000000380)={&(0x7f0000000340)={0x40, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe0}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf59c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf801}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf250d00000005002a00010000000a000900ffffffffffff000005003500a400000008000600", @ANYRES32=r5, @ANYBLOB="08003a020100000005002e000000000005300f65cae30000060028000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 08:36:58 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:36:58 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000040)=0x30) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 08:36:58 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x340, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) 08:36:58 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe0}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf59c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf801}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf250d00000005002a00010000000a000900ffffffffffff000005003500a400000008000600", @ANYRES32=r5, @ANYBLOB="08003a020100000005002e000000000005300f65cae30000060028000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 08:36:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{}, {0x0, 0x0, 0x6}}}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) [ 616.732241] Cannot find add_set index 0 as target 08:36:58 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:36:59 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe0}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf59c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf801}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf250d00000005002a00010000000a000900ffffffffffff000005003500a400000008000600", @ANYRES32=r5, @ANYBLOB="08003a020100000005002e000000000005300f65cae30000060028000000"], 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) 08:36:59 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)={r1}, 0x4) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:36:59 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 616.850456] Cannot find add_set index 0 as target [ 616.909797] x_tables: ip_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 08:36:59 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:36:59 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:36:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x9, 0x3, 0x258, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b8) 08:36:59 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000040)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe0}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf59c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf801}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:36:59 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:36:59 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:36:59 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xe0}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x1c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0x9}, @NL80211_TXQ_ATTR_CWMAX={0x6, 0x4, 0xf59c}, @NL80211_TXQ_ATTR_TXOP={0x6, 0x2, 0xf801}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) 08:36:59 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:36:59 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:36:59 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 617.645647] Cannot find add_set index 0 as target 08:36:59 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:36:59 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:00 executing program 5: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:00 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) 08:37:00 executing program 0: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:00 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:00 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:00 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)) 08:37:00 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 08:37:00 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:00 executing program 2: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:00 executing program 0: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:00 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) 08:37:00 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)) 08:37:01 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) 08:37:01 executing program 0: sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:01 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:01 executing program 3: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)) 08:37:01 executing program 5: socketpair(0x1, 0x3, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x5) 08:37:01 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:01 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:01 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:01 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:01 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) 08:37:01 executing program 5: socketpair(0x1, 0x3, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(0xffffffffffffffff, 0xc0045520, &(0x7f0000000000)=0x7) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x1) 08:37:01 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:01 executing program 2: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) [ 619.478841] Bluetooth: hci4 command 0x0406 tx timeout 08:37:01 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:01 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:01 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:01 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x9, 0x3, 0x270, 0xb8, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) 08:37:01 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:01 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) [ 619.678555] x_tables: ip_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 08:37:02 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:02 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:02 executing program 0: socketpair(0x0, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:02 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:02 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:02 executing program 2: socketpair(0x1, 0x3, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:02 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:02 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:02 executing program 3: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:02 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:02 executing program 1: recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:02 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:02 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000040)) 08:37:02 executing program 5: socketpair(0x0, 0x1, 0x0, 0x0) 08:37:02 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:02 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:02 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:02 executing program 0: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 3 (fault-call:0 fault-nth:0): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:02 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) 08:37:02 executing program 5: socketpair(0x0, 0x1, 0x0, 0x0) 08:37:02 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:02 executing program 0: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:02 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 620.762396] FAULT_INJECTION: forcing a failure. [ 620.762396] name failslab, interval 1, probability 0, space 0, times 0 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 620.803833] CPU: 1 PID: 23489 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 620.811766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 620.821118] Call Trace: [ 620.823745] dump_stack+0x1b2/0x281 [ 620.827384] should_fail.cold+0x10a/0x149 [ 620.831541] should_failslab+0xd6/0x130 [ 620.835547] kmem_cache_alloc+0x28e/0x3c0 [ 620.839727] ? sock_destroy_inode+0x60/0x60 [ 620.845088] sock_alloc_inode+0x19/0x250 [ 620.849148] ? sock_destroy_inode+0x60/0x60 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) [ 620.853469] alloc_inode+0x5d/0x170 [ 620.857099] new_inode_pseudo+0x14/0xe0 [ 620.861099] sock_alloc+0x3c/0x270 [ 620.864640] __sock_create+0x8a/0x620 [ 620.868442] ? wait_for_completion_io+0x10/0x10 [ 620.873111] SyS_socketpair+0xdf/0x480 [ 620.877000] ? fput+0xb/0x140 [ 620.880108] ? SyS_socket+0x1b0/0x1b0 [ 620.883910] ? SyS_read+0x210/0x210 [ 620.887542] ? __do_page_fault+0x159/0xad0 [ 620.891775] ? do_syscall_64+0x4c/0x640 [ 620.895755] ? SyS_socket+0x1b0/0x1b0 [ 620.899564] do_syscall_64+0x1d5/0x640 08:37:03 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:03 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:03 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:03 executing program 5: socketpair(0x0, 0x1, 0x0, 0x0) [ 620.903464] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 620.908660] RIP: 0033:0x4665f9 [ 620.911850] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 620.919768] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 620.927066] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 620.934340] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 620.941642] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 620.948912] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:03 executing program 3 (fault-call:0 fault-nth:1): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:03 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, 0x0) 08:37:03 executing program 4: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:03 executing program 5: socketpair(0x1, 0x0, 0x0, 0x0) 08:37:03 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 621.042170] net_ratelimit: 31 callbacks suppressed [ 621.042174] socket: no more sockets 08:37:03 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:03 executing program 5: socketpair(0x1, 0x0, 0x0, 0x0) 08:37:03 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, 0x0) [ 621.124954] FAULT_INJECTION: forcing a failure. [ 621.124954] name failslab, interval 1, probability 0, space 0, times 0 08:37:03 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 621.183545] CPU: 0 PID: 23531 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 621.191466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.200825] Call Trace: [ 621.203424] dump_stack+0x1b2/0x281 [ 621.207064] should_fail.cold+0x10a/0x149 [ 621.211221] should_failslab+0xd6/0x130 [ 621.215201] kmem_cache_alloc_trace+0x29a/0x3d0 [ 621.219906] ? kmem_cache_alloc+0x35f/0x3c0 [ 621.224231] sock_alloc_inode+0x5f/0x250 [ 621.228296] ? sock_destroy_inode+0x60/0x60 08:37:03 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, 0x0) 08:37:03 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 621.232619] alloc_inode+0x5d/0x170 [ 621.236250] new_inode_pseudo+0x14/0xe0 [ 621.240229] sock_alloc+0x3c/0x270 [ 621.243773] __sock_create+0x8a/0x620 [ 621.247587] ? wait_for_completion_io+0x10/0x10 [ 621.252258] SyS_socketpair+0xdf/0x480 [ 621.256150] ? fput+0xb/0x140 [ 621.259254] ? SyS_socket+0x1b0/0x1b0 [ 621.263059] ? SyS_read+0x210/0x210 [ 621.266692] ? __do_page_fault+0x159/0xad0 [ 621.270928] ? do_syscall_64+0x4c/0x640 [ 621.274904] ? SyS_socket+0x1b0/0x1b0 [ 621.278712] do_syscall_64+0x1d5/0x640 [ 621.282612] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.287802] RIP: 0033:0x4665f9 [ 621.290989] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 621.298696] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 621.305969] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 621.313244] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.320518] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 08:37:03 executing program 3 (fault-call:0 fault-nth:2): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:03 executing program 5: socketpair(0x1, 0x0, 0x0, 0x0) 08:37:03 