last executing test programs: 4.854445821s ago: executing program 0 (id=213): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r1, 0x4, r0}, 0x10) 4.662012888s ago: executing program 2 (id=216): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) close(r2) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 4.528502379s ago: executing program 0 (id=219): epoll_create1(0x0) socket(0x1, 0x80802, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000002c0), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 4.448180141s ago: executing program 3 (id=220): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x10) socket$inet6(0xa, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32=r0, @ANYBLOB="00000000da44000024001a8020000a80140007"], 0x58}}, 0x0) 4.414622637s ago: executing program 1 (id=221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000002"], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x83, 0x0, &(0x7f0000000780)="896b49a6b895ede6c68254968e7c58b5ea64d3b37d0a3432b664af1308d1f9f2c1d14a0f389f489f8f73d570afd4dc28164e4b7ad5bef51a8bafa15269fca5eafd9d72ae53b93d939c41c15f0ec422f44ee64bf498c3d6b7fefb17de7ca2b6d78b65f61b2b6192b1b98bf2f49c8f39f15775cd5a1643061f00c87c016d04a0872a8d38", 0x4, 0x0, 0xfffffffb}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r3, &(0x7f0000000800), 0x0}, 0x20) 4.209063812s ago: executing program 1 (id=223): openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000040), &(0x7f0000001e80)=r2}, 0x20) 4.172760551s ago: executing program 3 (id=224): pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppoe(0x18, 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$netlink(0x10, 0x3, 0x9) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x24, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 4.143602852s ago: executing program 2 (id=225): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)=""/192, 0xc0}], 0x1}, 0x10000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) 3.829147497s ago: executing program 1 (id=226): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x3}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x308) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 3.670127697s ago: executing program 4 (id=227): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x14, 0x0, 0x8, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r2, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0xbb, 0x0, &(0x7f0000000140)=0x33) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) 3.491233554s ago: executing program 3 (id=228): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000140)=0xc) 3.447929237s ago: executing program 4 (id=229): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x9f}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x8a, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 3.394381904s ago: executing program 0 (id=230): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000380)={r4, r0, 0x0, r3}, 0x10) 3.286286408s ago: executing program 3 (id=231): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.255649178s ago: executing program 4 (id=232): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0x17) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r2, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/79, 0x4f}], 0x1}, 0x3}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) listen(r1, 0x0) r3 = accept4$bt_l2cap(r1, 0x0, 0x0, 0x0) shutdown(r3, 0x0) 3.199548436s ago: executing program 0 (id=233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x6d) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) poll(&(0x7f0000001e80)=[{}, {}], 0x20000000000000c8, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x4000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0) 3.119340031s ago: executing program 2 (id=234): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d64050000000000650404000100000004040000fb007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e1a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080e71113610e10d858e8327edb1fb6c86adac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18c65ae1bd4f4390af9a9ceafd07ed00b0000002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a469398685211bbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72c7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9624d37c10223fdae7ed04935c3c9068000000bc8619d73415cda2130f5011e4845500a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b40000000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b60c2499d16d7d9158ffffffff00000000ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a9e90d7676074a0bde4471414c99d4894ee7f8139dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b2042b8ff8c21ad702cca54728acad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd20785f653b621491dc6aaee0d409731091f4fb94c06006e3c1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e1590bab105b0cb578af7dc7d5e87d48d376444e2de02f47c61e8e84ff828de453f34c2b08660b080efc707e676e1fb4d5865c0ca177a4c7fbb4e829ab0894a1062b445c00f576b2b5cc7f819abd0f885cc4806f47ffb966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d3676329bb8cda690d192a070886df42b2708398773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169cdfaa4252d4ea6b8f6216ff202b5b5a182cb5e8380100632d03a7ca6f6d0339f9953c30930804fdc3690d10ecb65dc5b47481edbf1eee2e8893e903054d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026def743f1213bf817becd9e5a225d67521d1128eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979030000007081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f324661351df747aa6a65872dfdcfa68f65bd06b4082d43e121861b5cc09b986bf56c747d9a1cc5b506892c3a16ff10feea20bdac89bfb758cf3500000000000000000000000000000098e6db5a96055e764a3bfd4ccb20d2e800994f4b602d25b2c076f21c7102687e054bb93b2d013be6227fd99902b074c0de00733128c81c48c5e140b17d71ac48f137d10798c4272826d2ba55bbda0059636528c132ed06759d880d1bc291beea56ed7ee8bcb392fdf886dbc74879ec4b831904d7c101ebbaef3c0ae6d0cf0000000000000000000000000000000011cb735f66a559ef0cdb5163a15c0bb986474bf5d9542e3e48805ce53127e4c076d69d868df543717aaaa07d7aca056f7f036c2bcba0795d1a64868a29ac5321b3cd6ef5b1a741afc7124e16b64a5d1d68b45fcfd7e531090ceae2f05536a4d5d6a4081e743827fb9c031d1fc9f195c2da189c49eaed6c30c71da0452e502ef393efeb02ebe82b1851cae5fa7c958ba23110b5e0e5b890803f28a356b2920e74564e0f8377b0ba515d4cc28d702287fed2882b4780a1bcb583f1cb1470003ef9b592b9461328cfc01ebfce0ecdcea714a517dc40000000000000000000000000006bd0561e1cc72880cc3ec1bdf35eb670a9040e3b53cd826b94ad8aeb014e74787fe89fb3247a87d8bfb6d400142369f88964708d1d4d"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 3.009942645s ago: executing program 0 (id=235): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r3, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xfdef}], 0x1) 2.758496643s ago: executing program 2 (id=236): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 2.563644536s ago: executing program 2 (id=237): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x5, &(0x7f0000000180)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.385619951s ago: executing program 2 (id=238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) write$cgroup_devices(r0, 0x0, 0xffdd) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x8}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={0xffffffffffffffff, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x4, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000e80), 0x10, 0x1, @void, @value}, 0x94) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac1414aa0000"], 0x54}}, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x4000) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x9) ioctl$sock_netdev_private(r3, 0x8924, &(0x7f0000000000)) 2.380616322s ago: executing program 1 (id=239): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/80, 0x50}], 0x1}, 0x40010003) recvmmsg(r1, 0x0, 0x0, 0x40000140, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r2, 0x0, 0x0, 0x0, &(0x7f0000000380), 0x10) connect$llc(r2, 0x0, 0x0) 2.269939447s ago: executing program 3 (id=240): bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x101}, 0x1c) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001e40)={r3, &(0x7f0000000300), 0x0}, 0x20) 2.145827964s ago: executing program 4 (id=241): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r1, r2, 0x4, 0x0, 0x0, @void, @value}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r3, r4, 0x26, 0x0, 0x0, @void, @value}, 0x10) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r3, &(0x7f0000000240), &(0x7f00000000c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f0000000100), &(0x7f0000000140)=@udp6=r0}, 0x20) 2.06054484s ago: executing program 3 (id=242): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.047818141s ago: executing program 4 (id=243): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffffd}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x44}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0x1000, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 1.878253008s ago: executing program 4 (id=244): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x104, 0x4, 0x4d8, 0x208, 0x208, 0x108, 0x3f0, 0x3f0, 0x3f0, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@arp={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'veth1_vlan\x00'}, 0xc0, 0x1e8}, @unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:auditd_unit_file_t:s0\x00'}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x528) r1 = socket(0x200000000000011, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0xc, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.330290714s ago: executing program 1 (id=245): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) r1 = socket(0x2, 0x3, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r1, &(0x7f0000000180)="200000d9", 0x4, 0x4008000, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) 1.20670063s ago: executing program 1 (id=246): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r5}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r7, r4, 0x0, r7}, 0x10) 0s ago: executing program 0 (id=247): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 73.822720][ T5835] cgroup: Unknown subsys name 'net' [ 73.957349][ T5835] cgroup: Unknown subsys name 'cpuset' [ 73.967158][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.577445][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.869760][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.878730][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.893624][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.914299][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.933743][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.941946][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.959663][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.969182][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.013765][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.027391][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.037479][ T5853] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.045381][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.080440][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.089492][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.090515][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.113520][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.121068][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.130649][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.134037][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.139192][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.146021][ T5859] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.153068][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.159677][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.166967][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.233923][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.251140][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.263607][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.273621][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.299005][ T5848] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.306854][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.581895][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 78.760059][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 78.793651][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 78.805354][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 78.831309][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.839244][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.847225][ T5845] bridge_slave_0: entered allmulticast mode [ 78.855894][ T5845] bridge_slave_0: entered promiscuous mode [ 78.889742][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.897395][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.905320][ T5845] bridge_slave_1: entered allmulticast mode [ 78.912535][ T5845] bridge_slave_1: entered promiscuous mode [ 78.929209][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 79.013312][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.079519][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.146504][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.157766][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.165270][ T5849] bridge_slave_0: entered allmulticast mode [ 79.172046][ T5849] bridge_slave_0: entered promiscuous mode [ 79.180719][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.188092][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.195702][ T5849] bridge_slave_1: entered allmulticast mode [ 79.202448][ T5849] bridge_slave_1: entered promiscuous mode [ 79.209479][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.216759][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.224107][ T5854] bridge_slave_0: entered allmulticast mode [ 79.230919][ T5854] bridge_slave_0: entered promiscuous mode [ 79.245428][ T5845] team0: Port device team_slave_0 added [ 79.251686][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.258895][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.266398][ T5857] bridge_slave_0: entered allmulticast mode [ 79.273155][ T5857] bridge_slave_0: entered promiscuous mode [ 79.298905][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.306946][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.314820][ T5854] bridge_slave_1: entered allmulticast mode [ 79.321739][ T5854] bridge_slave_1: entered promiscuous mode [ 79.334026][ T5845] team0: Port device team_slave_1 added [ 79.340512][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.348395][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.355943][ T5857] bridge_slave_1: entered allmulticast mode [ 79.362679][ T5857] bridge_slave_1: entered promiscuous mode [ 79.371865][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.426461][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.454177][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.466301][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.473844][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.481130][ T5861] bridge_slave_0: entered allmulticast mode [ 79.488567][ T5861] bridge_slave_0: entered promiscuous mode [ 79.497565][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.505104][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.512864][ T5861] bridge_slave_1: entered allmulticast mode [ 79.520123][ T5861] bridge_slave_1: entered promiscuous mode [ 79.536313][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.543347][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.571098][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.605232][ T5849] team0: Port device team_slave_0 added [ 79.613020][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.651648][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.659148][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.685443][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.699396][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.712148][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.724164][ T5849] team0: Port device team_slave_1 added [ 79.739723][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.812548][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.836276][ T5857] team0: Port device team_slave_0 added [ 79.842840][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.850229][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.877243][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.891986][ T5854] team0: Port device team_slave_0 added [ 79.911100][ T5845] hsr_slave_0: entered promiscuous mode [ 79.918599][ T5845] hsr_slave_1: entered promiscuous mode [ 79.927140][ T5857] team0: Port device team_slave_1 added [ 79.934826][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.941826][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.968881][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.982220][ T5854] team0: Port device team_slave_1 added [ 79.999883][ T5861] team0: Port device team_slave_0 added [ 80.034775][ T5848] Bluetooth: hci0: command tx timeout [ 80.045144][ T5861] team0: Port device team_slave_1 added [ 80.065739][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.072798][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.100368][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.111155][ T5848] Bluetooth: hci1: command tx timeout [ 80.149111][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.156324][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.183282][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.193985][ T5848] Bluetooth: hci2: command tx timeout [ 80.201236][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.208493][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.234542][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.255404][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.262425][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.289613][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.289658][ T5848] Bluetooth: hci3: command tx timeout [ 80.331378][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.338832][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.365354][ T5848] Bluetooth: hci4: command tx timeout [ 80.371440][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.400864][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.408127][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.434890][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.468940][ T5854] hsr_slave_0: entered promiscuous mode [ 80.477054][ T5854] hsr_slave_1: entered promiscuous mode [ 80.483639][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.491511][ T5854] Cannot create hsr debugfs directory [ 80.505421][ T5849] hsr_slave_0: entered promiscuous mode [ 80.511969][ T5849] hsr_slave_1: entered promiscuous mode [ 80.520076][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.528204][ T5849] Cannot create hsr debugfs directory [ 80.632369][ T5861] hsr_slave_0: entered promiscuous mode [ 80.639353][ T5861] hsr_slave_1: entered promiscuous mode [ 80.646085][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.654080][ T5861] Cannot create hsr debugfs directory [ 80.662868][ T5857] hsr_slave_0: entered promiscuous mode [ 80.670302][ T5857] hsr_slave_1: entered promiscuous mode [ 80.677002][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.684880][ T5857] Cannot create hsr debugfs directory [ 80.984521][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.008097][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.028423][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.052507][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.097066][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.125774][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.142142][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.161839][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.212981][ T5849] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.235051][ T5849] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.246458][ T5849] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.259608][ T5849] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.338263][ T5857] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.352154][ T5857] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.362473][ T5857] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.389602][ T5857] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.510074][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.525304][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.547282][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.561503][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.571259][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.636860][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.655297][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.690307][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.697948][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.719895][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.737161][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.747054][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.754338][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.783335][ T3534] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.790536][ T3534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.842495][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.849677][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.881020][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.910692][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.917909][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.957265][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.964478][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.980293][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.997284][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.058844][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.101979][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.110012][ T5848] Bluetooth: hci0: command tx timeout [ 82.126986][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.134475][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.165736][ T4965] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.172922][ T4965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.198522][ T5848] Bluetooth: hci1: command tx timeout [ 82.246572][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.253831][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.275905][ T5848] Bluetooth: hci2: command tx timeout [ 82.295462][ T4965] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.302642][ T4965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.344094][ T5848] Bluetooth: hci3: command tx timeout [ 82.424234][ T5848] Bluetooth: hci4: command tx timeout [ 82.511631][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.568176][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.620942][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.679604][ T5845] veth0_vlan: entered promiscuous mode [ 82.781597][ T5845] veth1_vlan: entered promiscuous mode [ 82.800208][ T5849] veth0_vlan: entered promiscuous mode [ 82.855917][ T5849] veth1_vlan: entered promiscuous mode [ 82.875531][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.981244][ T5845] veth0_macvtap: entered promiscuous mode [ 83.016160][ T5845] veth1_macvtap: entered promiscuous mode [ 83.027776][ T5849] veth0_macvtap: entered promiscuous mode [ 83.041832][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.060784][ T5849] veth1_macvtap: entered promiscuous mode [ 83.081275][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.101428][ T5861] veth0_vlan: entered promiscuous mode [ 83.121450][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.132642][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.145192][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.161786][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.187179][ T5861] veth1_vlan: entered promiscuous mode [ 83.202174][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.211364][ T5845] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.220797][ T5845] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.231215][ T5845] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244629][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.256014][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.269396][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.289699][ T5849] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.298820][ T5849] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.308217][ T5849] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.317922][ T5849] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.379187][ T5854] veth0_vlan: entered promiscuous mode [ 83.405635][ T5857] veth0_vlan: entered promiscuous mode [ 83.419966][ T5854] veth1_vlan: entered promiscuous mode [ 83.471561][ T5857] veth1_vlan: entered promiscuous mode [ 83.538481][ T5861] veth0_macvtap: entered promiscuous mode [ 83.562428][ T4965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.570066][ T5861] veth1_macvtap: entered promiscuous mode [ 83.571609][ T4965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.587527][ T5857] veth0_macvtap: entered promiscuous mode [ 83.622438][ T5857] veth1_macvtap: entered promiscuous mode [ 83.667216][ T5854] veth0_macvtap: entered promiscuous mode [ 83.676544][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.686524][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.712826][ T5854] veth1_macvtap: entered promiscuous mode [ 83.721919][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.733065][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.744378][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.755226][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.766453][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.776537][ T3499] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.778386][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.796651][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.797451][ T3499] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.806697][ T5861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.806720][ T5861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.808061][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.891092][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.902050][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.915984][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.927909][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.938013][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.950572][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.963836][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.974875][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.986679][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.002849][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.005097][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.013994][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.041080][ T5857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.051818][ T5857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.065326][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.078443][ T5857] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.087822][ T5857] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.097346][ T5857] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.108794][ T5857] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.131860][ T5861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.140981][ T5861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.151011][ T5861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.160005][ T5861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.173961][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.183085][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.193954][ T5848] Bluetooth: hci0: command tx timeout [ 84.218332][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.231741][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.250302][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.275801][ T5848] Bluetooth: hci1: command tx timeout [ 84.277172][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.302049][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.309828][ T5926] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 84.320827][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.336202][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.348164][ T5848] Bluetooth: hci2: command tx timeout [ 84.354167][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.366171][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.396063][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.407294][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.417306][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.429385][ T5848] Bluetooth: hci3: command tx timeout [ 84.435057][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.455938][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.468695][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.479248][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.489996][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.501422][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.510608][ T5848] Bluetooth: hci4: command tx timeout [ 84.577826][ T5854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.603498][ T5854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612311][ T5854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.630925][ T5854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.802690][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.811614][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.843256][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 84.894045][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.922972][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.969354][ T4965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.977665][ T4965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.097771][ T1335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.122241][ T1335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.133860][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.150107][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.165202][ T5939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.263659][ T5941] netlink: 'syz.0.9': attribute type 10 has an invalid length. [ 85.301984][ T5941] team0: Port device netdevsim0 added [ 85.404416][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.412311][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.488442][ T4965] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.779632][ T5952] netlink: 'syz.2.12': attribute type 11 has an invalid length. [ 85.804939][ T5955] syz.4.5[5955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.805067][ T5955] syz.4.5[5955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.864835][ T5955] syz.4.5[5955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.265439][ T5848] Bluetooth: hci0: command tx timeout [ 86.345338][ T5848] Bluetooth: hci1: command tx timeout [ 86.425610][ T5848] Bluetooth: hci2: command tx timeout [ 86.504016][ T5848] Bluetooth: hci3: command tx timeout [ 86.585075][ T5848] Bluetooth: hci4: command tx timeout [ 86.594437][ T5983] netlink: 176 bytes leftover after parsing attributes in process `syz.3.25'. [ 86.605283][ T5983] netlink: 176 bytes leftover after parsing attributes in process `syz.3.25'. [ 86.623208][ T5983] Zero length message leads to an empty skb [ 86.869789][ T5988] netlink: 'syz.2.28': attribute type 12 has an invalid length. [ 86.911544][ T5988] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.28'. [ 87.208591][ T6003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.32'. [ 88.435334][ T6047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.44'. [ 90.473546][ T6071] netlink: 16126 bytes leftover after parsing attributes in process `syz.1.52'. [ 90.482681][ T6071] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.52'. [ 90.741941][ T6080] hsr0: entered promiscuous mode [ 91.020947][ T6091] netlink: 'syz.3.59': attribute type 1 has an invalid length. [ 91.119251][ T6097] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET) [ 92.124790][ T6128] netlink: 76 bytes leftover after parsing attributes in process `syz.4.74'. [ 92.159502][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.74'. [ 92.371142][ T1204] cfg80211: failed to load regulatory.db [ 92.424419][ T6140] vlan2: entered promiscuous mode [ 92.435966][ T6140] vlan2: entered allmulticast mode [ 92.442920][ T6140] hsr_slave_1: entered allmulticast mode [ 92.512689][ T6142] netlink: 8 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.573952][ T6142] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.600644][ T6142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.81'. [ 92.680758][ T5848] block nbd0: Receive control failed (result -107) [ 92.743903][ T6142] nbd0: detected capacity change from 0 to 256 [ 92.764855][ T6146] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 92.780268][ T5852] block nbd0: Dead connection, failed to find a fallback [ 92.808170][ T5852] block nbd0: shutting down sockets [ 92.840807][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.884107][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.892811][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 92.955664][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 92.989182][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.015914][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.038392][ T6153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.86'. [ 93.073936][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.083074][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.131659][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.166913][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 93.173508][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.192081][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.240158][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.260733][ T6159] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 93.293728][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.316492][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.323699][ T6162] netlink: 48 bytes leftover after parsing attributes in process `syz.1.89'. [ 93.352229][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.401921][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.429391][ T5852] ldm_validate_partition_table(): Disk read failed. [ 93.459817][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.493570][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.514239][ T5852] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 93.529667][ T5852] Buffer I/O error on dev nbd0, logical block 0, async page read [ 93.540197][ T5848] block nbd1: Receive control failed (result -107) [ 93.549129][ T5852] Dev nbd0: unable to read RDB block 0 [ 93.561188][ T5852] nbd0: unable to read partition table [ 93.579757][ T5852] ldm_validate_partition_table(): Disk read failed. [ 93.590562][ T5852] Dev nbd0: unable to read RDB block 0 [ 93.671708][ T5852] nbd0: unable to read partition table [ 93.997257][ T6186] vlan4: entered promiscuous mode [ 94.003359][ T6186] bond0: entered promiscuous mode [ 94.008752][ T6186] bond_slave_0: entered promiscuous mode [ 94.014757][ T6186] bond_slave_1: entered promiscuous mode [ 94.053887][ T6186] bond0: left promiscuous mode [ 94.059080][ T6186] bond_slave_0: left promiscuous mode [ 94.065147][ T6186] bond_slave_1: left promiscuous mode [ 95.632990][ T6206] __nla_validate_parse: 4 callbacks suppressed [ 95.633013][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 95.669670][ T6206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 95.682100][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 95.705937][ T6206] netlink: 36 bytes leftover after parsing attributes in process `syz.1.104'. [ 95.733471][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.782752][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 95.817266][ T6210] nbd: nbd0 already in use [ 95.880340][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.906725][ T6217] netlink: 'syz.0.105': attribute type 1 has an invalid length. [ 96.022542][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 96.262438][ T6226] netlink: 44 bytes leftover after parsing attributes in process `syz.3.111'. [ 97.044103][ T11] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 97.216147][ T6260] xt_TCPMSS: Only works on TCP SYN packets [ 97.254794][ T6260] netlink: 'syz.2.125': attribute type 10 has an invalid length. [ 97.401073][ T6260] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 97.639241][ T6277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.131'. [ 97.896370][ T6285] Unknown status report in ack skb [ 98.222397][ T6300] gretap0: entered promiscuous mode [ 98.255102][ T6300] macsec1: entered promiscuous mode [ 98.311903][ T6300] gretap0: left promiscuous mode [ 98.534147][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.620961][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.707850][ T6310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.997750][ T6330] netlink: 84 bytes leftover after parsing attributes in process `syz.1.150'. [ 99.332889][ T6344] lo speed is unknown, defaulting to 1000 [ 99.347123][ T6346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.154'. [ 99.458525][ T6344] lo speed is unknown, defaulting to 1000 [ 99.482396][ T6343] syzkaller0: entered allmulticast mode [ 99.530868][ T6344] lo speed is unknown, defaulting to 1000 [ 99.556276][ T6344] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 99.626349][ T6344] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 99.756054][ T6344] lo speed is unknown, defaulting to 1000 [ 99.804444][ T6344] lo speed is unknown, defaulting to 1000 [ 99.876303][ T6344] lo speed is unknown, defaulting to 1000 [ 99.904360][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 99.917405][ T6344] lo speed is unknown, defaulting to 1000 [ 99.946363][ T6344] lo speed is unknown, defaulting to 1000 [ 100.177432][ T6377] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 100.238722][ T6377] netlink: 'syz.2.165': attribute type 4 has an invalid length. [ 100.747421][ T6407] netlink: 76 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.747624][ T6403] pim6reg1: entered promiscuous mode [ 100.758979][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'. [ 100.773567][ T6403] pim6reg1: entered allmulticast mode [ 100.956610][ T6411] netlink: 36 bytes leftover after parsing attributes in process `syz.3.176'. [ 101.041781][ T6413] : renamed from bond0 (while UP) [ 101.072048][ T6415] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.079958][ T6415] IPv6: NLM_F_CREATE should be set when creating new route [ 101.087373][ T6415] IPv6: NLM_F_CREATE should be set when creating new route [ 101.288416][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 101.300197][ T6422] Bluetooth: MGMT ver 1.23 [ 102.968129][ T6482] sit0: entered promiscuous mode [ 102.974483][ T6482] vlan2: entered promiscuous mode [ 103.007148][ T6482] sit0: left promiscuous mode [ 103.113032][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 103.400073][ T6498] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.459074][ T6498] vlan2: entered promiscuous mode [ 103.469607][ T6498] team_slave_0: entered promiscuous mode [ 103.475703][ T6498] team_slave_1: entered promiscuous mode [ 103.502200][ T6498] team0: entered promiscuous mode [ 103.522972][ T6498] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 103.996355][ T6517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.220'. [ 104.018351][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 104.051594][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.220'. [ 104.374767][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.464406][ T6531] bond_slave_1: entered promiscuous mode [ 104.486634][ T6531] macvtap1: entered promiscuous mode [ 104.516660][ T6531] : entered promiscuous mode [ 104.535180][ T6531] bond_slave_0: entered promiscuous mode [ 104.559670][ T6531] macvtap1: entered allmulticast mode [ 104.580744][ T6531] : entered allmulticast mode [ 104.597971][ T6531] bond_slave_0: entered allmulticast