last executing test programs: 7.223051982s ago: executing program 4 (id=758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="200100002100010000000000000000000000000000000000000005ff7f0000110000000000000000000000000000000000000000000000000000000000000000f841df66873d75a3b7bd5b2b3242f6cdbefa6bee917dc908cc44739c488b0633128dce7a3a262de491bcd063f9685f5a75a84e6199ecc70fd36a831255dd599fb56aba091baf55e13158158b33959633938457ca130e91c72830066c1b799ae72b87e4681e285584f5af2255ca91731d3eb6d54e94c0dcbcf3eddb163597b38a92cf15a9f9a1c2885661bd95f2beae", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="b36b6e0000000000500011007f000001000000000000000000000000fe800000000000000000000000000000ac141410000000000000000000000000ac14143700000000000000000000000000000000000000000000000077000200637279707464286362632d6165732d63652900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000780100000edfb970e3dad672b4f56a3a8e7787c37be4fc7e8b0aafec4ea43fdbba4053b27b0b208ff717430d4763f5d3de823a0008001e000f000000"], 0x120}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaafd00000c0004"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) r4 = socket(0x10, 0x3, 0x0) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="0e4326bd7000ffdbdf250100002c0800040003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc800) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0xf, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x9, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0x20, 0xffffffff, 0x25dfdbfa, {0x0, 0x0, 0x0, r6, {0xe}, {0x10, 0xffff}, {0x4, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000080000000850000004500050095000000517dfa49"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001c0002002cbd7000fddbdf253208001800a8ffff000800000000001e00082300001c000400fdff4e224e230000fc0000000000000000000000000000000000009282abbb"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x24000000) (async) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000cecc929be5430e00d0ae00830000000100000000000012000000000000000000"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="78811b8d2e817706a46d7e75a6ade59c2687ee1b", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r2, @ANYRES32=r8, @ANYRESHEX=r8], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r11, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000140)={'hsr0\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="c504010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r12, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8002401}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0100001c0000012bbd7000fbdbdf25320c0015005b0735000900000028001a0064010101000000000000000000000000640101020000000000000000000000000a00072d2c001300ac14140d000000000000000000000000fe880000000000000000000000000001000000000a00000028001a00fe880000000000000000000000000001fe8000000000000000000000000000bb02006b0684000500ff020000000000000000000000000001000004d66c00000002000000ff0100000000000000000000000000010635000003000300080000000008000009000000ac1e0101000000000000000000000000000004d3320000000a0000000000000000000000000001000000000401050059e0000001000000000400001c000400fdff4e234e2000"/311], 0x13c}}, 0x4040000) (async, rerun: 32) sendmsg$nl_xfrm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYRESOCT=r7, @ANYRES32=0x0, @ANYRES8=r7, @ANYBLOB="ffffffff000000000000000000000000000004d22b000000640101010000000000000000000000000a0000000000000002000000000000001ee30000000000008500000000000000001000000000000007000000000000005f6ff2e0ffffffff0000008000000000a604000000000000010000e90100000009000000000000000700000000000000325a0000070000000900000029bd700004350000020004078200000000000000"], 0x10c}, 0x1, 0x0, 0x0, 0xe847e68d035e0471}, 0x0) 6.629260254s ago: executing program 4 (id=766): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYRES64=0x0], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r1, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000004000000032000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000a39c77056ee1a741477cd3b04a4b00000000"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4, 0xfffffffd) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB="000000000103000002000300147f0180c2000000aaaaaaaaaa32cf943b2c0aad8812a39f7126dc4388a8360081000f0200040154d6bb3bc9af88094405d3aa49e889fbff9b8cec8f097e023fc2b061b971452abee948e048e52804efae96041f079d751f7de463ff6b6b51f4cdf7b2ee6fe266fb715b232d0edf059cc9d636b041597c121a3f15f318ccc7f848"], 0x6e) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='svcrdma_send_pullup\x00', r4}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000400000000021000000020013000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r8}, 0x38) r9 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r9) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x14}}, 0x0) recvmmsg(r9, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)=ANY=[@ANYBLOB="84010000", @ANYRES64=r7, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800020000000000080009000000000008000a000000000008000a00000000000000090000000000080009000000000008000a000000000008000a000000000008000a000000000008000a000000000004000b801c000b80080009000000000008000a0000000000080009000000000024000b80080009"], 0x184}}, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x27ff, 0x2}, 0xe) 5.841812153s ago: executing program 4 (id=784): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, 0x0, 0x0) sendfile(r0, r4, 0x0, 0xf03a0005) 5.68965804s ago: executing program 4 (id=787): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) unshare(0x4000600) (async) unshare(0x4000600) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) unshare(0x2040400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pwrite64(r3, 0x0, 0x0, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x62) unshare(0x4000880) 5.480635421s ago: executing program 4 (id=791): r0 = socket(0xb, 0x3, 0xfffffffe) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0xb1, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) (async) accept$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@default, @rose, @rose, @rose, @rose, @netrom, @bcast, @bcast]}, &(0x7f0000000140)=0x48) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in=@loopback, @in=@multicast1}, {@in=@private, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @lifetime_val={0x24}, @etimer_thresh={0x8}]}, 0x164}}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5.406399963s ago: executing program 4 (id=793): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x8919, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0000000907800001d12bb9b69de4386bf2ae6a3b321505c68cd1d12c52a2d43d2c855000000000000000000"], 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r1, 0x0) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000006b80)={@cgroup, 0xffffffffffffffff, 0x1d, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) (async) recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async, rerun: 32) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x200, @none, 0x9c48, 0x2}, 0xe) (async, rerun: 32) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="5a7654bc47810e98bf1d65e02c8a295a0d79b90e79d433a66b52abafa4f7b0fd46fe84e2db91fc73a57a8bcc347c52eedfa9101ee6d1b885443bacf0283c71087209a9f7de856c5c51bd97b12b956dfe6bd041975728ca9c257a8b307ef8cc6fe4aadb5a2d9375f69a4672314bed5959d17106defdad518397d5c3beb07c27548472f9e90c5cb1cfe3ddd8c17c803e9c4de954e8c23a82960feab36c3409996cd9dd1ff0e7256bbf6812a97ccf2ef6f31e5e549ba8867d668a2cd16b08eb4794825206c301edb131f9127871331554e367ff8ef0a89a87561af30bc039ba13ede886b44151ef3329576d2296171de98dd235e1", 0xf3, 0x10, &(0x7f0000000000)={0xa, 0x4e24, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) 2.352623403s ago: executing program 0 (id=817): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930ae3f10de"], 0x28}, 0x1, 0x0, 0x0, 0x3404c810}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002440)=ANY=[@ANYBLOB="380000002000010000180000000000000a0000000000000000000000140003006c6f00"], 0x38}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000500)={0x0, 0x6, 0x0, [0x4, 0xc, 0x41a, 0xf, 0x80000001], [0x4, 0x1, 0xffffffffffffff80, 0x4, 0x2, 0x7fff, 0x7f, 0xfffffffffffff801, 0x0, 0x0, 0x1, 0x0, 0x8000, 0xfffffffffffffffd, 0x9, 0xffff, 0x8000, 0x6, 0x3, 0x2, 0x8, 0x19cd, 0x0, 0x3, 0x2, 0x4, 0x2, 0x4, 0xffffffff, 0x7, 0x5, 0x0, 0x1, 0x5, 0x0, 0x7fffffff, 0x9, 0x0, 0x1, 0x5, 0x3, 0x10, 0x607b56c800, 0x3, 0x8, 0x200, 0xff, 0x8001, 0x8001, 0x6, 0x6965, 0x7, 0x5, 0xfffffffffffffff9, 0x6, 0xfffffffffffffffd, 0x4, 0x7fffffffffffffff, 0x3, 0x0, 0x7, 0x7622, 0x8000, 0x8000, 0x4, 0x8, 0x4e67fce1, 0x9, 0x1989, 0x9, 0x0, 0x5, 0x0, 0x2, 0x925e, 0xdd, 0x4, 0x9, 0x941, 0x7, 0x8000000000000001, 0x8000000000000000, 0x0, 0x9, 0x2, 0x5, 0x8, 0x3, 0x9, 0xfffffffffffffd6a, 0x4, 0x401, 0x9, 0x9, 0x7fff, 0x8, 0x10, 0x8, 0x7ff, 0x6, 0x4, 0x101, 0x1000000000000, 0x7, 0xca96, 0x6, 0x7f, 0x3, 0xd, 0x7, 0x9, 0xd31, 0xffff, 0x0, 0x6, 0x800, 0x5, 0x1000, 0x9, 0x5]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000940)={r3, "fd1f6e2f0bd7a74568114004bcc08ef5"}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001dc0)={0x27c, 0x2, 0x2, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_NAT={0x1b8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2a}}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x98, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x1ff}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_MASTER={0x4c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x4000088}, 0x8000) 2.351267919s ago: executing program 1 (id=818): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$packet(0x11, 0x2, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) sendmsg$inet(r2, &(0x7f0000001bc0)={&(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000001b40)=[@ip_retopts={{0x10}}], 0x10}, 0x8000) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x34, r6, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1d}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0302}}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4008040) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r11}, 0x10) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c}, {@in=@broadcast, 0x0, 0x6c}, @in=@multicast2, {0x0, 0x192, 0x9ba3, 0xffff, 0x251c, 0x3, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x21}, {}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r0}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 2.064042572s ago: executing program 0 (id=820): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x10000, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x80000000, 0x1, 0x1, 0x5, 0xc0, 0x6, 0xf2}, &(0x7f0000000100)=0x9c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000700)={0x1100, 0x1, 0x55, 0xf6a}) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @empty, 0x0}, &(0x7f0000000080)=0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x40, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ca, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r4, 0x4004f50d, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='contention_end\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0xffe9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003802c4e"], 0x20}}, 0x4850) r7 = socket(0x200000000000011, 0x2, 0x0) getsockname$packet(r7, 0x0, &(0x7f00000003c0)) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)={0xa, 0xa7, 0x107, 0x0, 0x3, {0x9, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0xc000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r6) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r9, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012bbd7000ffdbdf250900000008000300", @ANYRES32=r11, @ANYBLOB="0c00990008000000760000000800370001c32e41d43ca9ebfe003813c600040085000800010000dd0800370001000000"], 0x40}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) r13 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r13, 0x116, 0x7f, 0x0, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r12, @ANYBLOB="04002abd7000fcdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="0c009900030000004e0000000600650000000000060065000200000079005b00ed7fc68f90bd0970378ba7fbe305e9902fe3161f1e6f4509774767882e353fc14343cc1e3e5c57e112966e037eab82a113ce06a2b82c045b342f7958ebe5e4079024b9f62961e44d6948f2efa154a6583bcdd82399064035f81bbf4587632f218c5077f7b6281f0ed9c373af55ce690072d22153688f0000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008040) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6006000040000900ffffffff02dbdf250100000099001f00460601"], 0x660}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.844760423s ago: executing program 2 (id=821): r0 = syz_init_net_socket$llc(0x1a, 0x4, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) (async) pread64(0xffffffffffffffff, 0x0, 0x0, 0x869) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x3, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) clock_gettime(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) accept(r0, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) (async) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.637407284s ago: executing program 1 (id=822): r0 = socket$rds(0x15, 0x5, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (rerun: 32) getsockopt$inet_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000000c0)=""/127, &(0x7f0000000140)=0x7f) (async) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x70) (async) sendmsg$rds(r0, &(0x7f0000000f40)={&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000b40)=[@mask_cswp={0x58, 0x114, 0x9, {{0x3f3d, 0x1}, &(0x7f0000000440)=0x800, &(0x7f0000000640)=0x3, 0x3, 0x100000000, 0x26eb, 0x2, 0x0, 0xffffffffffff9c2b}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {&(0x7f0000000f80)=""/4096, 0x1000}, &(0x7f0000000c80)=[{&(0x7f0000001f80)=""/4096, 0x1000}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f0000000940)=""/225, 0xe1}, {&(0x7f00000008c0)=""/70, 0x46}, {&(0x7f0000000c00)=""/109, 0x6d}], 0x5, 0x22, 0x8}}], 0xa0}, 0x4000040) (async) r2 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=ANY=[@ANYRES32=r4, @ANYRESOCT=r2, @ANYBLOB='\x00'/20, @ANYRES16=r1, @ANYRESOCT=r3, @ANYBLOB="000040000000009d8350567afdb0bf000000eaaa215d0d963ab80000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000b0770018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095", @ANYBLOB="f622b72501e878b217a4752d94b20ef1d3fdbdf63c84ff268cdc", @ANYBLOB="669b52f7131b78908021d51f96aa8fe9ac9fd9ebf3b326195a7b0e86368e2ea9fd4c52879baf88ec5dda6eea0be1786aa24c336bff2ca47d243fe2c4719695446ba9b1d4e6c6501eddc7ea67629f51ff7fd11a94cf918787b3180a18b98ceb4c563d8073b11b3fa51f2ab2f0edc9a6a17944e207c8aa58a7d978a4cfb90eae015082c022fe6a032597b5137ce47f5d28f25fb5529053df900a4420281b72fa37d2a1a56ccd749c7866c7970373480fcac9bae2814a9de21fab29336f9b6dd87f9bc45cae19e4a73fbc909ab49fe159a0fa29f61a4557a49cc1adffdff345bba67afdfaef12aab0230a1b738ee240f3e0d0b6274ff176bfd1a9", @ANYBLOB="93b4353fe6d057e48e5ec6338370b9d508632743d1ee72b14fe23b808691bc3a48d07dd70860f4efc747043cbfe8423bf4b767923493e850da03b6cdfa90b87e480fcae0e6a4088c203f5cf8eade87e363e64f"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000200000000000000000000000000000903000000000000000000000d"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='dlm_recv\x00', r6}, 0x18) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280), 0x4) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) (async) r9 = accept$alg(r8, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000180)={r0, 