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, 0x0) 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:03 executing program 1: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 621.327881] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:03 executing program 4: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 621.355478] socket: no more sockets 08:37:03 executing program 2: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) 08:37:03 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:03 executing program 5 (fault-call:0 fault-nth:0): socketpair(0x1, 0x1, 0x0, 0x0) 08:37:03 executing program 4: socketpair(0x1, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 621.432957] FAULT_INJECTION: forcing a failure. [ 621.432957] name failslab, interval 1, probability 0, space 0, times 0 08:37:03 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) [ 621.512772] CPU: 1 PID: 23567 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 621.520695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.530086] Call Trace: [ 621.532677] dump_stack+0x1b2/0x281 [ 621.536320] should_fail.cold+0x10a/0x149 [ 621.540511] should_failslab+0xd6/0x130 [ 621.544502] kmem_cache_alloc+0x28e/0x3c0 [ 621.548656] sk_prot_alloc+0x5f/0x290 [ 621.549616] FAULT_INJECTION: forcing a failure. [ 621.549616] name failslab, interval 1, probability 0, space 0, times 0 [ 621.552488] sk_alloc+0x36/0xcd0 [ 621.552505] unix_create1+0x78/0x4f0 [ 621.552522] unix_create+0xdd/0x1c0 [ 621.574473] __sock_create+0x303/0x620 [ 621.578364] SyS_socketpair+0xdf/0x480 [ 621.582252] ? fput+0xb/0x140 [ 621.585361] ? SyS_socket+0x1b0/0x1b0 [ 621.589158] ? SyS_read+0x210/0x210 [ 621.592786] ? __do_page_fault+0x159/0xad0 [ 621.597021] ? do_syscall_64+0x4c/0x640 [ 621.600989] ? SyS_socket+0x1b0/0x1b0 [ 621.604805] do_syscall_64+0x1d5/0x640 [ 621.608715] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.613902] RIP: 0033:0x4665f9 [ 621.617078] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 621.624781] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 621.632218] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 621.639487] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.646858] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 621.654121] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 621.661410] CPU: 0 PID: 23580 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 621.669308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.678727] Call Trace: [ 621.681373] dump_stack+0x1b2/0x281 [ 621.685007] should_fail.cold+0x10a/0x149 [ 621.689270] should_failslab+0xd6/0x130 [ 621.693257] kmem_cache_alloc+0x28e/0x3c0 [ 621.697423] ? sock_destroy_inode+0x60/0x60 [ 621.701745] sock_alloc_inode+0x19/0x250 [ 621.705857] ? sock_destroy_inode+0x60/0x60 [ 621.710283] alloc_inode+0x5d/0x170 [ 621.713924] new_inode_pseudo+0x14/0xe0 [ 621.717993] sock_alloc+0x3c/0x270 [ 621.721540] __sock_create+0x8a/0x620 [ 621.725353] ? wait_for_completion_io+0x10/0x10 [ 621.730028] SyS_socketpair+0xdf/0x480 [ 621.733926] ? fput+0xb/0x140 [ 621.737033] ? SyS_socket+0x1b0/0x1b0 [ 621.740840] ? SyS_read+0x210/0x210 [ 621.744492] ? __do_page_fault+0x159/0xad0 [ 621.748729] ? do_syscall_64+0x4c/0x640 [ 621.752705] ? SyS_socket+0x1b0/0x1b0 [ 621.756510] do_syscall_64+0x1d5/0x640 08:37:03 executing program 3 (fault-call:0 fault-nth:3): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:03 executing program 2 (fault-call:1 fault-nth:0): socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:03 executing program 1: socketpair(0x1, 0x3, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:03 executing program 4: socketpair(0x1, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:03 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) [ 621.760405] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 621.765595] RIP: 0033:0x4665f9 [ 621.768807] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 621.776524] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 621.783802] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 621.791075] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.798346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.805619] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 08:37:04 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) [ 621.811660] FAULT_INJECTION: forcing a failure. [ 621.811660] name failslab, interval 1, probability 0, space 0, times 0 [ 621.873772] CPU: 1 PID: 23593 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 621.875362] socket: no more sockets [ 621.881698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 621.881703] Call Trace: [ 621.881722] dump_stack+0x1b2/0x281 [ 621.881736] should_fail.cold+0x10a/0x149 [ 621.881749] should_failslab+0xd6/0x130 [ 621.881761] kmem_cache_alloc+0x28e/0x3c0 [ 621.881771] ? sock_destroy_inode+0x60/0x60 [ 621.881778] sock_alloc_inode+0x19/0x250 08:37:04 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) 08:37:04 executing program 4: socketpair(0x1, 0x3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:04 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:04 executing program 5 (fault-call:0 fault-nth:1): socketpair(0x1, 0x1, 0x0, 0x0) [ 621.881786] ? sock_destroy_inode+0x60/0x60 [ 621.881795] alloc_inode+0x5d/0x170 [ 621.881805] new_inode_pseudo+0x14/0xe0 [ 621.881817] sock_alloc+0x3c/0x270 [ 621.881828] __sock_create+0x8a/0x620 [ 621.881841] SyS_socketpair+0x159/0x480 [ 621.881850] ? fput+0xb/0x140 [ 621.881858] ? SyS_socket+0x1b0/0x1b0 [ 621.881868] ? SyS_read+0x210/0x210 [ 621.881882] ? __do_page_fault+0x159/0xad0 [ 621.959771] ? do_syscall_64+0x4c/0x640 08:37:04 executing program 3 (fault-call:0 fault-nth:4): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:04 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:04 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:04 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 621.959783] ? SyS_socket+0x1b0/0x1b0 [ 621.959793] do_syscall_64+0x1d5/0x640 [ 621.959810] entry_SYSCALL_64_after_hwframe+0x46/0xbb 08:37:04 executing program 3 (fault-call:0 fault-nth:5): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:04 executing program 5 (fault-call:0 fault-nth:2): socketpair(0x1, 0x1, 0x0, 0x0) [ 621.959818] RIP: 0033:0x4665f9 [ 621.959823] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 08:37:04 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 621.959834] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 621.959839] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 621.959845] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 621.959850] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 621.959856] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 621.987593] socket: no more sockets [ 622.077038] FAULT_INJECTION: forcing a failure. [ 622.077038] name failslab, interval 1, probability 0, space 0, times 0 [ 622.077052] CPU: 1 PID: 23617 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 622.077059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.077064] Call Trace: [ 622.077083] dump_stack+0x1b2/0x281 [ 622.077098] should_fail.cold+0x10a/0x149 [ 622.077113] should_failslab+0xd6/0x130 [ 622.077146] kmem_cache_alloc_trace+0x29a/0x3d0 [ 622.077157] ? kmem_cache_alloc+0x35f/0x3c0 [ 622.077171] sock_alloc_inode+0x5f/0x250 [ 622.077180] ? sock_destroy_inode+0x60/0x60 [ 622.077191] alloc_inode+0x5d/0x170 [ 622.077203] new_inode_pseudo+0x14/0xe0 [ 622.077216] sock_alloc+0x3c/0x270 [ 622.077227] __sock_create+0x8a/0x620 [ 622.077238] ? wait_for_completion_io+0x10/0x10 [ 622.077250] SyS_socketpair+0xdf/0x480 [ 622.077259] ? fput+0xb/0x140 [ 622.077268] ? SyS_socket+0x1b0/0x1b0 [ 622.077278] ? SyS_read+0x210/0x210 [ 622.077287] ? __do_page_fault+0x159/0xad0 [ 622.077297] ? do_syscall_64+0x4c/0x640 [ 622.077305] ? SyS_socket+0x1b0/0x1b0 [ 622.077315] do_syscall_64+0x1d5/0x640 [ 622.077330] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 622.077338] RIP: 0033:0x4665f9 [ 622.077344] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 622.077355] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 622.077360] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 622.077366] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.077372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.077379] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 622.077403] socket: no more sockets [ 622.080794] FAULT_INJECTION: forcing a failure. [ 622.080794] name failslab, interval 1, probability 0, space 0, times 0 [ 622.080806] CPU: 1 PID: 23616 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 622.080813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.080817] Call Trace: [ 622.080832] dump_stack+0x1b2/0x281 [ 622.080848] should_fail.cold+0x10a/0x149 [ 622.080864] should_failslab+0xd6/0x130 [ 622.080879] kmem_cache_alloc_trace+0x29a/0x3d0 [ 622.080888] ? kmem_cache_alloc+0x35f/0x3c0 [ 622.080899] sock_alloc_inode+0x5f/0x250 [ 622.080908] ? sock_destroy_inode+0x60/0x60 [ 622.080918] alloc_inode+0x5d/0x170 [ 622.080930] new_inode_pseudo+0x14/0xe0 [ 622.080942] sock_alloc+0x3c/0x270 [ 622.080955] __sock_create+0x8a/0x620 [ 622.080979] SyS_socketpair+0x159/0x480 [ 622.080993] ? fput+0xb/0x140 [ 622.081003] ? SyS_socket+0x1b0/0x1b0 [ 622.081015] ? SyS_read+0x210/0x210 [ 622.081025] ? __do_page_fault+0x159/0xad0 [ 622.081034] ? do_syscall_64+0x4c/0x640 [ 622.081044] ? SyS_socket+0x1b0/0x1b0 [ 622.081054] do_syscall_64+0x1d5/0x640 [ 622.081069] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 622.081075] RIP: 0033:0x4665f9 [ 622.081081] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 622.081094] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 622.081102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 622.081110] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.081116] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 622.081123] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 622.081149] socket: no more sockets [ 622.178603] FAULT_INJECTION: forcing a failure. [ 622.178603] name failslab, interval 1, probability 0, space 0, times 0 [ 622.178617] CPU: 1 PID: 23632 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 622.178623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.178627] Call Trace: [ 622.178645] dump_stack+0x1b2/0x281 [ 622.178661] should_fail.cold+0x10a/0x149 [ 622.178677] should_failslab+0xd6/0x130 [ 622.178691] kmem_cache_alloc+0x28e/0x3c0 [ 622.178703] sk_prot_alloc+0x5f/0x290 [ 622.178715] sk_alloc+0x36/0xcd0 [ 622.178733] unix_create1+0x78/0x4f0 [ 622.178745] unix_create+0xdd/0x1c0 [ 622.178756] __sock_create+0x303/0x620 [ 622.178770] SyS_socketpair+0xdf/0x480 [ 622.178779] ? fput+0xb/0x140 [ 622.178788] ? SyS_socket+0x1b0/0x1b0 [ 622.178798] ? SyS_read+0x210/0x210 [ 622.178807] ? __do_page_fault+0x159/0xad0 [ 622.178817] ? do_syscall_64+0x4c/0x640 [ 622.178825] ? SyS_socket+0x1b0/0x1b0 [ 622.178835] do_syscall_64+0x1d5/0x640 [ 622.178850] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 622.178858] RIP: 0033:0x4665f9 [ 622.178863] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 622.178875] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 622.178881] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 622.178896] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.178903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.178909] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 622.179932] FAULT_INJECTION: forcing a failure. [ 622.179932] name failslab, interval 1, probability 0, space 0, times 0 [ 622.179945] CPU: 0 PID: 23631 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 622.179951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.179955] Call Trace: [ 622.179969] dump_stack+0x1b2/0x281 [ 622.179986] should_fail.cold+0x10a/0x149 [ 622.180001] should_failslab+0xd6/0x130 [ 622.180014] kmem_cache_alloc+0x28e/0x3c0 [ 622.180029] sk_prot_alloc+0x5f/0x290 [ 622.180043] sk_alloc+0x36/0xcd0 [ 622.180058] unix_create1+0x78/0x4f0 [ 622.180072] unix_create+0xdd/0x1c0 [ 622.180085] __sock_create+0x303/0x620 [ 