mode [ 104.608628][ T6531] bond_slave_1: entered allmulticast mode [ 104.621694][ T6531] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 104.631327][ T6535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.224'. [ 104.655638][ T6535] : left allmulticast mode [ 104.682482][ T6535] bond_slave_0: left allmulticast mode [ 104.697928][ T6535] bond_slave_1: left allmulticast mode [ 104.704050][ T6535] : left promiscuous mode [ 104.708621][ T6535] bond_slave_0: left promiscuous mode [ 104.715104][ T6535] bond_slave_1: left promiscuous mode [ 105.509332][ T6559] tipc: Started in network mode [ 105.528132][ T6559] tipc: Node identity 72cf6ec6dddf, cluster identity 4711 [ 105.553877][ T6559] tipc: Enabled bearer , priority 0 [ 105.760966][ T6561] tipc: Resetting bearer [ 105.923303][ T6558] tipc: Resetting bearer [ 106.645127][ T1204] tipc: Node number set to 2937089734 [ 107.060764][ T6583] raw_sendmsg: syz.1.245 forgot to set AF_INET. Fix it! [ 108.231672][ T6558] tipc: Disabling bearer [ 108.337543][ T6272] ================================================================== [ 108.346159][ T6272] BUG: KASAN: slab-use-after-free in device_for_each_child+0xbb/0x1b0 [ 108.354473][ T6272] Read of size 8 at addr ffff888034a45308 by task kbnepd bnep0/6272 [ 108.362939][ T6272] [ 108.365357][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 108.376251][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 108.386799][ T6272] Call Trace: [ 108.390125][ T6272] [ 108.393204][ T6272] dump_stack_lvl+0x241/0x360 [ 108.398011][ T6272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.403347][ T6272] ? __pfx__printk+0x10/0x10 [ 108.407996][ T6272] ? _printk+0xd5/0x120 [ 108.412173][ T6272] ? __virt_addr_valid+0x183/0x530 [ 108.417315][ T6272] ? __virt_addr_valid+0x183/0x530 [ 108.422457][ T6272] print_report+0x169/0x550 [ 108.426987][ T6272] ? __virt_addr_valid+0x183/0x530 [ 108.432117][ T6272] ? __virt_addr_valid+0x183/0x530 [ 108.437246][ T6272] ? __virt_addr_valid+0x45f/0x530 [ 108.442370][ T6272] ? __phys_addr+0xba/0x170 [ 108.446880][ T6272] ? device_for_each_child+0xbb/0x1b0 [ 108.452263][ T6272] kasan_report+0x143/0x180 [ 108.456789][ T6272] ? device_for_each_child+0xbb/0x1b0 [ 108.462194][ T6272] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 108.467759][ T6272] device_for_each_child+0xbb/0x1b0 [ 108.472990][ T6272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.479641][ T6272] ? __pfx_device_for_each_child+0x10/0x10 [ 108.485651][ T6272] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.491102][ T6272] ? lockdep_hardirqs_on+0x99/0x150 [ 108.496614][ T6272] pm_runtime_set_memalloc_noio+0x114/0x260 [ 108.502636][ T6272] netdev_unregister_kobject+0x178/0x250 [ 108.508317][ T6272] unregister_netdevice_many_notify+0x1851/0x1da0 [ 108.514789][ T6272] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 108.521621][ T6272] ? do_raw_spin_unlock+0x13c/0x8b0 [ 108.526867][ T6272] ? __mutex_lock+0x52a/0xd70 [ 108.531578][ T6272] unregister_netdevice_queue+0x303/0x370 [ 108.537612][ T6272] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 108.544019][ T6272] ? down_write+0x18c/0x220 [ 108.548569][ T6272] ? __pfx_down_write+0x10/0x10 [ 108.553463][ T6272] unregister_netdev+0x1c/0x30 [ 108.558332][ T6272] bnep_session+0x2e0e/0x3000 [ 108.563326][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 108.568634][ T6272] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 108.575164][ T6272] ? __pfx_woken_wake_function+0x10/0x10 [ 108.580829][ T6272] ? __kthread_parkme+0x169/0x1d0 [ 108.585875][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 108.591181][ T6272] kthread+0x2f0/0x390 [ 108.595263][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 108.600326][ T6272] ? __pfx_kthread+0x10/0x10 [ 108.605024][ T6272] ret_from_fork+0x4b/0x80 [ 108.609539][ T6272] ? __pfx_kthread+0x10/0x10 [ 108.614164][ T6272] ret_from_fork_asm+0x1a/0x30 [ 108.619089][ T6272] [ 108.622228][ T6272] [ 108.624587][ T6272] Allocated by task 5861: [ 108.629011][ T6272] kasan_save_track+0x3f/0x80 [ 108.633708][ T6272] __kasan_kmalloc+0x98/0xb0 [ 108.638311][ T6272] __kmalloc_noprof+0x1fc/0x400 [ 108.643182][ T6272] hci_alloc_dev_priv+0x27/0x2030 [ 108.648241][ T6272] vhci_create_device+0x116/0x6a0 [ 108.653322][ T6272] vhci_write+0x3cf/0x490 [ 108.657656][ T6272] vfs_write+0xaeb/0xd30 [ 108.661991][ T6272] ksys_write+0x183/0x2b0 [ 108.666324][ T6272] do_syscall_64+0xf3/0x230 [ 108.671113][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.677061][ T6272] [ 108.679414][ T6272] Freed by task 5861: [ 108.683411][ T6272] kasan_save_track+0x3f/0x80 [ 108.688122][ T6272] kasan_save_free_info+0x40/0x50 [ 108.693178][ T6272] __kasan_slab_free+0x59/0x70 [ 108.697951][ T6272] kfree+0x1a0/0x440 [ 108.701962][ T6272] hci_release_dev+0x1525/0x16b0 [ 108.707095][ T6272] bt_host_release+0x83/0x90 [ 108.712865][ T6272] device_release+0x99/0x1c0 [ 108.717495][ T6272] kobject_put+0x22f/0x480 [ 108.721950][ T6272] vhci_release+0x88/0xd0 [ 108.726305][ T6272] __fput+0x23f/0x880 [ 108.730326][ T6272] task_work_run+0x24f/0x310 [ 108.734952][ T6272] do_exit+0xa2f/0x28e0 [ 108.739126][ T6272] do_group_exit+0x207/0x2c0 [ 108.743762][ T6272] __x64_sys_exit_group+0x3f/0x40 [ 108.748799][ T6272] x64_sys_call+0x2634/0x2640 [ 108.753496][ T6272] do_syscall_64+0xf3/0x230 [ 108.758015][ T6272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.763948][ T6272] [ 108.766280][ T6272] Last potentially related work creation: [ 108.771992][ T6272] kasan_save_stack+0x3f/0x60 [ 108.776680][ T6272] __kasan_record_aux_stack+0xac/0xc0 [ 108.782064][ T6272] insert_work+0x3e/0x330 [ 108.786494][ T6272] __queue_work+0xc8b/0xf50 [ 108.791012][ T6272] queue_work_on+0x1c2/0x380 [ 108.795629][ T6272] l2cap_chan_send+0x3d6/0x2690 [ 108.800504][ T6272] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 108.805536][ T6272] __sock_sendmsg+0x221/0x270 [ 108.810219][ T6272] kernel_sendmsg+0x151/0x220 [ 108.814913][ T6272] bnep_session+0x287a/0x3000 [ 108.819604][ T6272] kthread+0x2f0/0x390 [ 108.823940][ T6272] ret_from_fork+0x4b/0x80 [ 108.828457][ T6272] ret_from_fork_asm+0x1a/0x30 [ 108.833232][ T6272] [ 108.835556][ T6272] Second to last potentially related work creation: [ 108.842165][ T6272] kasan_save_stack+0x3f/0x60 [ 108.846853][ T6272] __kasan_record_aux_stack+0xac/0xc0 [ 108.852255][ T6272] insert_work+0x3e/0x330 [ 108.856605][ T6272] __queue_work+0xc8b/0xf50 [ 108.861119][ T6272] queue_work_on+0x1c2/0x380 [ 108.865815][ T6272] l2cap_chan_send+0x3d6/0x2690 [ 108.870682][ T6272] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 108.875725][ T6272] __sock_sendmsg+0x221/0x270 [ 108.880411][ T6272] kernel_sendmsg+0x151/0x220 [ 108.885110][ T6272] bnep_session+0x287a/0x3000 [ 108.889819][ T6272] kthread+0x2f0/0x390 [ 108.893912][ T6272] ret_from_fork+0x4b/0x80 [ 108.898366][ T6272] ret_from_fork_asm+0x1a/0x30 [ 108.903179][ T6272] [ 108.905548][ T6272] The buggy address belongs to the object at ffff888034a44000 [ 108.905548][ T6272] which belongs to the cache kmalloc-8k of size 8192 [ 108.919626][ T6272] The buggy address is located 4872 bytes inside of [ 108.919626][ T6272] freed 8192-byte region [ffff888034a44000, ffff888034a46000) [ 108.933618][ T6272] [ 108.935951][ T6272] The buggy address belongs to the physical page: [ 108.942386][ T6272] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34a40 [ 108.951182][ T6272] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.959690][ T6272] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.967333][ T6272] page_type: f5(slab) [ 108.971345][ T6272] raw: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 108.979931][ T6272] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 108.988613][ T6272] head: 00fff00000000040 ffff88801ac42280 dead000000000122 0000000000000000 [ 108.997288][ T6272] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 109.006000][ T6272] head: 00fff00000000003 ffffea0000d29001 ffffffffffffffff 0000000000000000 [ 109.014673][ T6272] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 109.023364][ T6272] page dumped because: kasan: bad access detected [ 109.029798][ T6272] page_owner tracks the page as allocated [ 109.035528][ T6272] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 78206968121, free_ts 78203883970 [ 109.056923][ T6272] post_alloc_hook+0x1f3/0x230 [ 109.061802][ T6272] get_page_from_freelist+0x3649/0x3790 [ 109.067358][ T6272] __alloc_pages_noprof+0x292/0x710 [ 109.072591][ T6272] alloc_pages_mpol_noprof+0x3e8/0x680 [ 109.078090][ T6272] alloc_slab_page+0x6a/0x140 [ 109.082784][ T6272] allocate_slab+0x5a/0x2f0 [ 109.087300][ T6272] ___slab_alloc+0xcd1/0x14b0 [ 109.092013][ T6272] __slab_alloc+0x58/0xa0 [ 109.096386][ T6272] __kmalloc_noprof+0x25a/0x400 [ 109.101251][ T6272] cache_create_net+0x83/0x270 [ 109.106117][ T6272] gss_svc_init_net+0x58/0x580 [ 109.110921][ T6272] ops_init+0x31e/0x590 [ 109.115112][ T6272] setup_net+0x287/0x9e0 [ 109.119364][ T6272] copy_net_ns+0x33f/0x570 [ 109.123809][ T6272] create_new_namespaces+0x425/0x7b0 [ 109.129233][ T6272] unshare_nsproxy_namespaces+0x124/0x180 [ 109.134987][ T6272] page last free pid 5845 tgid 5845 stack trace: [ 109.141392][ T6272] free_unref_page+0xdf9/0x1140 [ 109.146262][ T6272] __put_partials+0xeb/0x130 [ 109.150869][ T6272] put_cpu_partial+0x17c/0x250 [ 109.155725][ T6272] __slab_free+0x2ea/0x3d0 [ 109.160148][ T6272] qlist_free_all+0x9a/0x140 [ 109.164745][ T6272] kasan_quarantine_reduce+0x14f/0x170 [ 109.170217][ T6272] __kasan_slab_alloc+0x23/0x80 [ 109.175080][ T6272] __kmalloc_cache_noprof+0x132/0x2c0 [ 109.180474][ T6272] inet6_net_init+0x57b/0x990 [ 109.185155][ T6272] ops_init+0x31e/0x590 [ 109.189318][ T6272] setup_net+0x287/0x9e0 [ 109.193566][ T6272] copy_net_ns+0x33f/0x570 [ 109.197992][ T6272] create_new_namespaces+0x425/0x7b0 [ 109.203307][ T6272] unshare_nsproxy_namespaces+0x124/0x180 [ 109.209064][ T6272] ksys_unshare+0x57d/0xa70 [ 109.213641][ T6272] __x64_sys_unshare+0x38/0x40 [ 109.218417][ T6272] [ 109.220743][ T6272] Memory state around the buggy address: [ 109.226385][ T6272] ffff888034a45200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.234550][ T6272] ffff888034a45280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.242643][ T6272] >ffff888034a45300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.251235][ T6272] ^ [ 109.255575][ T6272] ffff888034a45380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.263644][ T6272] ffff888034a45400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.271805][ T6272] ================================================================== [ 109.315668][ T6272] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.322951][ T6272] CPU: 1 UID: 0 PID: 6272 Comm: kbnepd bnep0 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 109.333839][ T6272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 109.344521][ T6272] Call Trace: [ 109.347808][ T6272] [ 109.350753][ T6272] dump_stack_lvl+0x241/0x360 [ 109.355645][ T6272] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.361039][ T6272] ? __pfx__printk+0x10/0x10 [ 109.365639][ T6272] ? preempt_schedule+0xe1/0xf0 [ 109.370520][ T6272] ? vscnprintf+0x5d/0x90 [ 109.374872][ T6272] panic+0x349/0x880 [ 109.378791][ T6272] ? check_panic_on_warn+0x21/0xb0 [ 109.383920][ T6272] ? __pfx_panic+0x10/0x10 [ 109.388353][ T6272] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 109.394378][ T6272] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.400717][ T6272] ? print_report+0x502/0x550 [ 109.405407][ T6272] check_panic_on_warn+0x86/0xb0 [ 109.410357][ T6272] ? device_for_each_child+0xbb/0x1b0 [ 109.415754][ T6272] end_report+0x77/0x160 [ 109.420025][ T6272] kasan_report+0x154/0x180 [ 109.424548][ T6272] ? device_for_each_child+0xbb/0x1b0 [ 109.430112][ T6272] ? __pfx_dev_memalloc_noio+0x10/0x10 [ 109.435579][ T6272] device_for_each_child+0xbb/0x1b0 [ 109.440810][ T6272] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.447264][ T6272] ? __pfx_device_for_each_child+0x10/0x10 [ 109.453082][ T6272] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.458292][ T6272] ? lockdep_hardirqs_on+0x99/0x150 [ 109.463520][ T6272] pm_runtime_set_memalloc_noio+0x114/0x260 [ 109.469445][ T6272] netdev_unregister_kobject+0x178/0x250 [ 109.475102][ T6272] unregister_netdevice_many_notify+0x1851/0x1da0 [ 109.481630][ T6272] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 109.488678][ T6272] ? do_raw_spin_unlock+0x13c/0x8b0 [ 109.493905][ T6272] ? __mutex_lock+0x52a/0xd70 [ 109.498596][ T6272] unregister_netdevice_queue+0x303/0x370 [ 109.504347][ T6272] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 109.510593][ T6272] ? down_write+0x18c/0x220 [ 109.515108][ T6272] ? __pfx_down_write+0x10/0x10 [ 109.519993][ T6272] unregister_netdev+0x1c/0x30 [ 109.524781][ T6272] bnep_session+0x2e0e/0x3000 [ 109.530106][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 109.535139][ T6272] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.541677][ T6272] ? __pfx_woken_wake_function+0x10/0x10 [ 109.547426][ T6272] ? __kthread_parkme+0x169/0x1d0 [ 109.552467][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 109.557506][ T6272] kthread+0x2f0/0x390 [ 109.561580][ T6272] ? __pfx_bnep_session+0x10/0x10 [ 109.566622][ T6272] ? __pfx_kthread+0x10/0x10 [ 109.571232][ T6272] ret_from_fork+0x4b/0x80 [ 109.575754][ T6272] ? __pfx_kthread+0x10/0x10 [ 109.580350][ T6272] ret_from_fork_asm+0x1a/0x30 [ 109.585150][ T6272] [ 109.588355][ T6272] Kernel Offset: disabled [ 109.592780][ T6272] Rebooting in 86400 seconds..