0xa5c8, 0x4, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x4, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="8a176f5cda1b37f4dcf57656259dea2a69cfbbe6341e0c1dba", @ANYBLOB="e232cf739cb6fb2c592e2832cee7135ef2ec5e34", @ANYRES32=0x0, @ANYRESOCT=r4, @ANYRESOCT, @ANYRES8, @ANYRESDEC=0x0, @ANYRES16], &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0xfffffed2, @void, @value}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(r9, &(0x7f0000000c80), 0x0, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = openat$cgroup_int(r12, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r13, &(0x7f0000000100)=0x40000000000000, 0x12) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYRES32=r10], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffef4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="a40000004a00010000000000000000230a008000e873c15ce251697c51ccbe4c1b7aab2edfcd27be067d5ae479a94581d6b9e3087fde3668c2cfb45c2672d62915b2997c69195f0ef41717891bdb9b7ee44e9a6afd7496f27c2154f4eff5cc016332b0d98caf9dee43ec04f3", @ANYRES32, @ANYBLOB="00000000140001"], 0xa4}}, 0x0) (async) recvmmsg(r9, &(0x7f0000003200)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/221, 0xdd}], 0x1}}], 0x1, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800"/20], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.579842722s ago: executing program 0 (id=823): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) (async) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4000}, 0x18) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000000)={0x89}, 0x8) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x1, @loopback={0xfec0ffff00000000}, 0x51d17f9f}, 0x1c) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) (async) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000140)="b7", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r7, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f0000000240)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xc, 0xc, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f00000003c0)=[r4, r6, r7], &(0x7f0000000400)=[{0x1, 0x1, 0x3, 0x4}, {0x5, 0x2, 0x3, 0xa}, {0x0, 0x2, 0x5, 0x9}, {0x1, 0x2, 0x1, 0xc}], 0x10, 0x80000001, @void, @value}, 0x94) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f00000008c0)=0x16, 0x4) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c086}, 0x4) (async) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c086}, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) (async) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(r11, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="8a0a00084d5cb34dfc6fd822ed251bcc5119d63c9b6e9d2612ba2e29d93a5eabfde186f358f70911476fdfe7f0eb1a0f88f0c39330d944a29c8a0d775167b5f0e236e291e1822ea1fd0932e99c7d81be70adc07e701d3be7141b5b2ccc864865286801007a2a766da18d6b8be6a5f3eb89d18b8baaff0105e86075e750f95f34a09380ff59f438f4dd8ff4be19d96e2da12b5dcd20e33a14255bb683f693cdb90f9f4678ab6f7c2eb455d6777a0dc46ca30fa412d23e891c7196c9723f1b0b0ec09b0dd5f8c6121685eed2884ef501b54bd428f0e24e5c10e790631efd905249732ebb0e3710aec87caa1ce52ab8b0906ee2619c81c81e9c87aa373b547fe19171f9fd6de0187fb4ce79008bb224277d3b48497120e9f25d5c371306e06c6976b8f880f609bb", @ANYRES16=0x0, @ANYBLOB="000228bd7000fbdbdf250200000005002900010000000500330002000000080039009e7b00000500330001000000"], 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x15, &(0x7f0000000900)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, [@exit, @alu={0x4, 0x1, 0x7, 0x7a189ef20c606a4, 0x1, 0xc, 0x1}, @call={0x85, 0x0, 0x0, 0x35}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @alu={0x4, 0x0, 0x3, 0x3, 0x7, 0x1, 0xfffffffffffffffc}]}, &(0x7f0000000580)='GPL\x00', 0x3ff, 0xe3, &(0x7f00000005c0)=""/227, 0x40f00, 0x0, '\x00', r3, 0x0, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x2, 0x0, 0x2, 0x2}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[r6, r2, r11, r2, r4, r4], &(0x7f0000000780)=[{0x5, 0x4, 0xb, 0x1}, {0x0, 0x4, 0x4, 0x8}, {0x5, 0x4, 0xd, 0xb}, {0x3, 0x3, 0x5, 0x7}, {0x0, 0x3, 0xf, 0x8}], 0x10, 0x4, @void, @value}, 0x94) 1.500160524s ago: executing program 2 (id=824): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000000)={0x10, 0x0, "48f4011a68c315a7294da4602e1b739d"}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000080)=@raw=[@alu={0x7, 0x0, 0x0, 0x4, 0x8, 0x2, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, 0x1}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}], &(0x7f00000000c0)='syzkaller\x00', 0x100, 0x2f, &(0x7f0000000100)=""/47, 0x41100, 0x4, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x5, 0xa, 0x0, 0xff}, 0x10, 0x1c2f8, 0xffffffffffffffff, 0x0, &(0x7f0000000180)=[0xffffffffffffffff], 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000040)='./file0\x00', r2, 0x4000, r1}, 0x18) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4008, r2}, 0x18) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000380)=0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa8, 0xa8, 0x5, [@float={0xb, 0x0, 0x0, 0x10, 0x4}, @ptr, @fwd={0x1}, @type_tag={0x4, 0x0, 0x0, 0x12, 0x5}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @union={0xe, 0x3, 0x0, 0x5, 0x1, 0x7, [{0xf, 0x4, 0x8001}, {0xf, 0x2, 0x9}, {0xc, 0x3, 0x9}]}, @enum={0x3, 0x6, 0x0, 0x6, 0x4, [{0x8, 0x10}, {0x9, 0x1}, {0x9, 0xfffffffa}, {0xd, 0x4}, {0x3, 0x8}, {0xa, 0x5}]}]}, {0x0, [0x0, 0x30, 0x30]}}, &(0x7f00000004c0)=""/83, 0xc5, 0x53, 0x0, 0x15, 0x0, @void, @value}, 0x28) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x9, 0x8, 0x5, 0x1, 0xa00, r3, 0x4, '\x00', r4, r5, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000640)=0x14) sendmsg$sock(r1, &(0x7f0000000900)={&(0x7f0000000680)=@ll={0x11, 0xf6, r7, 0x1, 0xa, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000700)="0dd8c5b2588aae1061e5b47a27f7092b04473921078bf35464712864dde568c01fd56ea57003f72f5367c998e4efb3a58d936d60f915f9930ee9f039755466458f43aed6b7572fe1c808ba28da65404815a9418cdd49d7fba55ca72e182b043dba536d756434f3f23e6e5110dbc9a712db2a0b390ae9668bf451e9", 0x7b}, {&(0x7f0000000780)="49010a6377f31560f8b87db9e344244a60172c140140b5b416d1", 0x1a}, {&(0x7f00000007c0)="a9c40555df7577808c0960c8c8476dc61295d87b3b418b4266e02a5bd0ef5ca2f620033a5965942a4922f22c6f2683f7ca8c207c0531a90e3d2b59533d7011e166d9602a391ddd1e4902ed2bf85f27d3fe2fd5e4b894dd2f6d067535014ee35fc43c7ea5a2fc1253b695a15a4815756148a9", 0x72}], 0x3, &(0x7f0000000880)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xf1a}}, @mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x100}}], 0x60}, 0xc000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@newqdisc={0x64, 0x24, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x6, 0x3}, {0xa, 0x8}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x34, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x305}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xc5d}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x7}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8080}, 0x4001) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r6, 0x400c6615, &(0x7f0000000a80)={0x0, @aes256, 0x0, @desc2}) socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0xffffff86, '\x00', r7, r5, 0x5, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r9 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000b80), 0x80000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000bc0)=@o_path={&(0x7f0000000ac0)='./file0\x00', r8, 0x4000, r9}, 0x18) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000c00), 0xffffffffffffffff) accept(r1, &(0x7f0000000c40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000cc0)=0x80) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000d40), r8) sendmsg$IPVS_CMD_ZERO(r10, &(0x7f0000000e80)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0xac, r11, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xf}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5a83}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x4008884}, 0x4000000) socket(0x27, 0x1, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000ec0), 0x101041, 0x0) r12 = socket$netlink(0x10, 0x3, 0x14) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r13, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040045}, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r9, 0x1, 0x53, &(0x7f0000001040)={0x7, 0x7, 0x2}, &(0x7f0000001080)=0x28) sendmsg$IPCTNL_MSG_CT_GET_STATS(r12, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x400302}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x14, 0x5, 0x1, 0x401, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x12}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000005380)=[{{&(0x7f0000001240)=@phonet, 0x80, &(0x7f0000003600)=[{&(0x7f00000012c0)=""/185, 0xb9}, {&(0x7f0000001380)=""/253, 0xfd}, {&(0x7f0000001480)}, {&(0x7f00000014c0)=""/89, 0x59}, {&(0x7f0000001540)=""/23, 0x17}, {&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/31, 0x1f}, {&(0x7f00000035c0)=""/22, 0x16}], 0x9}, 0x2}, {{&(0x7f00000036c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000003740)=""/131, 0x83}, {&(0x7f0000003800)=""/100, 0x64}, {&(0x7f0000003880)=""/197, 0xc5}, {&(0x7f0000003980)=""/176, 0xb0}, {&(0x7f0000003a40)=""/147, 0x93}, {&(0x7f0000003b00)=""/172, 0xac}, {&(0x7f0000003bc0)=""/4096, 0x1000}], 0x7, &(0x7f0000004c40)=""/27, 0x1b}, 0x7}, {{&(0x7f0000004c80)=@isdn, 0x80, &(0x7f00000052c0)=[{&(0x7f0000004d00)=""/135, 0x87}, {&(0x7f0000004dc0)=""/250, 0xfa}, {&(0x7f0000004ec0)=""/187, 0xbb}, {&(0x7f0000004f80)=""/160, 0xa0}, {&(0x7f0000005040)=""/193, 0xc1}, {&(0x7f0000005140)=""/79, 0x4f}, {&(0x7f00000051c0)=""/222, 0xde}], 0x7, &(0x7f0000005340)=""/33, 0x21}, 0x4}], 0x3, 0x10000, &(0x7f0000005440)={0x0, 0x989680}) 1.426621888s ago: executing program 1 (id=826): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb010018000000000000000003000000000000000000000300000000030000000207000000000000010000000000000e0500000001000000006100"], 0x0, 0x43, 0x0, 0x1, 0x4, 0x0, @void, @value}, 0x20) 1.415410176s ago: executing program 3 (id=827): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0204"], 0x18) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, 0x4e22, 0x0, @empty, 0x8}, 0x1c) r1 = accept4(r0, &(0x7f00000003c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000180)=0x80, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x3, 0x4}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ec0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYRESOCT=r4, @ANYRESHEX=0x0], 0x3c}}, 0x84) r8 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r8, &(0x7f0000000040)={0xa, 0x0, 0x7f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x20) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f00000005c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x74, r9, 0x2d31ecca7b37ffd9, 0x70bd2a, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0x25}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x533}, @NL80211_ATTR_STA_FLAGS={0x18, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x9, 0x13, [{0x3, 0x1}, {0x10, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x6, 0x1}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x41}, 0x4) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x3c}}, 0x0) 1.240774995s ago: executing program 2 (id=828): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x12) sendfile(r0, r4, 0x0, 0xf03a0005) 1.238719531s ago: executing program 1 (id=829): syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x3c, 0x24, 0x8, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0x3}, {0xffe0, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x6}]}}]}, 0x3c}}, 0x854) (async) pipe(&(0x7f0000000080)) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) (async) unshare(0x20000400) bpf$MAP_CREATE(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) epoll_wait(0xffffffffffffffff, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) 1.227773976s ago: executing program 0 (id=830): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000380), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f0000000300)='6', &(0x7f0000000000), 0x2}, 0x20) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 1.151124223s ago: executing program 2 (id=831): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x48, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda04}]}, {0x18, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x48}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) close(0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f00000001c0)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_sample={0x48, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe6f, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_RATE={0x8}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x60}}, 0x0) listen(r3, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpuset.mem_exclusive\x00', 0x2, 0x0) tee(r7, r4, 0x2ed7, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000010003b77b7be4f0a3721a41cd90c0000000000000000000000009426d5bf1e96d76e5aa574333ce2ac81d94938", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010065727370616e00001800028006000f0000000000040012000600100000000000"], 0x48}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r9, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0x12) sendfile(r3, r10, 0x0, 0xf03a0005) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r3) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000bf19e03441ff1e9600", @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf2507000000080002000600000005000500080000003000018008000600000000000500020002000000050002000b00000014000400fe8000000000000000000000000000bb"], 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.012647345s ago: executing program 3 (id=832): r0 = socket(0x25, 0x80005, 0x3) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x6, 0x800000ff, 0x84a9}, &(0x7f00000004c0)=0x10) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto$inet6(r2, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="011e9db8c6941c911fd400000000000000000017000000500006804cfe32892b2357004d830f595fde9d2ca1660ed2736b0ed8990e805626699be725437bd2d2ad5b82550885ed6aaee4727e25969b722f9d156d39549b8baeb4710238c4df209463f9120048af29dd64fa8c3b86d599a71a700c8b"], 0x64}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x44, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x7, 0x2, 0x7, 0x360, 0x8}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, @exit, @snprintf, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @generic={0x6, 0x0, 0x3, 0x7e, 0xf}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @call={0x85, 0x0, 0x0, 0x73}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000001800000826bd7000fcdbdf251c2014ab00030006000c000008000400", @ANYRES32=r7, @ANYBLOB="0f0ca73f24cba093c5a72478bf7b03000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x200004c0) 1.010973009s ago: executing program 0 (id=833): socket$inet6(0xa, 0x3, 0x8000000003c) socket$igmp6(0xa, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) socket$netlink(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket(0xa, 0x2, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) connect$packet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b07, &(0x7f0000000000)={'wlan0\x00'}) close(r0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000040)='/proc/sys/net/ipv4\x01\x00s/\x18Oj&\x1c\x99\xdf\\\xed\xf9\xab\xd7Q\xc0GZ((]s\xb1Hsync_\x04le\xda4'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r3 = accept(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000011c40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0xc8}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_MESH_CONFIG={0x4}]}, 0x24}}, 0x8040) sendmmsg$alg(r3, &(0x7f0000003180)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$inet(0x2, 0x4000000000000001, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) 793.99542ms ago: executing program 3 (id=834): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000240), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@private=0xa010100, @multicast1=0xe0000300}, 0x10) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 563.563514ms ago: executing program 3 (id=835): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000280)={0x8, 0x21, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x0, 0x1, [0x9105, 0x6, 0xc9a2]}}, @pad1, @generic={0xfe, 0xe1, "b9379a0af1d9b8c40a240c64d3f8e05ef7729096fa0e94e22d53d7532dd7bd49140f715bb672c2ec39fb527940750c66fb92b1dc14b85fdc349222d1f502d0434d06e33fa64c426d5e94203bd2497ad974119155e843a0c6435b54be54b42afd8d691650d99f59aba12f479cee2cdde2cdad5b6635cc40f074e51c2c153765c0b2f7dfd336b4af14c90786b1c364ea617a3feef0aa058dbea489d4fc09d0d0a67953e05bda786972caf89af4d0052b54fb3382932cf712fab7e1a0637d796044bdc7d81f358fba2c46a055d6853a47f38470902f47844e31c5aa1867d82a882ea6"}, @pad1]}, 0x118) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) socket$inet6_udplite(0xa, 0x2, 0x88) (async) r1 = socket$inet(0xa, 0x801, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB, @ANYBLOB, @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb2}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10) (async) r6 = socket$netlink(0x10, 0x3, 0x14) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000000), 0xffffff6a) (async) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, &(0x7f00000001c0)={0x1100, 0x2, 0x3, 0x9}) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0xd, 0xd4, 0x7, 0x1e, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_x_nat_t_type={0x1}, @sadb_x_sec_ctx={0x1b, 0x18, 0x4, 0x5, 0xca, "0828197ee130523e9940507940a0144ba06f7ddb4095d60235efa3e4b84fda9d1bb83c1bcabb422cce76218546b0792b6d9370fabbb96d5dff5095b7e816dcf159e7ecadc6c3df7ea7a014e36da2551f306357bd6869afa6edb2ed7eb95118e7aabc4ac08386b22aa4ff677a5be0fb1bf9effe60ce0673f707777ea25722f20e8f6dbc47a571487f55787ced4ec53a352e880df921e4bd02477ce61dde6d3a19c5976874513d67aa06f776d4c6fd489e712faccdf3f8688f07f83947fbbf95ac2a4e6f79d183a55718df"}]}, 0xf0}}, 0x20000850) 392.812224ms ago: executing program 3 (id=836): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x32}, @in=@multicast2, 0x0, 0x3, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x8001, 0x0, 0x4, 0x65a, 0x8002}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1ffffffc, 0x32}, 0x0, @in=@local, 0x3500, 0x0, 0x0, 0x1, 0x0, 0xe40b}}, 0xe8) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)}], 0x1}, 0x24008011) sendmsg$inet(r4, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r6 = socket$inet6(0xa, 0x9, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f000001a5c0)=""/227, 0xe3}, {&(0x7f0000000240)=""/187, 0xbb}, {&(0x7f0000019580)=""/4112, 0x1010}, {&(0x7f0000000600)=""/34, 0x22}, {&(0x7f0000000300)=""/46, 0x2e}], 0x5}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000140)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x400b0}, 0x20000801) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1b) close(r0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) socket(0x2, 0xa, 0x0) 216.838279ms ago: executing program 1 (id=837): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x6) close(0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x12) sendfile(r0, r4, 0x0, 0xf03a0005) (fail_nth: 4) 201.483196ms ago: executing program 2 (id=838): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffe01}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x34}}, 0x1) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xe4, r1, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xb7, 0xa9, @random="8f99708507f419e08728fdfcfb05bdada1b75a5a88a4df036a5c7aa40d7fe212b2be46338f247977e14398cbe7117e9d6f91766133bdae6f1f664e5a8dc034ee739e8ae77d8241c00d34cb91c25ba4891528edde62d123d2e9a021d5f84649c93855f22e79181d6b740ff7f587e862c69870ee104e31c6b04009916cbe911ad9643e6701051f510980fb2c2ab39a91134c0c09341305f220cc3fef73d81b1a5c25874f05642f885542cf11ce98fd80c18fc65f"}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0xd2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x1}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000380), r0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r3, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000480)={0x0, 0x6}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000500)={r5, 0xff80, 0xd, 0x6, 0x13f9, 0x5}, &(0x7f0000000540)=0x14) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r0) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000780)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x11c, r6, 0x8, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_WOL_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_SOPASS={0x9b, 0x3, "a7c8dd4a7e6b3fada2b5627df234f16ce906f2ebefdeb33e7cbd771dd824ed80a5d1b90632bce7cec9ef5677775d1122831f542237c065c5ceeb34dcdf686fda3d3d3ef53cbd236c8b59c8a9708fdb2908c5c6d91fc552f482064b7d4290ca88587d111a3056a7d22fe8405ca417070829003222da1e4e9a6b93580523b1a42300c40824d8853f17b30280f9d28a5b96381c5324b1a50e"}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000}, 0x44040) r7 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r0, 0x0, 0x9, 0x98, &(0x7f00000007c0)="95fc2e5c902997d58e", &(0x7f0000000800)=""/152, 0xfffffffe, 0x0, 0xa6, 0x40, &(0x7f00000008c0)="0421304d23cc74dbd3bde9e05cbf2a6281e3e061dc8e09ddf4f0e1d140d5824280cac0b8bb4b0aed7f96d1be86fe80e657a993d3edbead42b2b00810d97e26fc4c5102d8b40869a330d1e6977aedf317a91bae8b811db5e29cc4b6b3f350e9b1daae08d129786e979ddb4533f174c91aad323fb970cf495ee616b2ddf61727eb85e5f0ece4d24dbe9f3e119a6fe979fe0fa92281ed56d6a66e6ea6393992d361d48ac9d41053", &(0x7f0000000980)="7ea89576c6e465f9fc079ba3593d84d4ce30d19136a6b905bb3665f46acd740362f9f01f4d8500817eff4f05ae682253fdc8d30f4c76c05ec3b8c7c12fbc430d", 0x5}, 0x50) (async) socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r7, 0xc0046686, &(0x7f0000000a40)={0x0, 0xc8, "81fe881cd68d0b8a2bbacf229e581edecf420b61970571d243bd50376a7ee98439ad1fa39f36a5111da66dfdd6e5106dc8e057b07178949bf50dbdc87c209418dc259af1e18f90b4843038bc50b9ba4096ff02a3a2d4245c11bd6f89379588ed4d9acf881b92f8f7b1aaf91d71ffc06308e6cf62002edd71d4cf9f234e0a35bd163688ef8e4bb715dbdf69bc20c6fde5e6034a5c15f3b5f7c28a39d522b47e1d5d1005510322a3ee39c5bf10e4974c7d3ec0acbb3f6c7fdfdafbb8e8ecd4c081a589baa8a602119c"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000b40)={r5, @in6={{0xa, 0x4e22, 0x5, @loopback, 0x4}}}, &(0x7f0000000c00)=0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000f40)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001080)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x797b132a, '\x00', r2, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001140)=@generic={&(0x7f0000001100)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) pipe(&(0x7f00000011c0)={0xffffffffffffffff}) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001200)={0x1, 0xffffffffffffffff}, 0x4) (async) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', r2, 0xffffffffffffffff, 0x3, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) (async) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000012c0)={0x0, 0x9}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001340)={0x0, 0x20, &(0x7f0000000d00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfdd, 0x0, 0x0, 0x0, 0xab01}, [@jmp={0x5, 0x0, 0x0, 0x7, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x1}]}, &(0x7f0000000e00)='GPL\x00', 0x3, 0xf0, &(0x7f0000000e40)=""/240, 0x40f00, 0x2, '\x00', r2, 0x0, r9, 0x8, &(0x7f0000000f80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000fc0)={0x1, 0x10, 0x2, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001300)=[r10, r11, 0x1, r12, r13, 0xffffffffffffffff, r14, r15, r16, r17], 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000001540)={&(0x7f0000001400), 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, 0x0, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x5f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) 116.68855ms ago: executing program 3 (id=839): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) r4 = socket(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f00000005c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@call={0x85, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x8d, 0x0}, 0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xa, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@map_idx={0x18, 0x9, 0x5, 0x0, 0x5}, @alu={0x4, 0x0, 0xc, 0x2, 0x0, 0x80, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r1}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xb}]}, &(0x7f0000000100)='GPL\x00', 0x80008, 0xd8, &(0x7f0000000300)=""/216, 0x41100, 0x25, '\x00', r3, @tracing=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x4, &(0x7f0000000480)=[r8, r1, r1, r1], &(0x7f00000004c0)=[{0x3, 0x2, 0x2, 0x6}, {0x0, 0x3, 0xd, 0x5}, {0x1, 0x2, 0x5, 0xb}, {0x0, 0x2, 0x8, 0xb}], 0x10, 0x2, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@tcp=r4}, 0x20) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2200c851, &(0x7f0000000a00)={0xa, 0x2, 0x1, @loopback}, 0x1c) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), 0xffffffffffffffff) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x1c, r10, 0x701, 0x70bd2b, 0x0, {0x19}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)=""/83, 0x53}], 0x1}, 0x6}], 0x1, 0x40000041, 0x0) 47.928444ms ago: executing program 1 (id=840): ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x2c, r2, 0x1, 0x70bd28, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001000000000800130000aea4"], 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000006c0)={0x160, r3, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x160}, 0x1, 0x0, 0x0, 0x488c0}, 0x400d0) 46.771776ms ago: executing program 0 (id=841): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'ip6gretap0\x00', {0x2, 0x4e21, @remote}}) (async, rerun: 64) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve1\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r5, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa79ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200008b0"], 0x0) (async) recvmmsg(r5, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x60000002, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xf}, 0x50) (async, rerun: 64) mmap(&(0x7f000083b000/0x13000)=nil, 0x13000, 0x0, 0x13, r1, 0x0) (async) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f00005fe000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) (async, rerun: 32) mmap(&(0x7f00008d1000/0x1000)=nil, 0x1000, 0x1000005, 0x11, r1, 0x0) (rerun: 32) 0s ago: executing program 2 (id=842): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xb3, &(0x7f000000cf3d)=""/179, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000180)={0xe6a, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r6, 0xd68, 0x18}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000000010000304000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="05a002000000000028001280", @ANYRES32=r9], 0x50}, 0x1, 0xba01}, 0x20) r10 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="5000001000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007608616e00000000185055186b000100"], 0x50}, 0x1, 0xba01}, 0x0) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) r13 = socket$kcm(0xa, 0x6, 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r13, 0x10d, 0xa, &(0x7f0000000000)=r14, 0x4) r15 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x17, &(0x7f0000000380)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0x8c69c9aaa470061d, 0x5, 0x0, 0xa}, @map_fd={0x18, 0xa, 0x1, 0x0, 0x1}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x8000002}, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @jmp={0x5, 0x1, 0x1, 0x3, 0x6, 0x20, 0x4}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r15}, 0x10) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.99' (ED25519) to the list of known hosts. [ 72.863585][ T5822] cgroup: Unknown subsys name 'net' [ 73.080749][ T5822] cgroup: Unknown subsys name 'cpuset' [ 73.089959][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.641609][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.900487][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.923403][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.939919][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.966225][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.978839][ T5834] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.006158][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.017930][ T5142] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.026506][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.040895][ T5142] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.072928][ T5142] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.080789][ T5142] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.088950][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.149203][ T5142] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.158300][ T5142] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.166894][ T5142] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.176579][ T5142] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.184217][ T5142] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.191955][ T5142] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.204265][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.243732][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.252154][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.261048][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.268464][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.296225][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.304946][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.318688][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.327278][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.335175][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.343520][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.352960][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.529925][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.610924][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.701970][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.709326][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.718946][ T5836] bridge_slave_0: entered allmulticast mode [ 78.725876][ T5836] bridge_slave_0: entered promiscuous mode [ 78.767396][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.774514][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.782395][ T5836] bridge_slave_1: entered allmulticast mode [ 78.789452][ T5836] bridge_slave_1: entered promiscuous mode [ 78.880339][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.891043][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.899192][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.907094][ T5832] bridge_slave_0: entered allmulticast mode [ 78.913852][ T5832] bridge_slave_0: entered promiscuous mode [ 78.921566][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.929707][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.937110][ T5832] bridge_slave_1: entered allmulticast mode [ 78.943949][ T5832] bridge_slave_1: entered promiscuous mode [ 78.972199][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.062952][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.074469][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.090583][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 79.105160][ T5836] team0: Port device team_slave_0 added [ 79.116203][ T5836] team0: Port device team_slave_1 added [ 79.148054][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 79.176911][ T5832] team0: Port device team_slave_0 added [ 79.201432][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.208596][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.234663][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.248755][ T5832] team0: Port device team_slave_1 added [ 79.255070][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.262388][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.290816][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.349647][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 79.448699][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.455686][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.482276][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.495241][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.502406][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.529733][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.564145][ T5836] hsr_slave_0: entered promiscuous mode [ 79.570824][ T5836] hsr_slave_1: entered promiscuous mode [ 79.590365][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.597691][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.604976][ T5844] bridge_slave_0: entered allmulticast mode [ 79.612389][ T5844] bridge_slave_0: entered promiscuous mode [ 79.629186][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.636485][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.643696][ T5842] bridge_slave_0: entered allmulticast mode [ 79.650935][ T5842] bridge_slave_0: entered promiscuous mode [ 79.689205][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.696723][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.703893][ T5844] bridge_slave_1: entered allmulticast mode [ 79.711321][ T5844] bridge_slave_1: entered promiscuous mode [ 79.717915][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.725155][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.732623][ T5842] bridge_slave_1: entered allmulticast mode [ 79.739921][ T5842] bridge_slave_1: entered promiscuous mode [ 79.755427][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.762827][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.770126][ T5846] bridge_slave_0: entered allmulticast mode [ 79.776923][ T5846] bridge_slave_0: entered promiscuous mode [ 79.820229][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.837742][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.844973][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.852774][ T5846] bridge_slave_1: entered allmulticast mode [ 79.860254][ T5846] bridge_slave_1: entered promiscuous mode [ 79.877820][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.893305][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.931904][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.961288][ T5832] hsr_slave_0: entered promiscuous mode [ 79.967919][ T5832] hsr_slave_1: entered promiscuous mode [ 79.974129][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.982159][ T5832] Cannot create hsr debugfs directory [ 79.990482][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.014792][ T5842] team0: Port device team_slave_0 added [ 80.023109][ T5842] team0: Port device team_slave_1 added [ 80.031297][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.067165][ T5839] Bluetooth: hci0: command tx timeout [ 80.104613][ T5844] team0: Port device team_slave_0 added [ 80.118557][ T5844] team0: Port device team_slave_1 added [ 80.128989][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.136319][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.162478][ T5839] Bluetooth: hci1: command tx timeout [ 80.168513][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.195847][ T5846] team0: Port device team_slave_0 added [ 80.213105][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.220262][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.247174][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.264378][ T5846] team0: Port device team_slave_1 added [ 80.304570][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.316210][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.343682][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.355638][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.362963][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.389351][ T5850] Bluetooth: hci2: command tx timeout [ 80.390172][ T5839] Bluetooth: hci3: command tx timeout [ 80.395149][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.449724][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.456768][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.483078][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.483296][ T5839] Bluetooth: hci4: command tx timeout [ 80.502240][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.509448][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.536332][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.611366][ T5842] hsr_slave_0: entered promiscuous mode [ 80.621109][ T5842] hsr_slave_1: entered promiscuous mode [ 80.627770][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.635381][ T5842] Cannot create hsr debugfs directory [ 80.659860][ T5844] hsr_slave_0: entered promiscuous mode [ 80.666738][ T5844] hsr_slave_1: entered promiscuous mode [ 80.673074][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.680856][ T5844] Cannot create hsr debugfs directory [ 80.716897][ T5846] hsr_slave_0: entered promiscuous mode [ 80.723191][ T5846] hsr_slave_1: entered promiscuous mode [ 80.729925][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.737694][ T5846] Cannot create hsr debugfs directory [ 80.908104][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.947427][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.960611][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.995288][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.082739][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.104007][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.132819][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.150202][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.170920][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.181479][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.193715][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.207318][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.282428][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.295728][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.331263][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.343393][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.411780][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.423903][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.437447][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.452549][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.465718][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.517071][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.539960][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.547218][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.558260][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.565397][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.601457][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.675379][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.697442][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.740595][ T1093] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.747783][ T1093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.762199][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.769618][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.789144][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.805156][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.812378][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.822588][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.829713][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.860709][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.991795][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.028497][ T5832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.040548][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.088573][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.139358][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.146542][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.156809][ T5839] Bluetooth: hci0: command tx timeout [ 82.185479][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.192680][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.228017][ T5839] Bluetooth: hci1: command tx timeout [ 82.369314][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.467899][ T5839] Bluetooth: hci2: command tx timeout [ 82.468996][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.473360][ T5839] Bluetooth: hci3: command tx timeout [ 82.484754][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.492751][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.530394][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.537576][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.546991][ T5839] Bluetooth: hci4: command tx timeout [ 82.624222][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.661242][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.836768][ T5836] veth0_vlan: entered promiscuous mode [ 82.857367][ T5832] veth0_vlan: entered promiscuous mode [ 82.898269][ T5832] veth1_vlan: entered promiscuous mode [ 82.912184][ T5836] veth1_vlan: entered promiscuous mode [ 82.938144][ T5844] veth0_vlan: entered promiscuous mode [ 82.949269][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.984405][ T5832] veth0_macvtap: entered promiscuous mode [ 83.001409][ T5832] veth1_macvtap: entered promiscuous mode [ 83.031606][ T5844] veth1_vlan: entered promiscuous mode [ 83.073055][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.115415][ T5836] veth0_macvtap: entered promiscuous mode [ 83.144295][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.171036][ T5844] veth0_macvtap: entered promiscuous mode [ 83.192174][ T5836] veth1_macvtap: entered promiscuous mode [ 83.209028][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.218521][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.227882][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.237297][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.251886][ T5844] veth1_macvtap: entered promiscuous mode [ 83.298363][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.314589][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.325641][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.338940][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.372357][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.383107][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.393399][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.404064][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.416871][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.441368][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.452818][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.464343][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.493074][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.504506][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.513888][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.527018][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.540248][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.551038][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.561180][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.572107][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.583314][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.614890][ T5844] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624181][ T5844] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.634052][ T5844] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.643001][ T5844] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.697413][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.714074][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.738292][ T5842] veth0_vlan: entered promiscuous mode [ 83.773187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.782041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.805368][ T5846] veth0_vlan: entered promiscuous mode [ 83.822477][ T5842] veth1_vlan: entered promiscuous mode [ 83.852234][ T5846] veth1_vlan: entered promiscuous mode [ 83.894480][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.927802][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.935683][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.032980][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.035361][ T5842] veth0_macvtap: entered promiscuous mode [ 84.055301][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.088256][ T5846] veth0_macvtap: entered promiscuous mode [ 84.100295][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.107853][ T5842] veth1_macvtap: entered promiscuous mode [ 84.116715][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.156398][ T5846] veth1_macvtap: entered promiscuous mode [ 84.184665][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.201989][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.212863][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.219658][ T5916] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3'. [ 84.229916][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.242713][ T5839] Bluetooth: hci0: command tx timeout [ 84.244671][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.259694][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.271841][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.292830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.301051][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.312270][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.313371][ T5839] Bluetooth: hci1: command tx timeout [ 84.325545][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.338567][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.349223][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.360463][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.371083][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.381002][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.392450][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.403962][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.430080][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.441055][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.451502][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.462721][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475015][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.486304][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.505653][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.546728][ T5839] Bluetooth: hci3: command tx timeout [ 84.552472][ T5850] Bluetooth: hci2: command tx timeout [ 84.563900][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.582724][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.592906][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.603539][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.616141][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.627760][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.636240][ T5850] Bluetooth: hci4: command tx timeout [ 84.639399][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.659008][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.670811][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.701043][ T5846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.728062][ T5846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.754509][ T5846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.767047][ T5846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.791201][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.800583][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.810787][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.819088][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 84.820147][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.993865][ T5926] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.031497][ T5926] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.102724][ T5926] vlan2: entered promiscuous mode [ 85.117041][ T5926] dummy0: entered promiscuous mode [ 85.155221][ T5926] team0: Port device vlan2 added [ 85.285296][ T5931] veth0_vlan: entered allmulticast mode [ 85.343863][ T5933] veth0_vlan: left promiscuous mode [ 85.371179][ T5933] veth0_vlan: entered promiscuous mode [ 85.545338][ T5939] netlink: 220 bytes leftover after parsing attributes in process `syz.1.11'. [ 85.547263][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.606425][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.643458][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.665016][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.694578][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.704154][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.811047][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.863236][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.878054][ T5943] netlink: 11 bytes leftover after parsing attributes in process `syz.3.12'. [ 86.085499][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.105795][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.151103][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.170708][ T5951] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.180161][ T5951] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.189845][ T5951] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.306415][ T5850] Bluetooth: hci0: command tx timeout [ 86.387323][ T5850] Bluetooth: hci1: command tx timeout [ 86.458748][ T5954] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 86.497737][ T5965] bond1: entered promiscuous mode [ 86.509177][ T5965] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.632373][ T5850] Bluetooth: hci3: command tx timeout [ 86.638526][ T5850] Bluetooth: hci2: command tx timeout [ 86.658811][ T5965] bond1 (unregistering): Released all slaves [ 86.716822][ T5850] Bluetooth: hci4: command tx timeout [ 86.862978][ T5985] Zero length message leads to an empty skb [ 86.955441][ T976] cfg80211: failed to load regulatory.db [ 87.187053][ T5994] netlink: 'syz.0.23': attribute type 6 has an invalid length. [ 87.445613][ T6004] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 87.685676][ T6013] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.864054][ T6013] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.901498][ T6027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.021472][ T6013] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.108385][ T6029] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 88.136958][ T6029] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 88.192731][ T6013] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.495828][ T6013] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.555784][ T6013] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.602781][ T6013] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.692492][ T6013] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.778251][ T6013] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.938521][ T6013] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.063723][ T6065] ipt_ECN: cannot use operation on non-tcp rule [ 89.195259][ T6073] geneve1: entered allmulticast mode [ 89.433287][ T6090] __nla_validate_parse: 11 callbacks suppressed [ 89.433313][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 90.005119][ T6126] macsec1: entered promiscuous mode [ 90.013206][ T6126] macsec1: entered allmulticast mode [ 90.148051][ T6105] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 91.019331][ T6166] netlink: 40 bytes leftover after parsing attributes in process `syz.1.66'. [ 91.547456][ T6189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 91.564075][ T6188] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 91.690664][ T6200] bridge0: entered promiscuous mode [ 91.703359][ T6199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 91.713815][ T6199] bridge_slave_1: left allmulticast mode [ 91.719928][ T6199] bridge_slave_1: left promiscuous mode [ 91.727318][ T6199] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.750390][ T6199] bridge_slave_0: left allmulticast mode [ 91.756393][ T6199] bridge_slave_0: left promiscuous mode [ 91.771822][ T6199] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.800053][ T6199] bridge0 (unregistering): left promiscuous mode [ 91.954258][ T6208] netlink: 52 bytes leftover after parsing attributes in process `syz.2.79'. [ 91.963353][ T6208] netlink: 24 bytes leftover after parsing attributes in process `syz.2.79'. [ 92.199056][ T6212] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.82'. [ 92.243602][ T6214] netlink: 88 bytes leftover after parsing attributes in process `syz.3.81'. [ 92.559870][ T6228] netlink: 20 bytes leftover after parsing attributes in process `syz.4.86'. [ 93.038700][ T6234] netlink: 734 bytes leftover after parsing attributes in process `syz.3.87'. [ 93.143563][ T6238] bridge0: port 3(vlan2) entered blocking state [ 93.164052][ T6238] bridge0: port 3(vlan2) entered disabled state [ 93.183223][ T6238] vlan2: entered allmulticast mode [ 93.195526][ T6238] veth1: entered allmulticast mode [ 93.233587][ T6238] vlan2: entered promiscuous mode [ 93.258464][ T6238] veth1: entered promiscuous mode [ 93.266079][ T6238] bridge0: port 3(vlan2) entered blocking state [ 93.272655][ T6238] bridge0: port 3(vlan2) entered forwarding state [ 93.320997][ T6247] dccp_v4_rcv: dropped packet with invalid checksum [ 93.355709][ T6245] netlink: 32 bytes leftover after parsing attributes in process `syz.1.91'. [ 93.663841][ T6264] x_tables: unsorted entry at hook 2 [ 93.839050][ T6265] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 93.991703][ T6288] syz.1.102[6288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.991836][ T6288] syz.1.102[6288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.034536][ T6291] netlink: 'syz.0.101': attribute type 10 has an invalid length. [ 94.056225][ T6288] syz.1.102[6288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.073966][ T6288] syz.1.102[6288] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.113500][ T6291] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.180584][ T6291] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.349603][ T976] IPVS: starting estimator thread 0... [ 94.451618][ T6305] IPVS: using max 22 ests per chain, 52800 per kthread [ 94.553428][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'. [ 94.608152][ T6311] bond1 (unregistering): Released all slaves [ 94.729323][ T6279] syz.0.101 (6279) used greatest stack depth: 19448 bytes left [ 94.934819][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 94.997604][ T6333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.115'. [ 95.190915][ T6349] netlink: 112 bytes leftover after parsing attributes in process `syz.0.117'. [ 95.369675][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.121'. [ 95.410147][ T6354] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.452253][ T6364] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 95.511802][ T6354] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.544648][ T6364] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 95.577043][ T6364] netlink: 588 bytes leftover after parsing attributes in process `syz.0.124'. [ 95.584238][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 95.605454][ T6370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.125'. [ 95.614735][ T6370] netlink: 'syz.2.125': attribute type 6 has an invalid length. [ 95.661107][ T6354] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.773479][ T6354] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.853319][ T6387] netlink: 'syz.1.131': attribute type 8 has an invalid length. [ 95.904698][ T6354] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.905330][ T6387] netlink: 20 bytes leftover after parsing attributes in process `syz.1.131'. [ 95.954870][ T6354] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.988581][ T6354] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.021502][ T6354] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.109066][ T6394] Bluetooth: MGMT ver 1.23 [ 96.209215][ T6397] IPv6: sit1: Disabled Multicast RS [ 96.309475][ T51] hid-generic 0005:10CF:0040.0001: item fetching failed at offset 0/1 [ 96.368084][ T51] hid-generic 0005:10CF:0040.0001: probe with driver hid-generic failed with error -22 [ 96.639487][ T6413] tipc: Can't bind to reserved service type 1 [ 97.028218][ T6439] bond1: entered promiscuous mode [ 97.033342][ T6439] bond1: entered allmulticast mode [ 97.046808][ T6439] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.082559][ T6439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.134874][ T6447] x_tables: duplicate underflow at hook 1 [ 97.138370][ T6446] netlink: 20 bytes leftover after parsing attributes in process `syz.3.147'. [ 97.190394][ T6448] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond_slave_0, syncid = 4, id = 0 [ 97.459663][ T6452] team0 (unregistering): Port device team_slave_0 removed [ 97.476325][ T6452] team0 (unregistering): Port device team_slave_1 removed [ 97.493130][ T6452] dummy0: left promiscuous mode [ 97.508880][ T6452] team0 (unregistering): Port device vlan2 removed [ 97.536079][ T6461] warning: `syz.0.151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.191138][ T6499] bridge_slave_1: left allmulticast mode [ 98.204917][ T6499] bridge_slave_1: left promiscuous mode [ 98.212614][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.233674][ T6499] bridge_slave_0: left allmulticast mode [ 98.251312][ T6499] bridge_slave_0: left promiscuous mode [ 98.261949][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.251698][ T6545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.263845][ T6538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.296731][ T6546] netlink: 'syz.0.181': attribute type 9 has an invalid length. [ 99.304699][ T6546] netlink: 'syz.0.181': attribute type 7 has an invalid length. [ 99.313166][ T6546] netlink: 'syz.0.181': attribute type 8 has an invalid length. [ 99.327103][ T6546] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 99.339646][ T6546] batman_adv: batadv0: Adding interface: ip6gretap1 [ 99.357783][ T6546] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.392651][ T6546] batman_adv: batadv0: Interface activated: ip6gretap1 [ 99.611708][ T6561] netlink: 'syz.1.184': attribute type 1 has an invalid length. [ 99.666262][ T6561] bond1: entered promiscuous mode [ 99.672455][ T6564] __nla_validate_parse: 5 callbacks suppressed [ 99.672474][ T6564] netlink: 3 bytes leftover after parsing attributes in process `syz.1.184'. [ 99.675863][ T6561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.747133][ T6564] batadv1: entered promiscuous mode [ 99.752707][ T6564] batadv1: entered allmulticast mode [ 99.762132][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.773490][ T6564] bond1: (slave batadv1): making interface the new active one [ 99.783742][ T6564] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.854858][ T6536] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 99.863112][ T6536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 99.945046][ T6561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 99.965216][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 99.981143][ T6570] netlink: 24 bytes leftover after parsing attributes in process `syz.2.186'. [ 99.994568][ T6570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.186'. [ 100.147571][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 100.252407][ T6580] IPVS: length: 239 != 24 [ 100.515834][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 100.595002][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 100.860911][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.1.195'. [ 101.087121][ T6589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.190'. [ 101.114710][ T6608] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 101.144558][ T6608] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.212483][ T6612] netlink: 'syz.4.201': attribute type 2 has an invalid length. [ 101.732793][ T6646] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 101.971042][ T6659] netlink: 'syz.1.212': attribute type 3 has an invalid length. [ 102.363434][ T6671] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 102.420322][ T6679] netlink: 'syz.0.219': attribute type 3 has an invalid length. [ 102.463810][ T6689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.464426][ T6691] dccp_close: ABORT with 36 bytes unread [ 102.491516][ T6688] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 102.528814][ T6679] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.538651][ T6679] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.548197][ T6679] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.557527][ T6679] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.578543][ T6679] vxlan0: entered promiscuous mode [ 102.589816][ T6679] vxlan0: entered allmulticast mode [ 102.639395][ T6679] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.648882][ T6679] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.657955][ T6679] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.666975][ T6679] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.296285][ T6718] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 103.860819][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.899269][ T6717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.076160][ T6717] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.085094][ T6717] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.105473][ T6716] delete_channel: no stack [ 104.132019][ T6717] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.146276][ T6717] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.168899][ T6717] geneve1: left allmulticast mode [ 104.184504][ T6717] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 104.261470][ T6717] vlan2: left promiscuous mode [ 104.889449][ T6777] validate_nla: 3 callbacks suppressed [ 104.889478][ T6777] netlink: 'syz.1.245': attribute type 4 has an invalid length. [ 105.260132][ T6796] Illegal XDP return value 1540807168 on prog (id 100) dev N/A, expect packet loss! [ 105.336643][ T6804] __nla_validate_parse: 12 callbacks suppressed [ 105.336669][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.252'. [ 105.616967][ T6812] netlink: 'syz.4.253': attribute type 4 has an invalid length. [ 105.684347][ T6814] netlink: 'syz.1.258': attribute type 12 has an invalid length. [ 105.698786][ T6814] netlink: 'syz.1.258': attribute type 29 has an invalid length. [ 105.714661][ T6814] netlink: 148 bytes leftover after parsing attributes in process `syz.1.258'. [ 105.725113][ T6817] netlink: 'syz.4.253': attribute type 4 has an invalid length. [ 105.894442][ T6818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 105.927051][ T6827] atomic_op ffff88807e9f9998 conn xmit_atomic 0000000000000000 [ 105.944001][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.964628][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.996363][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.014984][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.049103][ T6834] rdma_op ffff88807e9fb1f0 conn xmit_rdma 0000000000000000 [ 106.159448][ T6839] netlink: 'syz.1.262': attribute type 10 has an invalid length. [ 106.181354][ T6839] netlink: 40 bytes leftover after parsing attributes in process `syz.1.262'. [ 106.218242][ T6839] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.266192][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 106.291667][ T6839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.262'. [ 106.306299][ T6839] netlink: 1 bytes leftover after parsing attributes in process `syz.1.262'. [ 106.334175][ T5887] IPVS: starting estimator thread 0... [ 106.347201][ T6848] tipc: Started in network mode [ 106.382917][ T6848] tipc: Node identity ac1414aa, cluster identity 4711 [ 106.407440][ T6848] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.415489][ T6848] tipc: Enabled bearer , priority 10 [ 106.448240][ T6846] tipc: Enabling of bearer rejected, already enabled [ 106.458020][ T6847] IPVS: using max 19 ests per chain, 45600 per kthread [ 106.547497][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.696103][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.778066][ T6869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.272'. [ 106.846275][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 106.986385][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.043525][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 107.090036][ T6887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.279'. [ 107.126110][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.266238][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.358640][ T6911] netlink: 'syz.1.284': attribute type 21 has an invalid length. [ 107.410694][ T6747] tipc: Node number set to 2886997162 [ 107.424274][ T6909] netlink: 'syz.1.284': attribute type 21 has an invalid length. [ 107.556083][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 107.572535][ T6921] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 107.602507][ T6921] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 107.652142][ T6921] macvlan1: entered promiscuous mode [ 107.675172][ T6921] batadv_slave_0: entered promiscuous mode [ 107.727582][ T6930] GUP no longer grows the stack in syz.0.293 (6930): 20006000-2000a000 (20005000) [ 107.730738][ T6931] x_tables: duplicate underflow at hook 2 [ 107.765147][ T6930] CPU: 1 UID: 0 PID: 6930 Comm: syz.0.293 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 107.775831][ T6930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.786212][ T6930] Call Trace: [ 107.789545][ T6930] [ 107.792538][ T6930] dump_stack_lvl+0x241/0x360 [ 107.797294][ T6930] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.802560][ T6930] ? __pfx__printk+0x10/0x10 [ 107.807205][ T6930] ? find_vma+0xf9/0x170 [ 107.811504][ T6930] ? vma_is_secretmem+0xd/0x50 [ 107.816314][ T6930] ? check_vma_flags+0x52b/0x5a0 [ 107.821654][ T6930] __get_user_pages+0x4385/0x49e0 [ 107.826746][ T6930] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.832804][ T6930] ? __pfx___get_user_pages+0x10/0x10 [ 107.838253][ T6930] __gup_longterm_locked+0x49a/0x17f0 [ 107.843682][ T6930] ? __pfx___might_resched+0x10/0x10 [ 107.849021][ T6930] ? __pfx___gup_longterm_locked+0x10/0x10 [ 107.854911][ T6930] ? down_read+0x82b/0xa40 [ 107.859385][ T6930] ? is_valid_gup_args+0x124/0x200 [ 107.864636][ T6930] pin_user_pages+0x137/0x1f0 [ 107.869388][ T6930] ? __pfx_pin_user_pages+0x10/0x10 [ 107.874608][ T6930] ? trace_kmalloc+0x1f/0xd0 [ 107.879229][ T6930] xdp_umem_create+0x978/0xf30 [ 107.884027][ T6930] xsk_setsockopt+0x732/0x950 [ 107.888723][ T6930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.894026][ T6930] ? __pfx_lock_acquire+0x10/0x10 [ 107.899081][ T6930] ? aa_sock_opt_perm+0x79/0x120 [ 107.904035][ T6930] ? __pfx_xsk_setsockopt+0x10/0x10 [ 107.909256][ T6930] do_sock_setsockopt+0x3af/0x720 [ 107.914302][ T6930] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 107.919867][ T6930] ? __fget_files+0x395/0x410 [ 107.924558][ T6930] ? __fget_files+0x2a/0x410 [ 107.929167][ T6930] __x64_sys_setsockopt+0x1ee/0x280 [ 107.934386][ T6930] do_syscall_64+0xf3/0x230 [ 107.938910][ T6930] ? clear_bhb_loop+0x35/0x90 [ 107.943601][ T6930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.949518][ T6930] RIP: 0033:0x7f8f4497fed9 [ 107.953953][ T6930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.973571][ T6930] RSP: 002b:00007f8f45706058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 107.982007][ T6930] RAX: ffffffffffffffda RBX: 00007f8f44b45fa0 RCX: 00007f8f4497fed9 [ 107.990135][ T6930] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 107.998140][ T6930] RBP: 00007f8f449f3cc8 R08: 0000000000000020 R09: 0000000000000000 [ 108.006135][ T6930] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 108.014128][ T6930] R13: 0000000000000000 R14: 00007f8f44b45fa0 R15: 00007ffd94467bf8 [ 108.022128][ T6930] [ 108.027060][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 109.025946][ T6986] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 109.047846][ T6987] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 109.314375][ T7012] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 109.326860][ T7005] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 109.375590][ T7001] vlan3: entered promiscuous mode [ 109.381351][ T7001] batadv0: entered promiscuous mode [ 109.387051][ T7001] vlan3: entered allmulticast mode [ 109.392525][ T7001] batadv0: entered allmulticast mode [ 109.423376][ T7001] batadv0: left allmulticast mode [ 109.432639][ T7001] batadv0: left promiscuous mode [ 109.716791][ T7030] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.725223][ T7030] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.144767][ T7058] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.149933][ T7060] syzkaller1: entered promiscuous mode [ 110.171122][ T7060] syzkaller1: entered allmulticast mode [ 110.435158][ T7076] vxcan3: entered promiscuous mode [ 110.446490][ T7076] vxcan3: entered allmulticast mode [ 110.494039][ T7080] Cannot find set identified by id 0 to match [ 110.558492][ T7080] __nla_validate_parse: 10 callbacks suppressed [ 110.558513][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.328'. [ 110.610467][ T7080] pim6reg: entered allmulticast mode [ 110.671622][ T7080] pim6reg: left allmulticast mode [ 110.750708][ T7092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.769757][ T7092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.781974][ T7092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.797336][ T7092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 110.868880][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.332'. [ 110.887336][ T7098] netlink: 12 bytes leftover after parsing attributes in process `syz.3.332'. [ 110.907132][ T7098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.332'. [ 111.142481][ T7109] netlink: 76 bytes leftover after parsing attributes in process `syz.2.335'. [ 111.261441][ T7115] validate_nla: 1 callbacks suppressed [ 111.261466][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.353749][ T7121] netlink: 20 bytes leftover after parsing attributes in process `syz.2.338'. [ 111.369448][ T7115] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.390714][ T7120] netlink: 36 bytes leftover after parsing attributes in process `syz.0.339'. [ 111.409303][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.418150][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'. [ 111.455097][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.478268][ T7116] bond2: (slave ip6gretap1): making interface the new active one [ 111.487222][ T7116] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 111.533204][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.575657][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.618133][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.650374][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.676271][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.701477][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.730819][ T7115] netlink: 'syz.1.337': attribute type 1 has an invalid length. [ 111.746071][ C1] net_ratelimit: 3 callbacks suppressed [ 111.746093][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 111.988309][ T7151] netlink: 48 bytes leftover after parsing attributes in process `syz.0.348'. [ 112.240474][ T7167] ipvlan2: entered promiscuous mode [ 112.323033][ T7166] vlan3: entered promiscuous mode [ 112.336536][ T7166] vlan3: entered allmulticast mode [ 112.343635][ T7166] xfrm0: entered allmulticast mode [ 112.352191][ T7166] xfrm0: entered promiscuous mode [ 112.377680][ T7166] team0: Port device vlan3 added [ 112.425050][ T7173] netlink: 140 bytes leftover after parsing attributes in process `syz.0.357'. [ 112.527810][ T7178] delete_channel: no stack [ 112.613375][ T7182] xt_HMARK: spi-set and port-set can't be combined [ 112.786144][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 112.878384][ T7190] bridge0: port 3(gretap0) entered blocking state [ 112.907862][ T7190] bridge0: port 3(gretap0) entered disabled state [ 112.938125][ T7190] gretap0: entered allmulticast mode [ 112.945380][ T7190] gretap0: entered promiscuous mode [ 113.021309][ T7195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.048754][ T7197] gretap0: left allmulticast mode [ 113.056159][ T7197] gretap0: left promiscuous mode [ 113.062719][ T7197] bridge0: port 3(gretap0) entered disabled state [ 113.579397][ T7215] modprobe (7215) used greatest stack depth: 19280 bytes left [ 113.828090][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.299904][ T7248] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 114.866062][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 114.947106][ T7286] x_tables: unsorted underflow at hook 3 [ 115.444360][ T7314] bridge0: port 3(batadv0) entered blocking state [ 115.456261][ T7314] bridge0: port 3(batadv0) entered disabled state [ 115.476396][ T7314] batadv0: entered allmulticast mode [ 115.487792][ T7314] batadv0: entered promiscuous mode [ 115.507507][ T7314] bridge0: port 3(batadv0) entered blocking state [ 115.514118][ T7314] bridge0: port 3(batadv0) entered forwarding state [ 115.752575][ T52] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 115.762342][ T52] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 115.769428][ T7323] __nla_validate_parse: 8 callbacks suppressed [ 115.769453][ T7323] netlink: 20 bytes leftover after parsing attributes in process `syz.3.409'. [ 115.808125][ T7323] veth0_to_bridge: entered promiscuous mode [ 115.827321][ T7323] veth0_to_bridge: left promiscuous mode [ 115.870953][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 115.890710][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.413'. [ 115.916137][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 116.004738][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz.3.414'. [ 116.057527][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 116.079365][ T7341] netlink: zone id is out of range [ 116.085498][ T7341] netlink: zone id is out of range [ 116.091469][ T7341] netlink: zone id is out of range [ 116.098139][ T7341] netlink: zone id is out of range [ 116.103705][ T7341] netlink: zone id is out of range [ 116.325340][ T7352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.418'. [ 116.364069][ T7358] validate_nla: 59 callbacks suppressed [ 116.364089][ T7358] netlink: 'syz.4.421': attribute type 1 has an invalid length. [ 116.371441][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.398755][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.405311][ T7358] netlink: 244 bytes leftover after parsing attributes in process `syz.4.421'. [ 116.464493][ T7352] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.476072][ T7352] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.517032][ T7352] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 116.524200][ T7352] batman_adv: batadv0: Removing interface: ip6gretap1 [ 116.946140][ C1] net_ratelimit: 4 callbacks suppressed [ 116.946163][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 117.074980][ T7391] dvmrp0: entered allmulticast mode [ 117.365880][ T7403] netlink: 312 bytes leftover after parsing attributes in process `syz.4.436'. [ 117.391005][ T7403] xt_bpf: check failed: parse error [ 117.449973][ T7405] syz.1.437[7405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.450086][ T7405] syz.1.437[7405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.486854][ T7405] syz.1.437[7405] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.753051][ T7416] hsr_slave_0: left promiscuous mode [ 117.756459][ T7412] netlink: 36 bytes leftover after parsing attributes in process `syz.0.443'. [ 117.792185][ T7416] hsr_slave_1: left promiscuous mode [ 117.986156][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 118.171012][ T7431] netlink: 'syz.1.449': attribute type 11 has an invalid length. [ 118.223752][ T7431] tun0: tun_chr_ioctl cmd 2148553947 [ 118.351804][ T7451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.451'. [ 119.026122][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 119.137128][ T7456] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.764375][ T7523] netlink: 'syz.3.469': attribute type 1 has an invalid length. [ 119.826251][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 120.066110][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 120.618434][ T7576] netlink: 'syz.2.481': attribute type 3 has an invalid length. [ 120.848600][ T7585] ax25_connect(): syz.4.486 uses autobind, please contact jreuter@yaina.de [ 120.897457][ T7588] __nla_validate_parse: 3 callbacks suppressed [ 120.897480][ T7588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.485'. [ 121.006168][ T7594] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 121.106115][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 121.333592][ T7618] netlink: 'syz.1.494': attribute type 4 has an invalid length. [ 121.603695][ T7633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 121.831778][ T7644] bridge0: entered promiscuous mode [ 121.931104][ T7634] bridge0: left promiscuous mode [ 122.146224][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 122.186654][ T7672] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 122.277941][ T7677] netlink: 'syz.1.510': attribute type 13 has an invalid length. [ 122.393433][ T7679] syzkaller0: entered promiscuous mode [ 122.408280][ T7679] syzkaller0: entered allmulticast mode [ 123.196125][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 123.512740][ T7716] sctp: [Deprecated]: syz.1.520 (pid 7716) Use of int in max_burst socket option deprecated. [ 123.512740][ T7716] Use struct sctp_assoc_value instead [ 123.556318][ T7716] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.227396][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 124.554904][ T7723] netlink: 68 bytes leftover after parsing attributes in process `syz.2.523'. [ 125.133767][ T7752] netlink: 'syz.2.529': attribute type 11 has an invalid length. [ 125.276112][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 125.909143][ T7775] netlink: 48 bytes leftover after parsing attributes in process `syz.2.534'. [ 125.947331][ T7775] netlink: 100 bytes leftover after parsing attributes in process `syz.2.534'. [ 126.155285][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 126.317796][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 126.702327][ T7807] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (6) [ 126.935455][ T7820] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 127.359583][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 127.387610][ T7839] netlink: 'syz.0.556': attribute type 21 has an invalid length. [ 127.399739][ T7839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.556'. [ 127.410929][ T7839] netlink: 'syz.0.556': attribute type 1 has an invalid length. [ 127.422979][ T7839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.556'. [ 127.909818][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.560'. [ 127.926240][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.560'. [ 127.936512][ T7854] netlink: 40 bytes leftover after parsing attributes in process `syz.0.560'. [ 127.970163][ T7727] Set syz1 is full, maxelem 65536 reached [ 128.047316][ T7859] netlink: 36 bytes leftover after parsing attributes in process `syz.3.561'. [ 128.056439][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.3.561'. [ 128.386172][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 128.791683][ T7899] batadv_slave_1: entered promiscuous mode [ 128.830510][ T7899] netlink: 'syz.2.575': attribute type 10 has an invalid length. [ 128.849985][ T7898] batadv_slave_1: left promiscuous mode [ 129.426107][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 129.466256][ T7936] tun0: tun_chr_ioctl cmd 1074812118 [ 129.479865][ T7938] xt_bpf: check failed: parse error [ 129.558493][ T7943] vlan3: entered promiscuous mode [ 129.564276][ T7943] vlan0: entered promiscuous mode [ 129.577164][ T7943] vlan0: left promiscuous mode [ 129.990558][ T7969] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.476295][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.067396][ T8019] __nla_validate_parse: 9 callbacks suppressed [ 131.067418][ T8019] netlink: 64 bytes leftover after parsing attributes in process `syz.0.608'. [ 131.230083][ T8024] netlink: 'syz.3.609': attribute type 10 has an invalid length. [ 131.465873][ T8035] pim6reg1: entered promiscuous mode [ 131.488548][ T8035] pim6reg1: entered allmulticast mode [ 131.506049][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 131.685861][ T8041] bond0: entered promiscuous mode [ 131.706512][ T8041] bond_slave_0: entered promiscuous mode [ 131.722102][ T8041] bond_slave_1: entered promiscuous mode [ 131.732203][ T8041] team0: entered promiscuous mode [ 131.749774][ T8041] team_slave_0: entered promiscuous mode [ 131.755720][ T8041] team_slave_1: entered promiscuous mode [ 132.010372][ T8067] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 132.337971][ T8091] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.360466][ T8092] netlink: 92 bytes leftover after parsing attributes in process `syz.0.628'. [ 132.376112][ T5839] Bluetooth: hci4: link tx timeout [ 132.381480][ T5839] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.400172][ T5850] Bluetooth: hci4: link tx timeout [ 132.408926][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.417472][ T5850] Bluetooth: hci4: link tx timeout [ 132.422669][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.431759][ T5850] Bluetooth: hci4: link tx timeout [ 132.437205][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.450893][ T5850] Bluetooth: hci4: link tx timeout [ 132.456317][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.464151][ T5850] Bluetooth: hci4: link tx timeout [ 132.469566][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.486605][ T8098] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 132.547100][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 132.786254][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.4.634'. [ 132.796905][ T8112] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 132.809257][ T8112] netlink: 2 bytes leftover after parsing attributes in process `syz.4.634'. [ 132.820606][ T8112] team0: entered promiscuous mode [ 132.825795][ T8112] team_slave_0: entered promiscuous mode [ 132.844418][ T8112] team_slave_1: entered promiscuous mode [ 132.865583][ T8112] bridge0: port 4(team0) entered blocking state [ 132.876474][ T8112] bridge0: port 4(team0) entered disabled state [ 132.883282][ T8112] team0: entered allmulticast mode [ 132.888842][ T8112] team_slave_0: entered allmulticast mode [ 132.894949][ T8112] team_slave_1: entered allmulticast mode [ 132.903690][ T8112] bridge0: port 4(team0) entered blocking state [ 132.910899][ T8112] bridge0: port 4(team0) entered forwarding state [ 132.918406][ T8122] netlink: 'syz.0.637': attribute type 13 has an invalid length. [ 132.964970][ T8122] tipc: Enabling of bearer rejected, failed to enable media [ 133.229805][ T8134] gtp0: entered promiscuous mode [ 133.249077][ T8134] gtp0: entered allmulticast mode [ 133.350187][ T8144] IPVS: lc: TCP [::]:0 - no destination available [ 133.562408][ T5850] Bluetooth: hci4: link tx timeout [ 133.567789][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.575717][ T5850] Bluetooth: hci4: link tx timeout [ 133.580983][ T5850] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.812173][ T8171] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 133.819631][ T8171] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 134.073882][ T8185] trusted_key: syz.4.657 sent an empty control message without MSG_MORE. [ 134.443632][ T8195] vlan3: entered promiscuous mode [ 134.458080][ T8195] syz_tun: entered promiscuous mode [ 134.466571][ T5850] Bluetooth: hci4: command 0x0405 tx timeout [ 134.502517][ T8195] syz_tun: left promiscuous mode [ 134.931134][ T8216] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 135.090240][ T8231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 135.252559][ T8245] xt_l2tp: v2 tid > 0xffff: 150994944 [ 135.263090][ T8245] netlink: 24 bytes leftover after parsing attributes in process `syz.1.676'. [ 135.358478][ T8245] netlink: 52 bytes leftover after parsing attributes in process `syz.1.676'. [ 135.486798][ T8258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.680'. [ 135.653192][ T8262] xt_TCPMSS: Only works on TCP SYN packets [ 135.908502][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.688'. [ 135.917878][ T8275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.688'. [ 136.261895][ T8301] netlink: 'syz.0.697': attribute type 15 has an invalid length. [ 136.273096][ T8302] netlink: 'syz.0.697': attribute type 15 has an invalid length. [ 136.532244][ T8319] netlink: 104 bytes leftover after parsing attributes in process `syz.3.702'. [ 137.410824][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.0.718'. [ 137.431778][ T8385] netlink: 'syz.1.719': attribute type 9 has an invalid length. [ 137.460169][ T8385] netlink: 244 bytes leftover after parsing attributes in process `syz.1.719'. [ 137.502315][ T8392] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 137.521802][ T8392] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 137.550348][ T8392] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.557368][ T8394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.721'. [ 137.576137][ T8392] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.595432][ T8392] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.606959][ T8392] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 137.653997][ T8400] pimreg: entered allmulticast mode [ 137.826667][ T8407] bond4: entered promiscuous mode [ 137.832085][ T8407] bond4: entered allmulticast mode [ 137.838022][ T8407] 8021q: adding VLAN 0 to HW filter on device bond4 [ 137.873276][ T8414] netlink: 16 bytes leftover after parsing attributes in process `syz.2.727'. [ 138.077136][ T8422] dccp_invalid_packet: P.type (RESET) not Data || [Data]Ack, while P.X == 0 [ 138.152049][ T8424] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 138.221245][ T8424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.282199][ T8433] bond2: (slave veth5): Enslaving as an active interface with a down link [ 138.306187][ T8436] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 138.348021][ T8436] x_tables: ip_tables: osf match: only valid for protocol 6 [ 138.403595][ T8442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 138.417401][ T8442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.736'. [ 138.605300][ T8450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.738'. [ 139.019869][ T8474] bridge0: port 3(batadv0) entered disabled state [ 139.110078][ T8474] bridge0: port 3(batadv0) entered blocking state [ 139.116717][ T8474] bridge0: port 3(batadv0) entered forwarding state [ 139.128540][ T8468] netlink: 240 bytes leftover after parsing attributes in process `syz.3.743'. [ 139.137429][ T8474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.176863][ T8453] netlink: 'syz.4.739': attribute type 4 has an invalid length. [ 139.227782][ T8457] netlink: 'syz.4.739': attribute type 4 has an invalid length. [ 139.503600][ T8493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.752'. [ 139.565349][ T8496] : entered promiscuous mode [ 140.376297][ T8548] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 140.515510][ T8] IPVS: starting estimator thread 0... [ 140.522553][ T8555] tipc: Started in network mode [ 140.532335][ T8555] tipc: Node identity ac1414aa, cluster identity 4711 [ 140.540259][ T8555] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.547918][ T8555] tipc: Enabled bearer , priority 10 [ 140.626291][ T8557] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.676380][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.816204][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.956104][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.096206][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.236160][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.376167][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.517609][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 141.656658][ T8] tipc: Node number set to 2886997162 [ 141.682661][ T8609] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 141.783940][ T8619] xt_socket: unknown flags 0x4 [ 142.050614][ T8629] FAULT_INJECTION: forcing a failure. [ 142.050614][ T8629] name failslab, interval 1, probability 0, space 0, times 1 [ 142.080789][ T8629] CPU: 1 UID: 0 PID: 8629 Comm: syz.1.798 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 142.091632][ T8629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 142.101729][ T8629] Call Trace: [ 142.105040][ T8629] [ 142.108022][ T8629] dump_stack_lvl+0x241/0x360 [ 142.112755][ T8629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.118086][ T8629] ? __pfx__printk+0x10/0x10 [ 142.122819][ T8629] ? __kmalloc_cache_noprof+0x48/0x390 [ 142.128338][ T8629] ? __pfx___might_resched+0x10/0x10 [ 142.133670][ T8629] should_fail_ex+0x3b0/0x4e0 [ 142.138419][ T8629] should_failslab+0xac/0x100 [ 142.143153][ T8629] __kmalloc_cache_noprof+0x70/0x390 [ 142.148497][ T8629] ? alloc_pipe_info+0xeb/0x4d0 [ 142.153379][ T8629] alloc_pipe_info+0xeb/0x4d0 [ 142.158093][ T8629] splice_direct_to_actor+0xa9e/0xc80 [ 142.163500][ T8629] ? aa_file_perm+0x3ef/0xf50 [ 142.168214][ T8629] ? __pfx_aa_file_perm+0x10/0x10 [ 142.173287][ T8629] ? __pfx_direct_splice_actor+0x10/0x10 [ 142.178969][ T8629] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 142.184914][ T8629] ? __fget_files+0x2a/0x410 [ 142.189519][ T8629] ? __pfx_lock_release+0x10/0x10 [ 142.194564][ T8629] do_splice_direct+0x289/0x3e0 [ 142.199444][ T8629] ? __pfx_do_splice_direct+0x10/0x10 [ 142.204831][ T8629] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 142.210749][ T8629] ? bpf_lsm_file_permission+0x9/0x10 [ 142.216147][ T8629] ? security_file_permission+0x74/0x280 [ 142.221801][ T8629] ? rw_verify_area+0x1c3/0x6f0 [ 142.226670][ T8629] do_sendfile+0x564/0x8a0 [ 142.231105][ T8629] ? __pfx_do_sendfile+0x10/0x10 [ 142.236058][ T8629] ? __fget_files+0x2a/0x410 [ 142.240692][ T8629] __se_sys_sendfile64+0x17c/0x1e0 [ 142.245840][ T8629] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 142.251493][ T8629] ? do_syscall_64+0x100/0x230 [ 142.256296][ T8629] ? do_syscall_64+0xb6/0x230 [ 142.260994][ T8629] do_syscall_64+0xf3/0x230 [ 142.265514][ T8629] ? clear_bhb_loop+0x35/0x90 [ 142.270202][ T8629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.276124][ T8629] RIP: 0033:0x7f6da2d7fed9 [ 142.280635][ T8629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.300348][ T8629] RSP: 002b:00007f6da3bd4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 142.308881][ T8629] RAX: ffffffffffffffda RBX: 00007f6da2f45fa0 RCX: 00007f6da2d7fed9 [ 142.316868][ T8629] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 142.324859][ T8629] RBP: 00007f6da3bd40a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.332871][ T8629] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 142.340874][ T8629] R13: 0000000000000000 R14: 00007f6da2f45fa0 R15: 00007ffd670f6338 [ 142.348871][ T8629] [ 142.429520][ T8637] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 142.617404][ T8647] veth2: entered allmulticast mode [ 142.668129][ T8650] IPv6: sit1: Disabled Multicast RS [ 142.787870][ T8654] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 142.829583][ T8656] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 142.867834][ T8654] IPVS: set_ctl: invalid protocol: 47031 0.0.0.0:0 [ 142.895754][ T8656] IPVS: set_ctl: invalid protocol: 47031 0.0.0.0:0 [ 143.108077][ T8665] __nla_validate_parse: 9 callbacks suppressed [ 143.108099][ T8665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.808'. [ 143.294325][ T8666] netlink: 20 bytes leftover after parsing attributes in process `syz.0.808'. [ 143.626757][ T8670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.809'. [ 143.646281][ T8668] netlink: 40 bytes leftover after parsing attributes in process `syz.3.809'. [ 143.666104][ C0] net_ratelimit: 4 callbacks suppressed [ 143.666127][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 143.934549][ T8677] FAULT_INJECTION: forcing a failure. [ 143.934549][ T8677] name failslab, interval 1, probability 0, space 0, times 0 [ 143.958207][ T8678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.812'. [ 143.967289][ T8677] CPU: 0 UID: 0 PID: 8677 Comm: syz.3.814 Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 