622.180099] SyS_socketpair+0x159/0x480 [ 622.180108] ? fput+0xb/0x140 [ 622.180117] ? SyS_socket+0x1b0/0x1b0 [ 622.180126] ? SyS_read+0x210/0x210 [ 622.180135] ? __do_page_fault+0x159/0xad0 [ 622.180144] ? do_syscall_64+0x4c/0x640 [ 622.180152] ? SyS_socket+0x1b0/0x1b0 [ 622.180162] do_syscall_64+0x1d5/0x640 [ 622.180176] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 622.180184] RIP: 0033:0x4665f9 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f0000000000)=@nl=@unspec, &(0x7f0000000100)=0x80) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @map_val={0x18, 0x9, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @call={0x85, 0x0, 0x0, 0x3b}, @generic={0xb1, 0xf, 0x5, 0x1ff, 0x6}], &(0x7f0000000180)='GPL\x00', 0x1, 0xc, &(0x7f00000001c0)=""/12, 0x41000, 0x5, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x7, 0x401}, 0x10, 0x5015, r3}, 0x78) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, &(0x7f00000000c0)={0x8, 0x4, 0x7fff, 0x7cf8ffc5}) 08:37:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 08:37:05 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 08:37:05 executing program 5 (fault-call:0 fault-nth:3): socketpair(0x1, 0x1, 0x0, 0x0) 08:37:05 executing program 3 (fault-call:0 fault-nth:6): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:05 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 622.180189] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 622.180199] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 622.180206] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 622.180212] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 622.180218] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 622.180225] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 622.873721] FAULT_INJECTION: forcing a failure. [ 622.873721] name failslab, interval 1, probability 0, space 0, times 0 [ 622.895927] CPU: 0 PID: 23642 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 622.903832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 622.905898] FAULT_INJECTION: forcing a failure. [ 622.905898] name failslab, interval 1, probability 0, space 0, times 0 [ 622.913275] Call Trace: [ 622.913297] dump_stack+0x1b2/0x281 [ 622.913310] should_fail.cold+0x10a/0x149 [ 622.913322] should_failslab+0xd6/0x130 [ 622.913342] kmem_cache_alloc+0x28e/0x3c0 [ 622.943039] ? sock_destroy_inode+0x60/0x60 [ 622.947411] sock_alloc_inode+0x19/0x250 [ 622.951476] ? sock_destroy_inode+0x60/0x60 [ 622.955794] alloc_inode+0x5d/0x170 [ 622.959876] new_inode_pseudo+0x14/0xe0 [ 622.963857] sock_alloc+0x3c/0x270 [ 622.967404] __sock_create+0x8a/0x620 [ 622.971216] SyS_socketpair+0x159/0x480 [ 622.975283] ? fput+0xb/0x140 [ 622.978392] ? SyS_socket+0x1b0/0x1b0 [ 622.982191] ? SyS_read+0x210/0x210 [ 622.985814] ? __do_page_fault+0x159/0xad0 [ 622.990055] ? do_syscall_64+0x4c/0x640 [ 622.994028] ? SyS_socket+0x1b0/0x1b0 [ 622.997829] do_syscall_64+0x1d5/0x640 [ 623.001716] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.006928] RIP: 0033:0x4665f9 [ 623.010105] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) syz_open_dev$midi(&(0x7f0000000000), 0x9, 0x48002) 08:37:05 executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) [ 623.017808] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.025073] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.032337] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.039599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.046863] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 623.054141] CPU: 1 PID: 23651 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 623.062063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.071420] Call Trace: 08:37:05 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) [ 623.074016] dump_stack+0x1b2/0x281 [ 623.077653] should_fail.cold+0x10a/0x149 [ 623.081895] should_failslab+0xd6/0x130 [ 623.085874] kmem_cache_alloc+0x28e/0x3c0 [ 623.090027] __d_alloc+0x2a/0xa20 [ 623.093491] sock_alloc_file+0xc8/0x2e0 [ 623.097472] ? sock_poll+0x220/0x220 [ 623.101196] SyS_socketpair+0x20c/0x480 [ 623.105176] ? SyS_socket+0x1b0/0x1b0 [ 623.108976] ? SyS_read+0x210/0x210 [ 623.112603] ? __do_page_fault+0x159/0xad0 [ 623.116840] ? do_syscall_64+0x4c/0x640 [ 623.120812] ? SyS_socket+0x1b0/0x1b0 08:37:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, 0x0, 0x0) 08:37:05 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 623.124703] do_syscall_64+0x1d5/0x640 [ 623.128599] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.133967] RIP: 0033:0x4665f9 [ 623.137166] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.144879] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.152159] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.159445] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 08:37:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, 0x0, 0x0) 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = accept(r0, &(0x7f0000001500)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000001580)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) 08:37:05 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) [ 623.159452] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 623.159458] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:05 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, 0x0, 0x0) 08:37:05 executing program 5 (fault-call:0 fault-nth:4): socketpair(0x1, 0x1, 0x0, 0x0) 08:37:05 executing program 3 (fault-call:0 fault-nth:7): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x10, 0xe80, 0xba, {{0x15, 0x4, 0x2, 0x23, 0x54, 0x65, 0x0, 0x4, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x17, 0x3, 0x9, [{@broadcast, 0x2}, {@multicast1, 0x7}, {@multicast2, 0xffffffff}]}, @ssrr={0x89, 0x7, 0xf0, [@loopback]}, @timestamp={0x44, 0x1c, 0xd2, 0x0, 0x8, [0x7, 0x7b38, 0xffffffff, 0xa266, 0x1, 0x9cac]}]}}}}}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x157c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="18004000010000000000000000040000073d18000400000018120000ac46c3107bbe3b1f9c2f62055b389b0b7e5d021e46d3fef4fd5ce2ac75519da03e17ed11b68574b3aea9c46729a859fe60c10300ed7f7482e6b2e62f07", @ANYRES32=0x1, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x3f, 0xd5, &(0x7f0000000180)=""/213, 0x0, 0x7, '\x00', r1, 0x0, r2, 0x8, &(0x7f0000000280)={0x6, 0x6}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x7, 0x7ff, 0x7}, 0x10}, 0x78) 08:37:05 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 08:37:05 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:37:05 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) [ 623.354140] socket: no more sockets 08:37:05 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, 0x0, 0x0) [ 623.395024] FAULT_INJECTION: forcing a failure. [ 623.395024] name failslab, interval 1, probability 0, space 0, times 0 [ 623.422953] FAULT_INJECTION: forcing a failure. [ 623.422953] name failslab, interval 1, probability 0, space 0, times 0 [ 623.427717] CPU: 1 PID: 23690 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 08:37:05 executing program 5 (fault-call:0 fault-nth:5): socketpair(0x1, 0x1, 0x0, 0x0) 08:37:05 executing program 4 (fault-call:1 fault-nth:0): socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 623.442064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.442070] Call Trace: [ 623.442089] dump_stack+0x1b2/0x281 [ 623.442105] should_fail.cold+0x10a/0x149 08:37:05 executing program 3 (fault-call:0 fault-nth:8): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:05 executing program 5 (fault-call:0 fault-nth:6): socketpair(0x1, 0x1, 0x0, 0x0) 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) 08:37:05 executing program 4: socketpair(0x1, 0x80000, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) socketpair(0x8, 0x0, 0x5, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000080)=[{}, {}, {}], &(0x7f00000000c0)=0x18) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', r1, 0x7, 0x7800, 0x10001, 0x3ff, {{0x19, 0x4, 0x2, 0x3, 0x64, 0x68, 0x0, 0x44, 0x29, 0x0, @multicast1, @remote, {[@cipso={0x86, 0x28, 0x2, [{0x5, 0x5, "f4d8a7"}, {0x2, 0xc, "ace87a3e154f8435f692"}, {0x5, 0x2}, {0x0, 0x5, "9275f4"}, {0x0, 0xa, "e4f1382cac2588af"}]}, @cipso={0x86, 0x25, 0xffffffffffffffff, [{0x5, 0xd, "60049ca80d761b406a6a0b"}, {0x2, 0x12, "6e4390b92311caf38b64eced32674c04"}]}]}}}}}) [ 623.442119] should_failslab+0xd6/0x130 [ 623.442132] kmem_cache_alloc+0x28e/0x3c0 [ 623.442143] ? sock_destroy_inode+0x60/0x60 [ 623.442152] sock_alloc_inode+0x19/0x250 [ 623.442161] ? sock_destroy_inode+0x60/0x60 08:37:05 executing program 3 (fault-call:0 fault-nth:9): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 623.442170] alloc_inode+0x5d/0x170 [ 623.442181] new_inode_pseudo+0x14/0xe0 [ 623.442192] sock_alloc+0x3c/0x270 [ 623.442204] __sock_create+0x8a/0x620 [ 623.442218] SyS_socketpair+0x159/0x480 [ 623.442228] ? fput+0xb/0x140 [ 623.442236] ? SyS_socket+0x1b0/0x1b0 [ 623.442246] ? SyS_read+0x210/0x210 [ 623.442257] ? __do_page_fault+0x159/0xad0 [ 623.442266] ? do_syscall_64+0x4c/0x640 [ 623.442274] ? SyS_socket+0x1b0/0x1b0 [ 623.442284] do_syscall_64+0x1d5/0x640 [ 623.442299] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.442308] RIP: 0033:0x4665f9 [ 623.442313] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.442324] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.442330] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.442336] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.442341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.442347] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 623.480534] CPU: 0 PID: 23696 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 623.480542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.480546] Call Trace: [ 623.480566] dump_stack+0x1b2/0x281 [ 623.480583] should_fail.cold+0x10a/0x149 [ 623.480599] should_failslab+0xd6/0x130 [ 623.480612] kmem_cache_alloc+0x28e/0x3c0 [ 623.480628] get_empty_filp+0x86/0x3e0 [ 623.480639] alloc_file+0x23/0x440 [ 623.480655] sock_alloc_file+0x113/0x2e0 [ 623.480667] ? sock_poll+0x220/0x220 [ 623.480684] SyS_socketpair+0x20c/0x480 [ 623.480696] ? SyS_socket+0x1b0/0x1b0 [ 623.480708] ? SyS_read+0x210/0x210 [ 623.480718] ? __do_page_fault+0x159/0xad0 [ 623.480727] ? do_syscall_64+0x4c/0x640 [ 623.480735] ? SyS_socket+0x1b0/0x1b0 [ 623.480746] do_syscall_64+0x1d5/0x640 [ 623.480761] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.480769] RIP: 0033:0x4665f9 [ 623.480774] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.480786] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.480792] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.480798] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 08:37:05 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) [ 623.480804] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 623.480811] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 623.483506] socket: no more sockets [ 623.531104] FAULT_INJECTION: forcing a failure. [ 623.531104] name failslab, interval 1, probability 0, space 0, times 0 [ 623.531119] CPU: 1 PID: 23710 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 623.531127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.531131] Call Trace: [ 623.531151] dump_stack+0x1b2/0x281 [ 623.531168] should_fail.cold+0x10a/0x149 08:37:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 08:37:06 executing program 2: socketpair(0x1, 0x800, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x282040, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) [ 623.531183] should_failslab+0xd6/0x130 [ 623.531197] kmem_cache_alloc+0x28e/0x3c0 [ 623.531217] sk_prot_alloc+0x5f/0x290 [ 623.531231] sk_alloc+0x36/0xcd0 [ 623.531248] unix_create1+0x78/0x4f0 [ 623.531262] unix_create+0xdd/0x1c0 [ 623.531276] __sock_create+0x303/0x620 [ 623.531293] SyS_socketpair+0x159/0x480 [ 623.531304] ? fput+0xb/0x140 [ 623.531314] ? SyS_socket+0x1b0/0x1b0 [ 623.531324] ? SyS_read+0x210/0x210 [ 623.531333] ? __do_page_fault+0x159/0xad0 [ 623.531343] ? do_syscall_64+0x4c/0x640 [ 623.531351] ? SyS_socket+0x1b0/0x1b0 [ 623.531363] do_syscall_64+0x1d5/0x640 [ 623.531379] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.531388] RIP: 0033:0x4665f9 [ 623.531394] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.531405] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.531411] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.531416] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.531421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 623.531426] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 623.573678] FAULT_INJECTION: forcing a failure. [ 623.573678] name failslab, interval 1, probability 0, space 0, times 0 [ 623.573692] CPU: 1 PID: 23714 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 623.573698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.573703] Call Trace: [ 623.573722] dump_stack+0x1b2/0x281 [ 623.573738] should_fail.cold+0x10a/0x149 [ 623.573755] should_failslab+0xd6/0x130 [ 623.573771] kmem_cache_alloc+0x40/0x3c0 [ 623.573797] __debug_object_init+0x578/0x7a0 [ 623.573812] ? sk_alloc+0x508/0xcd0 [ 623.573827] ? debug_object_destroy+0x240/0x240 [ 623.573840] ? lock_acquire+0x170/0x3f0 [ 623.573853] ? __lockdep_init_map+0x100/0x560 [ 623.573867] init_timer_key+0x2f/0x300 [ 623.573882] sock_init_data+0x66/0xb70 [ 623.573899] unix_create1+0x90/0x4f0 [ 623.573912] unix_create+0xdd/0x1c0 [ 623.573926] __sock_create+0x303/0x620 [ 623.573940] SyS_socketpair+0x159/0x480 [ 623.573950] ? fput+0xb/0x140 [ 623.573959] ? SyS_socket+0x1b0/0x1b0 [ 623.573971] ? SyS_read+0x210/0x210 [ 623.573982] ? __do_page_fault+0x159/0xad0 [ 623.573992] ? do_syscall_64+0x4c/0x640 [ 623.574000] ? SyS_socket+0x1b0/0x1b0 [ 623.574012] do_syscall_64+0x1d5/0x640 [ 623.574028] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.574037] RIP: 0033:0x4665f9 [ 623.574044] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.574056] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.574061] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 623.574069] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.574077] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000001 [ 623.574085] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 623.791693] FAULT_INJECTION: forcing a failure. [ 623.791693] name failslab, interval 1, probability 0, space 0, times 0 [ 623.791707] CPU: 1 PID: 23724 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 623.791714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 623.791718] Call Trace: [ 623.791735] dump_stack+0x1b2/0x281 [ 623.791752] should_fail.cold+0x10a/0x149 [ 623.791770] should_failslab+0xd6/0x130 [ 623.791786] kmem_cache_alloc+0x28e/0x3c0 [ 623.791799] __d_alloc+0x2a/0xa20 [ 623.791811] ? alloc_file+0x292/0x440 [ 623.791825] sock_alloc_file+0xc8/0x2e0 [ 623.791838] ? sock_poll+0x220/0x220 [ 623.791857] SyS_socketpair+0x22e/0x480 [ 623.791869] ? SyS_socket+0x1b0/0x1b0 [ 623.791882] ? SyS_read+0x210/0x210 [ 623.791895] ? __do_page_fault+0x159/0xad0 [ 623.791910] ? do_syscall_64+0x4c/0x640 [ 623.791920] ? SyS_socket+0x1b0/0x1b0 [ 623.791933] do_syscall_64+0x1d5/0x640 [ 623.791949] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 623.791957] RIP: 0033:0x4665f9 [ 623.791963] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 623.791975] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 623.791981] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 08:37:06 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 08:37:06 executing program 3 (fault-call:0 fault-nth:10): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:06 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x28740008}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="04002d08000000000000000000000500160001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0x400, 0x4) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000200)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_WIE_OFF(r5, 0x7010) getsockname$packet(r3, 0x0, &(0x7f0000000140)) 08:37:06 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f0000000040)={0x0, 0xfffffffffffffffd}) 08:37:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) [ 623.791988] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 623.791995] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 623.792001] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 623.804538] FAULT_INJECTION: forcing a failure. [ 623.804538] name failslab, interval 1, probability 0, space 0, times 0 [ 624.373432] FAULT_INJECTION: forcing a failure. [ 624.373432] name failslab, interval 1, probability 0, space 0, times 0 [ 624.411503] CPU: 0 PID: 23755 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 624.419426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.428792] Call Trace: [ 624.431412] dump_stack+0x1b2/0x281 [ 624.435056] should_fail.cold+0x10a/0x149 [ 624.439200] should_failslab+0xd6/0x130 [ 624.443191] kmem_cache_alloc+0x28e/0x3c0 [ 624.447335] __d_alloc+0x2a/0xa20 [ 624.450782] ? alloc_file+0x292/0x440 [ 624.454592] sock_alloc_file+0xc8/0x2e0 [ 624.458557] ? sock_poll+0x220/0x220 [ 624.462286] SyS_socketpair+0x22e/0x480 [ 624.466250] ? SyS_socket+0x1b0/0x1b0 [ 624.470060] ? SyS_read+0x210/0x210 [ 624.473765] ? __do_page_fault+0x159/0xad0 [ 624.477997] ? do_syscall_64+0x4c/0x640 [ 624.481982] ? SyS_socket+0x1b0/0x1b0 [ 624.485798] do_syscall_64+0x1d5/0x640 [ 624.489702] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 624.494888] RIP: 0033:0x4665f9 [ 624.498509] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 624.506257] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 624.513864] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 624.521133] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.528492] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 624.535771] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 624.543056] CPU: 1 PID: 23727 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 624.551300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.560658] Call Trace: [ 624.563343] dump_stack+0x1b2/0x281 [ 624.566984] should_fail.cold+0x10a/0x149 [ 624.571143] should_failslab+0xd6/0x130 [ 624.575128] kmem_cache_alloc+0x28e/0x3c0 [ 624.579394] sk_prot_alloc+0x5f/0x290 [ 624.583199] sk_alloc+0x36/0xcd0 [ 624.586571] unix_create1+0x78/0x4f0 [ 624.590293] unix_create+0xdd/0x1c0 [ 624.593959] __sock_create+0x303/0x620 [ 624.597856] SyS_socketpair+0x159/0x480 [ 624.601859] ? fput+0xb/0x140 [ 624.604970] ? SyS_socket+0x1b0/0x1b0 [ 624.608779] ? SyS_read+0x210/0x210 [ 624.612519] ? __do_page_fault+0x159/0xad0 [ 624.616760] ? do_syscall_64+0x4c/0x640 [ 624.620792] ? SyS_socket+0x1b0/0x1b0 [ 624.624609] do_syscall_64+0x1d5/0x640 [ 624.628541] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 624.633734] RIP: 0033:0x4665f9 [ 624.637015] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 624.644821] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 624.652226] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 624.659505] RBP: 00007fd2848b51d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.666806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:37:06 executing program 5: ioctl$RTC_WIE_ON(0xffffffffffffffff, 0x700f) socketpair(0x26, 0x1, 0x0, 0x0) socketpair(0x3, 0x1, 0x1ff, &(0x7f0000000000)) 08:37:06 executing program 4: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x2, 0x5, 0x7ff, 0x800}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:06 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000500)=0xf4240) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xfffffe29) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB='syztnl1\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="0000000800000001000000094824006000680000052990787f000001ac1414bb44143710000000050000000100000001000000004414ef03ac1e010100fb59bd0fc9d48356b300789aac141429000000204414bb630a010102000000060a010100fffff8ef890fbfac14143dac1414aaffffffff00"]}) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000040)) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) accept(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)={0x68, 0x0, 0xa18, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_FD={0x8, 0x17, @udp6=r6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e20}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x32}}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x240000d9}, 0x20000080) 08:37:06 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 08:37:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) 08:37:06 executing program 3 (fault-call:0 fault-nth:11): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 624.674090] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 08:37:06 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) 08:37:06 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) socket$nl_generic(0x10, 0x3, 0x10) [ 624.740736] FAULT_INJECTION: forcing a failure. [ 624.740736] name failslab, interval 1, probability 0, space 0, times 0 08:37:07 executing program 5: socketpair(0x15, 0x1, 0x0, 0x0) 08:37:07 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) [ 624.783430] CPU: 1 PID: 23782 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 624.791357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.800709] Call Trace: [ 624.803322] dump_stack+0x1b2/0x281 [ 624.803338] should_fail.cold+0x10a/0x149 [ 624.803352] should_failslab+0xd6/0x130 [ 624.803364] kmem_cache_alloc_trace+0x29a/0x3d0 [ 624.803379] apparmor_file_alloc_security+0x129/0x800 [ 624.803395] security_file_alloc+0x66/0xa0 [ 624.829474] ? selinux_is_enabled+0x5/0x50 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000100)=0x8) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:07 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_WIE_OFF(r1, 0x7010) 08:37:07 executing program 5: socketpair(0x2, 0x7, 0x6e, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x8cd8, 0x4) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x98b}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x100}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x20}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_open_dev$video4linux(&(0x7f00000000c0), 0x6, 0xc3a81) [ 624.833732] get_empty_filp+0x15c/0x3e0 [ 624.837928] alloc_file+0x23/0x440 [ 624.841515] sock_alloc_file+0x113/0x2e0 [ 624.845689] ? sock_poll+0x220/0x220 [ 624.849412] SyS_socketpair+0x22e/0x480 [ 624.853391] ? SyS_socket+0x1b0/0x1b0 [ 624.857193] ? SyS_read+0x210/0x210 [ 624.860821] ? __do_page_fault+0x159/0xad0 [ 624.865060] ? do_syscall_64+0x4c/0x640 08:37:07 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:07 executing program 2: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f00000000c0)={0x77, 0x2, 0xfff, 0x7}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x400140, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000040)=0x9) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$l2tp6(0xa, 0x2, 0x73) getsockname$packet(r2, 0x0, &(0x7f0000000140)) [ 624.869072] ? SyS_socket+0x1b0/0x1b0 [ 624.869084] do_syscall_64+0x1d5/0x640 [ 624.869100] entry_SYSCALL_64_after_hwframe+0x46/0xbb 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000040)={0x10000, 0x7f, 0x5, @local}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 624.869108] RIP: 0033:0x4665f9 [ 624.869113] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 624.869124] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 08:37:07 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2b4081, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000100)={0xfffffffffffffffe, 0x80000001}) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000080)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)) [ 624.869129] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 08:37:07 executing program 3 (fault-call:0 fault-nth:12): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:07 executing program 2: socketpair(0x1, 0x800, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$can_raw(r0, &(0x7f0000000100)={&(0x7f0000000080)=@phonet, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/214, 