T6341] The buggy address belongs to the physical page: [ 108.686389][ T6341] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30d8e [ 108.695157][ T6341] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.703663][ T6341] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.711553][ T6341] page_type: f5(slab) [ 108.715630][ T6341] raw: 00fff00000000040 ffff888140e8fb40 ffffea0001cec380 dead000000000003 [ 108.724296][ T6341] raw: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 108.732964][ T6341] head: 00fff00000000040 ffff888140e8fb40 ffffea0001cec380 dead000000000003 [ 108.741674][ T6341] head: 0000000000000000 00000000800c000c 00000000f5000000 0000000000000000 [ 108.750343][ T6341] head: 00fff00000000001 ffffea0000c36381 00000000ffffffff 00000000ffffffff [ 108.759103][ T6341] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 108.767781][ T6341] page dumped because: kasan: bad access detected [ 108.774193][ T6341] page_owner tracks the page as allocated [ 108.780260][ T6341] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5835, tgid 5835 (syz-executor), ts 81112505335, free_ts 79158209885 [ 108.801623][ T6341] post_alloc_hook+0x240/0x2a0 [ 108.806401][ T6341] get_page_from_freelist+0x21e4/0x22c0 [ 108.811952][ T6341] __alloc_frozen_pages_noprof+0x181/0x370 [ 108.817774][ T6341] alloc_pages_mpol+0x232/0x4a0 [ 108.822730][ T6341] allocate_slab+0x8a/0x3b0 [ 108.827233][ T6341] ___slab_alloc+0xbfc/0x1480 [ 108.832088][ T6341] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 108.838247][ T6341] __alloc_skb+0x112/0x2d0 [ 108.842690][ T6341] tcp_stream_alloc_skb+0x3d/0x340 [ 108.847894][ T6341] tcp_sendmsg_locked+0xefc/0x56d0 [ 108.853100][ T6341] tcp_sendmsg+0x2f/0x50 [ 108.857444][ T6341] __sock_sendmsg+0x19c/0x270 [ 108.862152][ T6341] sock_write_iter+0x258/0x330 [ 108.867023][ T6341] vfs_write+0x54b/0xa90 [ 108.871276][ T6341] ksys_write+0x145/0x250 [ 108.875626][ T6341] do_syscall_64+0xfa/0x3b0 [ 108.880145][ T6341] page last free pid 5838 tgid 5838 stack trace: [ 108.886477][ T6341] __free_frozen_pages+0xc71/0xe70 [ 108.891592][ T6341] pagetable_dtor_free+0x2d2/0x3b0 [ 108.896708][ T6341] __mmdrop+0xb5/0x460 [ 108.900873][ T6341] exec_mmap+0x6ac/0x7d0 [ 108.905114][ T6341] begin_new_exec+0x129c/0x2120 [ 108.910220][ T6341] load_elf_binary+0x96a/0x2790 [ 108.915070][ T6341] bprm_execve+0x99c/0x1450 [ 108.919577][ T6341] do_execveat_common+0x510/0x6a0 [ 108.924692][ T6341] __x64_sys_execve+0x94/0xb0 [ 108.929368][ T6341] do_syscall_64+0xfa/0x3b0 [ 108.933876][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.939856][ T6341] [ 108.942185][ T6341] Memory state around the buggy address: [ 108.947812][ T6341] ffff888030d8ea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.955902][ T6341] ffff888030d8eb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.963967][ T6341] >ffff888030d8eb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 108.972108][ T6341] ^ [ 108.978776][ T6341] ffff888030d8ec00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 108.986832][ T6341] ffff888030d8ec80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 108.994889][ T6341] ================================================================== [ 109.121417][ T6340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 109.131834][ T6341] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.139070][ T6341] CPU: 0 UID: 0 PID: 6341 Comm: syz.2.161 Not