143.977922][ T8677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 143.988010][ T8677] Call Trace: [ 143.991313][ T8677] [ 143.994269][ T8677] dump_stack_lvl+0x241/0x360 [ 143.999000][ T8677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.004241][ T8677] ? __pfx__printk+0x10/0x10 [ 144.008873][ T8677] ? __kmalloc_noprof+0xb5/0x4c0 [ 144.013853][ T8677] ? __pfx___might_resched+0x10/0x10 [ 144.019172][ T8677] should_fail_ex+0x3b0/0x4e0 [ 144.023882][ T8677] should_failslab+0xac/0x100 [ 144.028605][ T8677] __kmalloc_noprof+0xdd/0x4c0 [ 144.033429][ T8677] ? __kmalloc_cache_noprof+0x243/0x390 [ 144.039062][ T8677] ? alloc_pipe_info+0x1ff/0x4d0 [ 144.044038][ T8677] alloc_pipe_info+0x1ff/0x4d0 [ 144.048846][ T8677] splice_direct_to_actor+0xa9e/0xc80 [ 144.054348][ T8677] ? aa_file_perm+0x3ef/0xf50 [ 144.059081][ T8677] ? __pfx_aa_file_perm+0x10/0x10 [ 144.064139][ T8677] ? __pfx_direct_splice_actor+0x10/0x10 [ 144.069805][ T8677] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 144.075729][ T8677] ? __fget_files+0x2a/0x410 [ 144.080343][ T8677] ? __pfx_lock_release+0x10/0x10 [ 144.085399][ T8677] do_splice_direct+0x289/0x3e0 [ 144.090295][ T8677] ? __pfx_do_splice_direct+0x10/0x10 [ 144.095709][ T8677] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 144.101843][ T8677] ? bpf_lsm_file_permission+0x9/0x10 [ 144.107272][ T8677] ? security_file_permission+0x74/0x280 [ 144.112973][ T8677] ? rw_verify_area+0x1c3/0x6f0 [ 144.117878][ T8677] do_sendfile+0x564/0x8a0 [ 144.122347][ T8677] ? __pfx_do_sendfile+0x10/0x10 [ 144.127319][ T8677] ? __fget_files+0x2a/0x410 [ 144.132041][ T8677] __se_sys_sendfile64+0x17c/0x1e0 [ 144.137200][ T8677] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 144.142880][ T8677] ? do_syscall_64+0x100/0x230 [ 144.147700][ T8677] ? do_syscall_64+0xb6/0x230 [ 144.152428][ T8677] do_syscall_64+0xf3/0x230 [ 144.156969][ T8677] ? clear_bhb_loop+0x35/0x90 [ 144.161682][ T8677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.167618][ T8677] RIP: 0033:0x7f2a35f7fed9 [ 144.172060][ T8677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.191703][ T8677] RSP: 002b:00007f2a33df6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 144.200173][ T8677] RAX: ffffffffffffffda RBX: 00007f2a36145fa0 RCX: 00007f2a35f7fed9 [ 144.208177][ T8677] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 144.216442][ T8677] RBP: 00007f2a33df60a0 R08: 0000000000000000 R09: 0000000000000000 [ 144.224436][ T8677] R10: 00000000f03a0005 R11: 0000000000000246 R12: 0000000000000001 [ 144.232434][ T8677] R13: 0000000000000000 R14: 00007f2a36145fa0 R15: 00007ffcc9f360f8 [ 144.240456][ T8677] [ 144.307401][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.812'. [ 144.518224][ T8692] netlink: 36 bytes leftover after parsing attributes in process `syz.3.815'. [ 144.622503][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.0.817'. [ 144.706058][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 144.819882][ T8702] netlink: 452 bytes leftover after parsing attributes in process `syz.1.818'. [ 145.070102][ T8706] netlink: set zone limit has 8 unknown bytes [ 145.600314][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.827'. [ 145.746213][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 146.135588][ T8756] dvmrp8: entered allmulticast mode [ 146.144161][ T8756] dvmrp8: left allmulticast mode [ 146.786140][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 146.867138][ C1] ------------[ cut here ]------------ [ 146.872943][ C1] WARNING: CPU: 1 PID: 17 at net/ipv4/af_inet.c:156 inet_sock_destruct+0x6fc/0x810 [ 146.882329][ C1] Modules linked in: [ 146.886301][ C1] CPU: 1 UID: 0 PID: 17 Comm: rcu_preempt Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 146.896970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 146.907113][ C1] RIP: 0010:inet_sock_destruct+0x6fc/0x810 [ 146.911356][ T8780] tipc: Started in network mode [ 146.912947][ C1] Code: 5a f7 90 0f 0b 90 e9 17 fe ff ff e8 fe 94 5a f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 94 5a f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 146.926244][ T8780] tipc: Node identity 1, cluster identity 4711 [ 146.937494][ C1] RSP: 0000:ffffc90000a18b50 EFLAGS: 00010246 [ 146.937532][ C1] RAX: ffffffff8a44dd3b RBX: 0000000000000fee RCX: ffff88801ced0000 [ 146.937550][ C1] RDX: 0000000000000100 RSI: 0000000000000fee RDI: 0000000000000000 [ 146.937565][ C1] RBP: ffff888078e59b00 R08: ffffffff8a44dbea R09: 1ffff1100f1cb3b3 [ 146.937581][ C1] R10: dffffc0000000000 R11: ffffed100f1cb3b4 R12: 1ffff1100f1cb365 [ 146.937599][ C1] R13: ffff888078e59fe8 R14: ffff888078e59b28 R15: ffff888078e59b12 [ 146.937617][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 146.937637][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 146.946192][ T8780] tipc: Node number set to 1 [ 146.950518][ C1] CR2: 0000000020ec8030 CR3: 000000002fd0a000 CR4: 00000000003526f0 [ 147.018899][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 147.026927][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 147.034950][ C1] Call Trace: [ 147.038293][ C1] [ 147.041168][ C1] ? __warn+0x165/0x4d0 [ 147.045386][ C1] ? inet_sock_destruct+0x6fc/0x810 [ 147.050667][ C1] ? report_bug+0x2b3/0x500 [ 147.055228][ C1] ? inet_sock_destruct+0x6fc/0x810 [ 147.060521][ C1] ? handle_bug+0x60/0x90 [ 147.064995][ C1] ? exc_invalid_op+0x1a/0x50 [ 147.069771][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 147.074881][ C1] ? inet_sock_destruct+0x5aa/0x810 [ 147.080185][ C1] ? inet_sock_destruct+0x6fb/0x810 [ 147.085455][ C1] ? inet_sock_destruct+0x6fc/0x810 [ 147.090743][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 147.096756][ C1] ? rcu_core+0xa37/0x17a0 [ 147.101239][ C1] __sk_destruct+0x58/0x5f0 [ 147.105800][ C1] ? rcu_core+0xa37/0x17a0 [ 147.110312][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 147.115477][ C1] rcu_core+0xaaa/0x17a0 [ 147.119829][ C1] ? __pfx_rcu_core+0x10/0x10 [ 147.124568][ C1] ? sched_balance_domains+0x91b/0xa90 [ 147.130165][ C1] ? sched_balance_domains+0x1b2/0xa90 [ 147.135690][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 147.141675][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 147.146958][ C1] handle_softirqs+0x2d4/0x9b0 [ 147.151792][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 147.156654][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 147.162002][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 147.167283][ C1] __irq_exit_rcu+0xf7/0x220 [ 147.171925][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 147.177213][ C1] irq_exit_rcu+0x9/0x30 [ 147.181527][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 147.187240][ C1] [ 147.190207][ C1] [ 147.193170][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.199226][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 147.205788][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 2e 0a 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 34 9a f5 65 8b 05 24 86 30 74 85 c0 74 43 48 c7 04 24 0e 36 [ 147.225472][ C1] RSP: 0000:ffffc90000167880 EFLAGS: 00000206 [ 147.231622][ C1] RAX: a3c64c9c8bde0700 RBX: 1ffff9200002cf14 RCX: ffffffff9a3c1903 [ 147.239677][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9680 RDI: 0000000000000001 [ 147.247727][ C1] RBP: ffffc90000167910 R08: ffffffff90195277 R09: 1ffffffff2032a4e [ 147.255780][ C1] R10: dffffc0000000000 R11: fffffbfff2032a4f R12: dffffc0000000000 [ 147.263833][ C1] R13: 1ffff9200002cf10 R14: ffffc900001678a0 R15: 0000000000000246 [ 147.271914][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.278356][ C1] debug_object_assert_init+0x2dd/0x4b0 [ 147.283985][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 147.290167][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.296594][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.301939][ C1] __mod_timer+0x10d/0xeb0 [ 147.306431][ C1] ? __asan_memset+0x23/0x50 [ 147.311070][ C1] ? lockdep_init_map_type+0xa1/0x910 [ 147.316516][ C1] ? __pfx___mod_timer+0x10/0x10 [ 147.321498][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.327560][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.333935][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.339303][ C1] ? init_timer_on_stack_key+0xde/0x110 [ 147.344907][ C1] schedule_timeout+0x155/0x290 [ 147.349839][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 147.355269][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.360646][ C1] ? prepare_to_swait_event+0x330/0x350 [ 147.366277][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 147.371178][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 147.376514][ C1] ? rcu_gp_init+0x1256/0x1630 [ 147.381342][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 147.386357][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 147.392567][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 147.397944][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 147.403906][ C1] ? finish_swait+0xd4/0x1e0 [ 147.408596][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 147.413241][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 147.418529][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 147.424489][ C1] ? __kthread_parkme+0x169/0x1d0 [ 147.429610][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 147.434875][ C1] kthread+0x2f0/0x390 [ 147.439034][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 147.444294][ C1] ? __pfx_kthread+0x10/0x10 [ 147.448966][ C1] ret_from_fork+0x4b/0x80 [ 147.453424][ C1] ? __pfx_kthread+0x10/0x10 [ 147.458083][ C1] ret_from_fork_asm+0x1a/0x30 [ 147.462895][ C1] [ 147.465997][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 147.473303][ C1] CPU: 1 UID: 0 PID: 17 Comm: rcu_preempt Not tainted 6.13.0-rc1-syzkaller-00268-g7ea2745766d7 #0 [ 147.483922][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.494011][ C1] Call Trace: [ 147.497319][ C1] [ 147.500186][ C1] dump_stack_lvl+0x241/0x360 [ 147.504910][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.510145][ C1] ? __pfx__printk+0x10/0x10 [ 147.514783][ C1] ? vscnprintf+0x5d/0x90 [ 147.519146][ C1] panic+0x349/0x880 [ 147.523076][ C1] ? __warn+0x174/0x4d0 [ 147.527261][ C1] ? __pfx_panic+0x10/0x10 [ 147.531723][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 147.536698][ C1] __warn+0x344/0x4d0 [ 147.540713][ C1] ? inet_sock_destruct+0x6fc/0x810 [ 147.545949][ C1] report_bug+0x2b3/0x500 [ 147.550346][ C1] ? inet_sock_destruct+0x6fc/0x810 [ 147.555574][ C1] handle_bug+0x60/0x90 [ 147.559757][ C1] exc_invalid_op+0x1a/0x50 [ 147.564284][ C1] asm_exc_invalid_op+0x1a/0x20 [ 147.569173][ C1] RIP: 0010:inet_sock_destruct+0x6fc/0x810 [ 147.575102][ C1] Code: 5a f7 90 0f 0b 90 e9 17 fe ff ff e8 fe 94 5a f7 90 0f 0b 90 41 80 3c 2c 00 0f 85 40 fe ff ff e9 43 fe ff ff e8 e5 94 5a f7 90 <0f> 0b 90 e9 b3 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 00 fc [ 147.594734][ C1] RSP: 0000:ffffc90000a18b50 EFLAGS: 00010246 [ 147.600848][ C1] RAX: ffffffff8a44dd3b RBX: 0000000000000fee RCX: ffff88801ced0000 [ 147.608842][ C1] RDX: 0000000000000100 RSI: 0000000000000fee RDI: 0000000000000000 [ 147.616835][ C1] RBP: ffff888078e59b00 R08: ffffffff8a44dbea R09: 1ffff1100f1cb3b3 [ 147.624833][ C1] R10: dffffc0000000000 R11: ffffed100f1cb3b4 R12: 1ffff1100f1cb365 [ 147.632855][ C1] R13: ffff888078e59fe8 R14: ffff888078e59b28 R15: ffff888078e59b12 [ 147.640970][ C1] ? inet_sock_destruct+0x5aa/0x810 [ 147.646212][ C1] ? inet_sock_destruct+0x6fb/0x810 [ 147.651452][ C1] ? __pfx_inet6_sock_destruct+0x10/0x10 [ 147.657129][ C1] ? rcu_core+0xa37/0x17a0 [ 147.661592][ C1] __sk_destruct+0x58/0x5f0 [ 147.666133][ C1] ? rcu_core+0xa37/0x17a0 [ 147.670582][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 147.675742][ C1] rcu_core+0xaaa/0x17a0 [ 147.680060][ C1] ? __pfx_rcu_core+0x10/0x10 [ 147.685055][ C1] ? sched_balance_domains+0x91b/0xa90 [ 147.690580][ C1] ? sched_balance_domains+0x1b2/0xa90 [ 147.696107][ C1] ? __pfx_sched_balance_domains+0x10/0x10 [ 147.701996][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 147.707231][ C1] handle_softirqs+0x2d4/0x9b0 [ 147.712026][ C1] ? __irq_exit_rcu+0xf7/0x220 [ 147.716814][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 147.722123][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 147.727341][ C1] __irq_exit_rcu+0xf7/0x220 [ 147.731953][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 147.737176][ C1] irq_exit_rcu+0x9/0x30 [ 147.741435][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 147.747181][ C1] [ 147.750121][ C1] [ 147.753061][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.759067][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 147.765628][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 2e 0a 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 43 34 9a f5 65 8b 05 24 86 30 74 85 c0 74 43 48 c7 04 24 0e 36 [ 147.785262][ C1] RSP: 0000:ffffc90000167880 EFLAGS: 00000206 [ 147.791370][ C1] RAX: a3c64c9c8bde0700 RBX: 1ffff9200002cf14 RCX: ffffffff9a3c1903 [ 147.799385][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0a9680 RDI: 0000000000000001 [ 147.807380][ C1] RBP: ffffc90000167910 R08: ffffffff90195277 R09: 1ffffffff2032a4e [ 147.815396][ C1] R10: dffffc0000000000 R11: fffffbfff2032a4f R12: dffffc0000000000 [ 147.823394][ C1] R13: 1ffff9200002cf10 R14: ffffc900001678a0 R15: 0000000000000246 [ 147.831402][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.837852][ C1] debug_object_assert_init+0x2dd/0x4b0 [ 147.843430][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 147.849523][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 147.855872][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.861176][ C1] __mod_timer+0x10d/0xeb0 [ 147.865601][ C1] ? __asan_memset+0x23/0x50 [ 147.870201][ C1] ? lockdep_init_map_type+0xa1/0x910 [ 147.875590][ C1] ? __pfx___mod_timer+0x10/0x10 [ 147.880536][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 147.886532][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 147.892956][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.898272][ C1] ? init_timer_on_stack_key+0xde/0x110 [ 147.903827][ C1] schedule_timeout+0x155/0x290 [ 147.908691][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 147.914079][ C1] ? __pfx_process_timeout+0x10/0x10 [ 147.919388][ C1] ? prepare_to_swait_event+0x330/0x350 [ 147.924950][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 147.929814][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 147.935029][ C1] ? rcu_gp_init+0x1256/0x1630 [ 147.939813][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 147.944765][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 147.950945][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 147.956253][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 147.962167][ C1] ? finish_swait+0xd4/0x1e0 [ 147.966773][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 147.971394][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 147.976607][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 147.982524][ C1] ? __kthread_parkme+0x169/0x1d0 [ 147.987570][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 147.992778][ C1] kthread+0x2f0/0x390 [ 147.996858][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 148.002066][ C1] ? __pfx_kthread+0x10/0x10 [ 148.006861][ C1] ret_from_fork+0x4b/0x80 [ 148.011312][ C1] ? __pfx_kthread+0x10/0x10 [ 148.015917][ C1] ret_from_fork_asm+0x1a/0x30 [ 148.020874][ C1] [ 148.024277][ C1] Kernel Offset: disabled [ 148.028636][ C1] Rebooting in 86400 seconds..