0xd6}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x5) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) recvmsg$can_raw(r0, &(0x7f0000000b40)={&(0x7f0000000600)=@can={0x1d, 0x0}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000000)=""/49, 0x31}, {&(0x7f00000006c0)=""/84, 0x54}, {&(0x7f0000000740)=""/171, 0xab}, {&(0x7f0000000800)=""/223, 0xdf}, {&(0x7f0000000900)=""/3, 0x3}, {&(0x7f0000000940)=""/92, 0x5c}], 0x6, &(0x7f0000000a40)=""/221, 0xdd}, 0x10060) sendmsg$can_raw(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x1d, r3}, 0x10, &(0x7f0000000c40)={&(0x7f0000000bc0)=@can={{0x2, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "33d2dd1f7f004d29"}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000) [ 624.869135] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 624.869140] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 08:37:07 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 624.869146] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:07 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 08:37:07 executing program 5: socketpair(0x2b, 0x1, 0x0, 0x0) [ 625.181376] FAULT_INJECTION: forcing a failure. [ 625.181376] name failslab, interval 1, probability 0, space 0, times 0 08:37:07 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:07 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) getsockname(r2, &(0x7f00000000c0)=@rc={0x1f, @fixed}, &(0x7f0000000140)=0x80) getsockname$packet(r0, 0x0, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 625.224110] CPU: 1 PID: 23843 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 625.232055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.242370] Call Trace: [ 625.244964] dump_stack+0x1b2/0x281 [ 625.248628] should_fail.cold+0x10a/0x149 [ 625.252784] should_failslab+0xd6/0x130 [ 625.256763] kmem_cache_alloc_trace+0x29a/0x3d0 [ 625.261440] apparmor_file_alloc_security+0x129/0x800 08:37:07 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2, 0xa8000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000180)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x3, {0xa, 0x4e22, 0x401, @local, 0x9}, r1}}, 0x38) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x8008af00, &(0x7f0000000040)) 08:37:07 executing program 1: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) accept(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 625.266659] security_file_alloc+0x66/0xa0 [ 625.266670] ? selinux_is_enabled+0x5/0x50 08:37:07 executing program 3 (fault-call:0 fault-nth:13): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:07 executing program 1: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) 08:37:07 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) [ 625.266682] get_empty_filp+0x15c/0x3e0 [ 625.266692] alloc_file+0x23/0x440 [ 625.266707] sock_alloc_file+0x113/0x2e0 [ 625.266717] ? sock_poll+0x220/0x220 08:37:07 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000080)=&(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:07 executing program 1: socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) 08:37:07 executing program 2: socketpair(0x21, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) [ 625.266733] SyS_socketpair+0x22e/0x480 [ 625.266742] ? SyS_socket+0x1b0/0x1b0 [ 625.266752] ? SyS_read+0x210/0x210 [ 625.266763] ? __do_page_fault+0x159/0xad0 [ 625.266773] ? do_syscall_64+0x4c/0x640 [ 625.266780] ? SyS_socket+0x1b0/0x1b0 [ 625.266790] do_syscall_64+0x1d5/0x640 [ 625.266806] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 625.266814] RIP: 0033:0x4665f9 [ 625.266820] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 625.266830] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 625.266836] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 625.266841] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.266847] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 625.266853] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 625.447381] FAULT_INJECTION: forcing a failure. [ 625.447381] name failslab, interval 1, probability 0, space 0, times 0 [ 625.447395] CPU: 1 PID: 23885 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 625.447401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.447406] Call Trace: [ 625.447427] dump_stack+0x1b2/0x281 [ 625.447444] should_fail.cold+0x10a/0x149 [ 625.447470] should_failslab+0xd6/0x130 [ 625.447486] kmem_cache_alloc+0x28e/0x3c0 [ 625.447502] __anon_vma_prepare+0x5d/0x4f0 [ 625.447514] ? __lock_acquire+0x5fc/0x3f20 [ 625.447527] do_huge_pmd_anonymous_page+0xd38/0x1700 [ 625.447540] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 625.447551] ? _raw_spin_unlock_irq+0x5a/0x80 [ 625.447564] ? prep_transhuge_page+0xa0/0xa0 [ 625.447584] ? switch_mm_irqs_off+0x601/0xeb0 [ 625.447603] __handle_mm_fault+0x2ac4/0x4620 [ 625.447618] ? vm_insert_page+0x7c0/0x7c0 [ 625.447632] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 625.447645] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 625.447665] ? mark_held_locks+0xa6/0xf0 [ 625.447685] handle_mm_fault+0x455/0x9c0 [ 625.447705] __do_page_fault+0x549/0xad0 [ 625.447725] ? spurious_fault+0x640/0x640 [ 625.447740] ? do_page_fault+0x60/0x500 [ 625.447751] page_fault+0x25/0x50 [ 625.447763] RIP: 0010:__put_user_4+0x1c/0x30 [ 625.447768] RSP: 0018:ffff8880b49a7e50 EFLAGS: 00010297 [ 625.447777] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 625.447782] RDX: 0000000000000740 RSI: ffffffff85bc1f33 RDI: 0000000000000286 [ 625.447806] RBP: 0000000000000004 R08: ffffffff8b9b9828 R09: 0000000000000000 [ 625.447819] R10: 0000000000000000 R11: ffff8880912e8540 R12: 1ffff11016934fcd [ 625.447827] R13: ffff8880b5209500 R14: 0000000000000005 R15: ffff8880b5209280 [ 625.447850] ? SyS_socketpair+0x253/0x480 [ 625.447864] SyS_socketpair+0x25e/0x480 [ 625.447875] ? SyS_socket+0x1b0/0x1b0 [ 625.447891] ? SyS_read+0x210/0x210 [ 625.447903] ? __do_page_fault+0x159/0xad0 [ 625.447914] ? do_syscall_64+0x4c/0x640 [ 625.447923] ? SyS_socket+0x1b0/0x1b0 [ 625.447934] do_syscall_64+0x1d5/0x640 [ 625.447952] entry_SYSCALL_64_after_hwframe+0x46/0xbb 08:37:08 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 3 (fault-call:0 fault-nth:14): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:08 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000002c0)={0x401, 0x1c, [0x5, 0x1b57, 0x80, 0x3, 0x6a, 0xed0, 0x8]}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x5b1042, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='v\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000226bd7000fbdbdf250c00000004000b0004000b000e000a00519e8079d7549454c83c000004000b0004000b0004000b000800090005ac0f0004000b0028005080040006000800030001ac0f00080007000100000005000900020000000500020003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f0000000300)) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x84403, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0x40045542, &(0x7f0000000080)=0xcdd) 08:37:08 executing program 5: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r0, 0x100, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x24044080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:08 executing program 1: socketpair(0x0, 0x5, 0x9, &(0x7f00000000c0)) 08:37:08 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x28000}, 0xfffffffffffffe23, &(0x7f0000000280)={&(0x7f0000000300)={0x70, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x100, 0x29}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x40080}, 0x80) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14001800", @ANYRES16=r4, @ANYBLOB="00022cbd7000fedbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x40011}, 0x20008040) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 625.447961] RIP: 0033:0x4665f9 [ 625.447967] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 625.447979] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 625.447985] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 625.447992] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 625.447998] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 625.448005] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 625.891316] FAULT_INJECTION: forcing a failure. [ 625.891316] name failslab, interval 1, probability 0, space 0, times 0 [ 625.927293] CPU: 0 PID: 23901 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 08:37:08 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) [ 625.935205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 625.944558] Call Trace: [ 625.947148] dump_stack+0x1b2/0x281 [ 625.950782] should_fail.cold+0x10a/0x149 [ 625.954933] should_failslab+0xd6/0x130 [ 625.958911] kmem_cache_alloc+0x28e/0x3c0 [ 625.963065] __khugepaged_enter+0x32/0x330 [ 625.967306] do_huge_pmd_anonymous_page+0xd61/0x1700 [ 625.972414] ? prep_transhuge_page+0xa0/0xa0 [ 625.976828] ? trace_hardirqs_on+0x10/0x10 [ 625.981060] ? SyS_socketpair+0x22e/0x480 [ 625.985211] __handle_mm_fault+0x2ac4/0x4620 [ 625.989625] ? trace_hardirqs_on+0x10/0x10 [ 625.989637] ? vm_insert_page+0x7c0/0x7c0 [ 625.998012] ? mark_held_locks+0xa6/0xf0 [ 626.002073] handle_mm_fault+0x455/0x9c0 [ 626.006145] __do_page_fault+0x549/0xad0 [ 626.010210] ? spurious_fault+0x640/0x640 [ 626.014387] ? do_page_fault+0x60/0x500 [ 626.018372] page_fault+0x25/0x50 [ 626.021830] RIP: 0010:__put_user_4+0x1c/0x30 [ 626.026233] RSP: 0018:ffff888080067e50 EFLAGS: 00010297 [ 626.031597] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 08:37:08 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_open_dev$rtc(&(0x7f0000000100), 0x1f, 0x400000) ioctl$RTC_PIE_OFF(r1, 0x7006) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000000)) [ 626.038870] RDX: 0000000000000858 RSI: ffffffff85bc1f33 RDI: 0000000000000286 [ 626.046443] RBP: 0000000000000004 R08: ffffffff8b9b9828 R09: 0000000000000000 [ 626.046450] R10: 0000000000000000 R11: ffff888075cae440 R12: 1ffff1101000cfcd [ 626.046455] R13: ffff88808f1c45c0 R14: 0000000000000005 R15: ffff88809a92a280 [ 626.046476] ? SyS_socketpair+0x253/0x480 [ 626.072430] SyS_socketpair+0x25e/0x480 [ 626.076409] ? SyS_socket+0x1b0/0x1b0 [ 626.080215] ? SyS_read+0x210/0x210 [ 626.084715] ? __do_page_fault+0x159/0xad0 08:37:08 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000080)={0x400, 0x1, 0x0, [{0x59780000000000, 0x0, 0xffffffffffffffc0, 0x4, 0x8, 0xd1, 0x3}]}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) [ 626.088953] ? do_syscall_64+0x4c/0x640 [ 626.092929] ? SyS_socket+0x1b0/0x1b0 [ 626.096734] do_syscall_64+0x1d5/0x640 [ 626.100644] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 626.105832] RIP: 0033:0x4665f9 [ 626.109019] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 626.116731] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 626.124016] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 626.124022] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 08:37:08 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xfffffffffffffe00, 0x1b}) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) [ 626.124032] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 626.146060] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:08 executing program 3 (fault-call:0 fault-nth:15): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 2: socketpair(0x26, 0x80000, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0xa102, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1b0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x7f}}]}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x8000}}}, {{@uncond, 0x0, 0x90, 0xf0, 0x0, {}, [@common=@socket0={{0x20}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x7, 0x8, [0xe, 0xd, 0x1c, 0x8, 0x32, 0x2e, 0x23, 0x0, 0x20, 0x5, 0x36, 0x15, 0x1e, 0x28, 0x35, 0x1], 0x0, 0xfffffffb}}}, {{@uncond, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@addrtype={{0x30}, {0x493, 0x100, 0x0, 0x1}}, @common=@set={{0x40}, {{0x2, [0x6, 0x6, 0x1, 0x0, 0x1, 0x4], 0x5, 0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x1, 0x0, 0x0, 0x2], 0x6, 0x1}, {0x2, [0x1, 0x5, 0x1, 0x4, 0xd, 0x3], 