tainted 6.16.0-rc5-syzkaller-01461-g511ad4c26446 #0 PREEMPT(full) [ 109.151065][ T6341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 109.161226][ T6341] Call Trace: [ 109.164622][ T6341] [ 109.167603][ T6341] dump_stack_lvl+0x99/0x250 [ 109.172225][ T6341] ? __asan_memcpy+0x40/0x70 [ 109.176819][ T6341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.182022][ T6341] ? __pfx__printk+0x10/0x10 [ 109.186640][ T6341] panic+0x2db/0x790 [ 109.190640][ T6341] ? __pfx_preempt_schedule+0x10/0x10 [ 109.196044][ T6341] ? __pfx_panic+0x10/0x10 [ 109.200657][ T6341] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 109.206559][ T6341] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.213714][ T6341] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 109.219024][ T6341] check_panic_on_warn+0x89/0xb0 [ 109.224322][ T6341] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 109.230062][ T6341] end_report+0x78/0x160 [ 109.234330][ T6341] kasan_report+0x129/0x150 [ 109.239046][ T6341] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 109.244360][ T6341] tcp_prune_ofo_queue+0x37e/0x6e0 [ 109.249481][ T6341] tcp_try_rmem_schedule+0xb6b/0x1830 [ 109.254946][ T6341] tcp_data_queue+0x4e3/0x6380 [ 109.259812][ T6341] ? __pfx_tcp_data_queue+0x10/0x10 [ 109.265024][ T6341] ? __pfx_tcp_urg+0x10/0x10 [ 109.269741][ T6341] ? read_tsc+0x9/0x20 [ 109.273820][ T6341] tcp_rcv_established+0xf9e/0x1eb0 [ 109.279021][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 109.283711][ T6341] ? __pfx_tcp_rcv_established+0x10/0x10 [ 109.289518][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 109.294230][ T6341] ? rt_is_expired+0x1c/0x2d0 [ 109.298938][ T6341] ? rt_is_expired+0x250/0x2d0 [ 109.303906][ T6341] ? __pfx_ipv4_dst_check+0x10/0x10 [ 109.309193][ T6341] ? __pfx_ipv4_dst_check+0x10/0x10 [ 109.314570][ T6341] tcp_v4_do_rcv+0xa23/0xce0 [ 109.319261][ T6341] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 109.324553][ T6341] __release_sock+0x21c/0x350 [ 109.329234][ T6341] release_sock+0x5f/0x1f0 [ 109.333935][ T6341] tcp_sendmsg+0x39/0x50 [ 109.338182][ T6341] __sock_sendmsg+0x19c/0x270 [ 109.342867][ T6341] __sys_sendto+0x3bd/0x520 [ 109.347374][ T6341] ? __pfx___sys_sendto+0x10/0x10 [ 109.352405][ T6341] ? do_futex+0x395/0x420 [ 109.357011][ T6341] ? rcu_is_watching+0x15/0xb0 [ 109.361881][ T6341] __x64_sys_sendto+0xde/0x100 [ 109.366687][ T6341] do_syscall_64+0xfa/0x3b0 [ 109.371308][ T6341] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.376517][ T6341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.382673][ T6341] ? clear_bhb_loop+0x60/0xb0 [ 109.387353][ T6341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.393245][ T6341] RIP: 0033:0x7fa9a2f8e929 [ 109.397752][ T6341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.417443][ T6341] RSP: 002b:00007fa9a3dc9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 109.425881][ T6341] RAX: ffffffffffffffda RBX: 00007fa9a31b5fa0 RCX: 00007fa9a2f8e929 [ 109.433857][ T6341] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 109.442096][ T6341] RBP: 00007fa9a3010ca1 R08: 0000000000000000 R09: 0000000000000000 [ 109.450082][ T6341] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 109.458143][ T6341] R13: 0000000000000000 R14: 00007fa9a31b5fa0 R15: 00007fff22ddebc8 [ 109.466134][ T6341] [ 109.469443][ T6341] Kernel Offset: disabled [ 109.473769][ T6341] Rebooting in 86400 seconds..