0x5, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e8) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 08:37:08 executing program 5: ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x1, 0x1, {0x1, 0x15, 0x12, 0x8, 0x7, 0x741e676a, 0x2, 0x71, 0x1}}) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000080)={0x27, 0x6, 0xc, 0x1b, 0x3, 0x2, 0x0, 0x6f, 0xffffffffffffffff}) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_EPOCH_READ(r2, 0x8008700d, &(0x7f00000000c0)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000140)) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000180)) 08:37:08 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000180)=0x1, 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffffffe0, 0x2000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:08 executing program 1: socketpair(0x0, 0x5, 0x9, &(0x7f00000000c0)) 08:37:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) [ 626.317272] FAULT_INJECTION: forcing a failure. [ 626.317272] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.370611] CPU: 0 PID: 23960 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 626.378538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.387886] Call Trace: [ 626.390475] dump_stack+0x1b2/0x281 [ 626.394120] should_fail.cold+0x10a/0x149 [ 626.398398] __alloc_pages_nodemask+0x22c/0x2720 [ 626.403155] ? __save_stack_trace+0x63/0x160 [ 626.407562] ? deref_stack_reg+0x124/0x1a0 [ 626.411800] ? trace_hardirqs_on+0x10/0x10 [ 626.416035] ? trace_hardirqs_on+0x10/0x10 08:37:08 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x47}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x23}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3c}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:08 executing program 1: socketpair(0x0, 0x5, 0x9, &(0x7f00000000c0)) [ 626.420403] ? lock_downgrade+0x740/0x740 [ 626.424563] ? gfp_pfmemalloc_allowed+0x150/0x150 08:37:08 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x141802, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000040)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 626.424576] ? is_bpf_text_address+0xb8/0x150 08:37:08 executing program 1: socketpair(0x25, 0x0, 0x9, &(0x7f00000000c0)) [ 626.424592] ? __khugepaged_enter+0x24c/0x330 [ 626.424604] ? lock_acquire+0x170/0x3f0 08:37:08 executing program 3 (fault-call:0 fault-nth:16): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:08 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:08 executing program 2: socketpair(0x6, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x406280, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x90208400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x3c, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x93c}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x808}, 0x40000) 08:37:08 executing program 1: socketpair(0x25, 0x0, 0x9, &(0x7f00000000c0)) [ 626.424614] ? lock_downgrade+0x740/0x740 [ 626.424629] alloc_pages_vma+0x4b3/0x6d0 [ 626.424644] do_huge_pmd_anonymous_page+0x2d6/0x1700 08:37:08 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:08 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) recvmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f0000000080)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, &(0x7f0000000400)=""/4096, 0x1000}, 0x102) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) getsockname(r1, &(0x7f0000001400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000001480)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000014c0)=0x40) 08:37:08 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000000), 0x80000000, 0x101040) socketpair(0x1, 0x1, 0x0, 0x0) [ 626.424657] ? prep_transhuge_page+0xa0/0xa0 [ 626.424666] ? trace_hardirqs_on+0x10/0x10 [ 626.424675] ? SyS_socketpair+0x22e/0x480 [ 626.424688] __handle_mm_fault+0x2ac4/0x4620 [ 626.424700] ? trace_hardirqs_on+0x10/0x10 [ 626.424709] ? vm_insert_page+0x7c0/0x7c0 [ 626.424729] ? mark_held_locks+0xa6/0xf0 [ 626.424743] handle_mm_fault+0x455/0x9c0 [ 626.424758] __do_page_fault+0x549/0xad0 [ 626.424773] ? spurious_fault+0x640/0x640 [ 626.424784] ? do_page_fault+0x60/0x500 [ 626.424797] page_fault+0x25/0x50 08:37:08 executing program 1: socketpair(0x25, 0x0, 0x9, &(0x7f00000000c0)) 08:37:08 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x202200, 0x0) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x80000001) socketpair(0x1, 0x1, 0x0, 0x0) [ 626.424808] RIP: 0010:__put_user_4+0x1c/0x30 [ 626.424813] RSP: 0018:ffff88809cf17e50 EFLAGS: 00010297 [ 626.424823] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 626.424829] RDX: 0000000000000704 RSI: ffffffff85bc1f33 RDI: 0000000000000286 [ 626.424834] RBP: 0000000000000004 R08: ffffffff8b9b9828 R09: 0000000000000000 [ 626.424840] R10: 0000000000000000 R11: ffff8880752c4180 R12: 1ffff110139e2fcd [ 626.424846] R13: ffff8880a59f85c0 R14: 0000000000000005 R15: ffff8880a59f8840 [ 626.424862] ? SyS_socketpair+0x253/0x480 08:37:08 executing program 1: socketpair(0x25, 0x5, 0x0, &(0x7f00000000c0)) [ 626.424873] SyS_socketpair+0x25e/0x480 [ 626.424883] ? SyS_socket+0x1b0/0x1b0 [ 626.424894] ? SyS_read+0x210/0x210 [ 626.424903] ? __do_page_fault+0x159/0xad0 [ 626.424913] ? do_syscall_64+0x4c/0x640 [ 626.424921] ? SyS_socket+0x1b0/0x1b0 [ 626.424931] do_syscall_64+0x1d5/0x640 [ 626.424946] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 626.424953] RIP: 0033:0x4665f9 [ 626.424958] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 626.424969] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 08:37:08 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x80c0) 08:37:08 executing program 2: socketpair(0x1, 0x6, 0xfffffffc, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@security={'security\x00', 0xe, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x1c8, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffffff, 0xffffffff, 'tunl0\x00', 'bridge_slave_0\x00', {}, {}, 0x1d, 0x0, 0x7}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x1000, 0xd, [0x35, 0x3d, 0x1a, 0x1c, 0x2e, 0x2, 0x35, 0x6, 0x6, 0x30, 0x2e, 0x23, 0x18, 0x28, 0x2, 0x35], 0x0, 0x1000, 0x1}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @empty, 0xffffffff, 0xffffffff, 'ip6tnl0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x2, 0x1, 0x2}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@icmp={{0x28}, {0x11, "5706", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x2, 0x0, 0x1, 0x4, 0x2, 0x1], 0x2, 0x1}, {0x4, [0x4, 0x4, 0x3, 0xd, 0x4, 0x3], 0x6, 0x3}}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@addrtype={{0x30}, {0x4, 0x383, 0x1}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x5, 0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xfff7, 0x6, [0x17, 0x3d, 0x1a, 0x23, 0xe, 0x2f, 0x3c, 0x17, 0x0, 0x1d, 0x21, 0x3e, 0x31, 0x7, 0x2, 0x3f], 0x1, 0x1, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) recvmsg$can_raw(r1, &(0x7f0000000840)={&(0x7f00000000c0)=@nl=@proc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000200)=""/246, 0xf6}], 0x2, &(0x7f0000000340)=""/118, 0x76}, 0x40002001) [ 626.424974] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 626.424979] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 626.424985] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 626.424991] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 626.629669] FAULT_INJECTION: forcing a failure. [ 626.629669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 626.943426] CPU: 0 PID: 24006 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 626.951337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 626.960948] Call Trace: [ 626.963542] dump_stack+0x1b2/0x281 [ 626.967176] should_fail.cold+0x10a/0x149 [ 626.971329] __alloc_pages_nodemask+0x22c/0x2720 [ 626.976090] ? __save_stack_trace+0x63/0x160 [ 626.980503] ? trace_hardirqs_on+0x10/0x10 [ 626.984739] ? trace_hardirqs_on+0x10/0x10 [ 626.988975] ? trace_hardirqs_on+0x10/0x10 [ 626.993212] ? lock_downgrade+0x740/0x740 [ 626.997368] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 627.002223] ? get_mem_cgroup_from_mm+0xf5/0x360 [ 627.006983] ? refill_stock+0x260/0x260 [ 627.010958] ? lock_downgrade+0x740/0x740 [ 627.015113] ? get_mem_cgroup_from_mm+0x112/0x360 [ 627.020131] alloc_pages_current+0x155/0x260 [ 627.024761] ? mem_cgroup_try_charge+0x2db/0x840 [ 627.029505] pte_alloc_one+0x15/0x100 [ 627.033322] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 627.038605] ? prep_transhuge_page+0xa0/0xa0 [ 627.042999] ? SyS_socketpair+0x22e/0x480 [ 627.047135] __handle_mm_fault+0x2ac4/0x4620 [ 627.051531] ? trace_hardirqs_on+0x10/0x10 [ 627.055745] ? vm_insert_page+0x7c0/0x7c0 [ 627.059884] ? mark_held_locks+0xa6/0xf0 [ 627.063925] handle_mm_fault+0x455/0x9c0 [ 627.067966] __do_page_fault+0x549/0xad0 [ 627.072008] ? spurious_fault+0x640/0x640 [ 627.076186] ? do_page_fault+0x60/0x500 [ 627.080244] page_fault+0x25/0x50 [ 627.083766] RIP: 0010:__put_user_4+0x1c/0x30 [ 627.088154] RSP: 0018:ffff8880a2017e50 EFLAGS: 00010297 [ 627.093500] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 627.100755] RDX: 0000000000000704 RSI: ffffffff85bc1f33 RDI: 0000000000000286 [ 627.108005] RBP: 0000000000000004 R08: ffffffff8b9b9828 R09: 0000000000000000 [ 627.115263] R10: 0000000000000000 R11: ffff8880953c2440 R12: 1ffff11014402fcd [ 627.122510] R13: ffff8880ab6db540 R14: 0000000000000005 R15: ffff8880b0470080 [ 627.129785] ? SyS_socketpair+0x253/0x480 [ 627.133913] SyS_socketpair+0x25e/0x480 [ 627.138007] ? SyS_socket+0x1b0/0x1b0 [ 627.141815] ? SyS_read+0x210/0x210 [ 627.145434] ? __do_page_fault+0x159/0xad0 [ 627.149650] ? do_syscall_64+0x4c/0x640 [ 627.153619] ? SyS_socket+0x1b0/0x1b0 [ 627.157426] do_syscall_64+0x1d5/0x640 [ 627.161309] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 627.166490] RIP: 0033:0x4665f9 [ 627.169657] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 627.177870] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 627.185179] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 08:37:09 executing program 3 (fault-call:0 fault-nth:17): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:09 executing program 0: syz_open_dev$vcsn(0x0, 0x40, 0x101000) 08:37:09 executing program 1: socketpair(0x25, 0x5, 0x0, 0x0) 08:37:09 executing program 5: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair(0x0, 0x0, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200102, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x0, 0xfff}) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:09 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbed257700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e0ffffff7f0000000800ef00060000000800ef00020000000500ee00040000000500ee00010000000500ee00f90000000500ee001f0000000800ef00080000000800ef00030000000800ef00010000000800ef0005000000"], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x10000) 08:37:09 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x68000, 0x0) getsockname(r1, &(0x7f0000000180)=@sco, &(0x7f0000000100)=0xb6) getsockname$packet(r0, 0x0, &(0x7f0000000140)) [ 627.192876] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.200140] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 627.207394] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:09 executing program 0: syz_open_dev$vcsn(0x0, 0x40, 0x101000) 08:37:09 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept(r1, 0x0, 0x0) getsockname(r1, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) r3 = accept(r2, &(0x7f00000000c0)=@llc, &(0x7f0000000180)=0x80) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) sendmsg$BATADV_CMD_GET_VLAN(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x18, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x40) 08:37:09 executing program 5: socketpair(0xb, 0x1, 0x35, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000140)=0x6) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x8000, 0x1, 0x1f, 0x81, 0x6]}, &(0x7f0000000100)=0x78) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) 08:37:09 executing program 1: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x80c0) [ 627.286358] FAULT_INJECTION: forcing a failure. [ 627.286358] name failslab, interval 1, probability 0, space 0, times 0 08:37:09 executing program 4: socketpair(0xa, 0x3, 0x5cb, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:37:09 executing program 0: syz_open_dev$vcsn(0x0, 0x40, 0x101000) [ 627.352172] CPU: 1 PID: 24060 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 627.360278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 627.369635] Call Trace: [ 627.372245] dump_stack+0x1b2/0x281 [ 627.375882] should_fail.cold+0x10a/0x149 [ 627.380141] should_failslab+0xd6/0x130 [ 627.384132] kmem_cache_alloc+0x28e/0x3c0 [ 627.388295] ptlock_alloc+0x1d/0x70 [ 627.391942] pte_alloc_one+0x57/0x100 [ 627.395750] do_huge_pmd_anonymous_page+0x8fc/0x1700 [ 627.400860] ? prep_transhuge_page+0xa0/0xa0 [ 627.405275] ? SyS_socketpair+0x22e/0x480 [ 627.409429] __handle_mm_fault+0x2ac4/0x4620 [ 627.413843] ? trace_hardirqs_on+0x10/0x10 [ 627.418078] ? vm_insert_page+0x7c0/0x7c0 [ 627.422242] ? mark_held_locks+0xa6/0xf0 [ 627.426308] handle_mm_fault+0x455/0x9c0 [ 627.430381] __do_page_fault+0x549/0xad0 [ 627.434450] ? spurious_fault+0x640/0x640 [ 627.438599] ? do_page_fault+0x60/0x500 [ 627.442574] page_fault+0x25/0x50 [ 627.446024] RIP: 0010:__put_user_4+0x1c/0x30 [ 627.450425] RSP: 0018:ffff88807fc37e50 EFLAGS: 00010297 [ 627.455787] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 00000000200003c0 [ 627.463056] RDX: 0000000000000704 RSI: ffffffff85bc1f33 RDI: 0000000000000286 [ 627.470328] RBP: 0000000000000004 R08: ffffffff8b9b9828 R09: 0000000000000000 [ 627.478135] R10: 0000000000000000 R11: ffff888074cca6c0 R12: 1ffff1100ff86fcd [ 627.485413] R13: ffff8880b4d93a00 R14: 0000000000000005 R15: ffff8880a96ad040 [ 627.492737] ? SyS_socketpair+0x253/0x480 [ 627.496892] SyS_socketpair+0x25e/0x480 [ 627.500881] ? SyS_socket+0x1b0/0x1b0 [ 627.504684] ? SyS_read+0x210/0x210 [ 627.508332] ? __do_page_fault+0x159/0xad0 [ 627.512576] ? do_syscall_64+0x4c/0x640 [ 627.516564] ? SyS_socket+0x1b0/0x1b0 [ 627.520368] do_syscall_64+0x1d5/0x640 [ 627.524799] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 627.529991] RIP: 0033:0x4665f9 [ 627.533179] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 627.540893] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 08:37:09 executing program 3 (fault-call:0 fault-nth:18): socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:09 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082bbd7000fcdbed257700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900e0ffffff7f0000000800ef00060000000800ef00020000000500ee00040000000500ee00010000000500ee00f90000000500ee001f0000000800ef00080000000800ef00030000000800ef00010000000800ef0005000000"], 0x78}, 0x1, 0x0, 0x0, 0x40040}, 0x10) syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x10000) 08:37:09 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x101000) 08:37:09 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:09 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) 08:37:09 executing program 2: socketpair(0x29, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname(r1, &(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private1}, &(0x7f0000000180)=0x80) socketpair(0x9595d6c899a7b0e3, 0x800, 0x0, &(0x7f0000000000)) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x9, 0x3, 0x368, 0x0, 0xffffffff, 0xffffffff, 0xb8, 0xffffffff, 0x2d0, 0xffffffff, 0xffffffff, 0x2d0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr, @broadcast, 0x0, 0x0, 'wg0\x00', 'syzkaller1\x00'}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) getsockname$packet(r0, 0x0, &(0x7f0000000140)) [ 627.548166] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 627.555438] RBP: 00007fbe2b48d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 627.562714] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000002 [ 627.569991] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 08:37:09 executing program 1: socketpair(0xa, 0x3, 0x5cb, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:37:09 executing program 3: socketpair(0xe, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c}, 0x200028e5) socketpair(0x6, 0x2467bac7141fafdc, 0x9, &(0x7f0000000080)) 08:37:09 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x101000) 08:37:09 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000040)={0x5, 0x3, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 627.641833] x_tables: ip_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 08:37:09 executing program 1: socketpair(0x25, 0x5, 0x0, &(0x7f00000000c0)) 08:37:09 executing program 5: socketpair(0x1, 0x1, 0xbd, 0x0) 08:37:09 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x101000) 08:37:09 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={r2, @local, @broadcast}, 0xc) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0xd, 0x3, 0x0, 0x80, 0xfffffffffffffffc}, @alu={0x4, 0x0, 0xc, 0xa, 0x9, 0xffffffffffffffc0, 0xfffffffffffffff0}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @generic={0x8, 0x3, 0x8, 0x3, 0x800}, @alu={0x4, 0x0, 0x4, 0x7, 0x8, 0xfffffffffffffff4, 0x10}], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000000080)={0x0, 0x3}, 0x8, 0x10, &(0x7f00000000c0)={0x1, 0xc, 0x1, 0x5}, 0x10}, 0x78) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:09 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2005c0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x0, 0x4) socketpair(0x23, 0x6, 0xfffffff8, &(0x7f0000000040)) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) accept(r2, &(0x7f0000000180)=@l2={0x1f, 0x0, @none}, &(0x7f0000000100)=0x80) [ 627.722895] x_tables: ip_tables: rpfilter match: used from hooks PREROUTING/OUTPUT, but only valid from PREROUTING 08:37:09 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x410b009}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:10 executing program 1: socketpair(0x1, 0x1, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000000)) 08:37:10 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x2, 0x40101) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000100)={0x0, 0xfffff000}) 08:37:10 executing program 3: socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa946}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x80) 08:37:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x0) 08:37:10 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x101000) 08:37:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000040), 0x1ff, 0x583401) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000080)=[{}], &(0x7f00000000c0)=0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404501}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="de353b007bfa5c82961a8a9f0a85f8d463f0", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d5000000000008000c0064000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 08:37:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x0) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)={0x98, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3f, 0x47}}}}, [@NL80211_ATTR_SMPS_MODE={0x5}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x23}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x3c}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_MAC_ADDRS={0x4}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000140)) [ 627.948422] can: request_module (can-proto-0) failed. 08:37:10 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) socketpair(0x5, 0x1, 0x2aa6, &(0x7f0000000100)) 08:37:10 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @private=0xa010100, @empty}, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 628.016266] can: request_module (can-proto-0) failed. 08:37:10 executing program 1: socketpair(0x1d, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa946}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xd4}, 0x80) 08:37:10 executing program 0: syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x0) 08:37:10 executing program 2: socketpair(0x1, 0x3, 0x1, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 3: socketpair(0x1, 0x1, 0xfffffffc, &(0x7f0000000000)) 08:37:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x4000010) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x48f9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, r4, 0x200, 0x8000, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}]}, 0x44}}, 0x8810) 08:37:10 executing program 5: r0 = gettid() waitid(0x1, r0, 0x0, 0x2, 0x0) r1 = gettid() waitid(0x1, r1, 0x0, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000100)={0x6, 0x1, 0xa5b8, 0xef1, 0x200000, 0x9}) r2 = gettid() r3 = getpgid(r2) capset(&(0x7f0000000140)={0x19980330, r3}, &(0x7f0000000180)={0x6, 0x3, 0xa0, 0x73bf, 0x0, 0x86}) r4 = gettid() waitid(0x1, r4, 0x0, 0x2, 0x0) syz_open_procfs$userns(r4, &(0x7f00000001c0)) waitid(0x1, r2, 0x0, 0x2, 0x0) capset(&(0x7f00000000c0)={0x19980330, r2}, &(0x7f0000000000)={0xfffffffd, 0xc0, 0x9, 0x4, 0x5, 0x7}) socketpair(0x1, 0x1, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, &(0x7f0000000080)={0x8000, 0xe2, 0x1}) 08:37:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x2c}}, 0x40000) ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004) getsockname$packet(r0, 0x0, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x141000) 08:37:10 executing program 0: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000001) socketpair(0x5, 0x1, 0x2aa6, &(0x7f0000000100)) 08:37:10 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socket$can_raw(0x1d, 0x3, 0x1) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000000)) [ 628.193281] can: request_module (can-proto-0) failed. 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404501}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="de353b007bfa5c82961a8a9f0a85f8d463f0", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d5000000000008000c0064000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 08:37:10 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x48) recvmsg$can_raw(r0, &(0x7f0000000540)={&(0x7f0000000200)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/254, 0xfe}], 0x1, &(0x7f0000000480)=""/180, 0xb4}, 0x23) 08:37:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f0000000080)=0x20) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:10 executing program 0: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000000)) r1 = syz_open_dev$rtc(&(0x7f0000000080), 0x2, 0x40101) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000100)={0x0, 0xfffff000}) 08:37:10 executing program 2: socketpair(0x1, 0x800, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x3, 0x100) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000040)={0x5, 0x7, 0x9, 0x7fffffff, 0xffffffff, 0xffffff24, 0x802}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x109001, 0x0) ioctl$RTC_EPOCH_SET(r1, 0x4008700e, 0x8) socketpair(0x11, 0xa, 0x2, &(0x7f00000003c0)) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404501}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="de353b007bfa5c82961a8a9f0a85f8d463f0", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d5000000000008000c0064000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 08:37:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair(0x27, 0x1, 0x80, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r1, &(0x7f0000000380)={&(0x7f0000000280), 0x10, &(0x7f0000000340)={&(0x7f0000000300)=@can={{0x0, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "aee720861d55490c"}, 0x10}, 0x1, 0x0, 0x0, 0xa000}, 0x11) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x10001) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_to_bond\x00'}, 0x18) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:10 executing program 4: socketpair(0x21, 0x3, 0xfffffffc, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404501}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="de353b007bfa5c82961a8a9f0a85f8d463f0", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d5000000000008000c0064000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 08:37:10 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x1fb9444c6b939a08, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004841}, 0x40080) 08:37:10 executing program 5: socketpair(0x18, 0x6, 0xffffe, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0xfffffffc, 0xffe, 0x53, &(0x7f0000000000)="63916675c0898f691de843c19925f06be0172eac9a4b3823e0fba26ad26518076d73c479ae900988c7a3f636eff42b86c2ade63eb45f7fb8e8521a1ae63d5c7243568750a0add9929353119a078bb6c860c285"}) 08:37:10 executing program 2: socketpair(0x1, 0x4, 0x4fe, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 4: socketpair(0x1, 0x80000, 0xe29b, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) accept(r2, &(0x7f00000000c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x80) 08:37:10 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220800, 0x0) ioctl$RTC_PIE_OFF(r0, 0x7006) socketpair(0x25, 0x5, 0x9, &(0x7f00000000c0)) syz_open_dev$vcsn(&(0x7f0000000040), 0x40, 0x101000) 08:37:10 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:10 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x2e4, 0x101000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 08:37:10 executing program 4: socketpair(0x1d, 0x6, 0xfffffffd, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:10 executing program 3: ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0xff) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000040)={0x800, 0x5, 0x0, [{0x3, 0x1, 0x6, 0x1, 0xff, 0x2}, {0x3ff, 0x401, 0x0, 0x5, 0x14, 0x1, 0x8}, {0x3, 0x7, 0x8, 0xf8, 0x7, 0x3, 0x2d}, {0x8001, 0x2, 0x5, 0x80, 0x71, 0xe2, 0x1f}, {0x1, 0x6, 0x7f, 0x84, 0x3, 0x8, 0x2}]}) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)=0x7fff) socketpair(0x1, 0x1, 0xff, &(0x7f00000003c0)) 08:37:10 executing program 0: socketpair(0x2b, 0x1, 0x0, 0x0) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x404501}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="de353b007bfa5c82961a8a9f0a85f8d463f0", @ANYRES16=0x0, @ANYBLOB="000427bd7000fbdbdf250f00000008000300", @ANYRES32=0x0, @ANYBLOB="0500d5000000000008000c0064000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24) 08:37:10 executing program 2: socketpair(0xb, 0x3, 0x5, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 5: socketpair(0x1, 0x1, 0x8, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000000)) 08:37:10 executing program 0: socketpair(0x2b, 0x1, 0x0, 0x0) 08:37:10 executing program 3: socketpair(0x29, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:37:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$l2tp6(0xa, 0x2, 0x73) 08:37:10 executing program 5: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x1, 0x9f4, 0x46a, 0x235e5386ccafa70, 0xffffffffffffffff}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0xa, 0x5, 0x6, 0x4000, r0}) socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='westwood\x00', 0x9) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:10 executing program 2: socketpair(0x1c, 0x3, 0xfffffffa, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:10 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:10 executing program 3: socketpair(0x2a, 0x4, 0x4, &(0x7f00000003c0)) 08:37:10 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x40) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00'}) 08:37:10 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:10 executing program 5: ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f0000000000)=0x80000001) socketpair(0x7, 0x4, 0xfffffffa, 0x0) 08:37:11 executing program 2: socketpair(0x26, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r2, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x5, 0x74}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8084}, 0x8001) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:11 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000040)={0x10, 0x30, 0xfa00, {&(0x7f0000000000), 0x2, {0xa, 0x4e20, 0x1, @local, 0xfffff266}}}, 0x38) 08:37:11 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, r2, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 3: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000080), 0x14140, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f00000000c0)) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000080)={0x80000001, 0x8, 0x0, [{0x5d97, 0x12, 0x5, 0x20, 0x18, 0x7, 0x6}, {0x4, 0x9, 0xea, 0x8c, 0x4, 0x4, 0x5}, {0x9, 0x611, 0x3, 0x81, 0x5, 0x0, 0x1}, {0xffff, 0x7, 0x3, 0x40, 0x81, 0xf8, 0x7f}, {0x1f, 0x7fffffff, 0x3, 0x7f, 0x40, 0x5a, 0x5a}, {0xffffffffffffff94, 0x6, 0x2, 0x3f, 0x1, 0xfd, 0xc6}, {0x1, 0x9, 0x3, 0x8, 0x5, 0x9, 0x20}, {0x25ed, 0x100000001, 0x20, 0x81, 0x3, 0x1, 0x5}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 08:37:11 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x2300) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) recvmsg$can_raw(r1, &(0x7f0000000800)={&(0x7f0000000100)=@ipx, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/232, 0xe8}, {&(0x7f0000000280)=""/72, 0x48}, {&(0x7f0000000300)=""/39, 0x27}, {&(0x7f0000000340)=""/238, 0xee}, {&(0x7f0000000440)=""/193, 0xc1}, {&(0x7f0000000540)=""/85, 0x55}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/127, 0x7f}], 0x8, &(0x7f0000000700)=""/242, 0xf2}, 0x40001001) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000040)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 08:37:11 executing program 2: socketpair(0x29, 0x1, 0xfffffffc, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040), 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f00000000c0)={0x0, 0xc, 0x4, 0x1511, 0x7b, {r1, r2/1000+60000}, {0x5, 0x2, 0x20, 0x1, 0x5, 0x6, "b05f9e4c"}, 0x3, 0x6, @fd, 0x7, 0x0, r3}) 08:37:11 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) r3 = socket$inet(0x2, 0x3, 0xce9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) r6 = socket$l2tp6(0xa, 0x2, 0x73) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000840)={r8, @local, @broadcast}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000040)={'tunl0\x00', &(0x7f0000000180)={'syztnl1\x00', r8, 0x700, 0x7800, 0x9, 0x6, {{0x2b, 0x4, 0x1, 0x3, 0xac, 0x67, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2a}, {[@lsrr={0x83, 0x7, 0x65, [@broadcast]}, @timestamp_prespec={0x44, 0x2c, 0x3b, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x41}, 0x81}, {@remote, 0x1f}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x20}, {@multicast2, 0xfffffff8}, {@private=0xa010100, 0xf1}]}, @timestamp={0x44, 0x14, 0x46, 0x0, 0x8, [0x7, 0x80, 0x7, 0x8824]}, @timestamp_addr={0x44, 0x4c, 0xee, 0x1, 0x5, [{@remote, 0x80000000}, {@broadcast, 0xaf}, {@private=0xa010100, 0x8}, {@broadcast, 0xcd9}, {@local, 0x7}, {@broadcast, 0x200}, {@empty, 0x5914}, {@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x86}]}, @ra={0x94, 0x4}]}}}}}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:11 executing program 3: ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x8, 0x7800, 0x401, 0x7, {{0xa, 0x4, 0x3, 0x6, 0x28, 0x66, 0x0, 0x8, 0x29, 0x0, @remote, @empty, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x33, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000000c0)={r1, 0x1fe2, 0x4}) 08:37:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 0: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r1, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x24000014) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x7ffffffd, 0x20400) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000040)={0x0, 0x7}) 08:37:11 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000400)={r1, 0x8, 0x8, "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"}) 08:37:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) accept(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f00000000c0)=0x80) 08:37:11 executing program 0: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x40}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200000c1}, 0x800) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) 08:37:11 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x1000000000000004, 0x8000) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000140)={0x3, 0x4, 0x10001, 0x2, 0x81, 0x7fff, 0x2}) ioctl$RTC_AIE_ON(r0, 0x7001) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x81) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x14) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000040)={0xf, 0xc, 0x0, 0x1d, 0x9, 0x8001, 0x4, 0x130, 0xffffffffffffffff}) socketpair(0x22, 0x0, 0x0, &(0x7f00000003c0)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) getsockname(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80) 08:37:11 executing program 0: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 2: getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000040)=0x1e) socketpair(0x1a, 0x800, 0x1, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xb, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x0, 0x9, 0x1, 0xfffffffffffffffc, 0x10}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}, @alu={0x4, 0x0, 0x9, 0xb, 0x7, 0x1, 0x10}], &(0x7f0000000100)='GPL\x00', 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xf, 0x6, 0x7fff}, 0x10, 0xffffffffffffffff}, 0x78) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 4: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000040)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:11 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 3: socketpair(0x28, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$IOC_PR_PREEMPT_ABORT(0xffffffffffffffff, 0x401870cc, &(0x7f0000000000)={0x101, 0x43, 0x7fff, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="0100000000a75a5617b47a000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r2, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x180c0}, 0x10) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 3: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socketpair(0x1, 0x1, 0x7, &(0x7f00000003c0)) 08:37:11 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x0, 0x100) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r2, 0x40206435, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r1}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x7, 0xffffffff, {{0x26, 0x4, 0x3, 0x3, 0x98, 0x64, 0x0, 0x3, 0x4, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x24, 0xf2, 0x1, 0x0, [{@loopback, 0x174}, {@multicast1, 0x2}, {@empty, 0x5}, {@multicast2, 0x7}]}, @generic={0x83, 0xf, "3d56e79aabf47ba445e5ee0e6b"}, @cipso={0x86, 0x10, 0x3, [{0x7, 0xa, "732959a74ec70fec"}]}, @noop, @ssrr={0x89, 0x1b, 0xef, [@remote, @local, @local, @dev={0xac, 0x14, 0x14, 0x41}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0xb, 0xfa, [@dev={0xac, 0x14, 0x14, 0x20}, @private=0xa010101]}, @end, @ssrr={0x89, 0x17, 0x3b, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0xa}, @rand_addr=0x64010102, @loopback]}]}}}}}) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000127bd7000fcdbdf255400000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000580), 0xa20c1, 0x0) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 08:37:11 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 2: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x480880, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f00000000c0)) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000100)={0x8, 0x100000010000007}) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) ioctl$BLKRESETZONE(r2, 0x40101283, &(0x7f00000001c0)={0x7, 0xffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x48000, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r3, 0x4008af23, &(0x7f0000000180)={0x0, 0x8}) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000040)={0xbaf, 0x9, 0xfffffe00, 0x1}) 08:37:11 executing program 3: socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x6, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) socket$packet(0x11, 0x2, 0x300) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4020124}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250200000008006a000400000008006200000000003400258005000100ff000000056bb60000000000050005000100000006000200ff010000050005000400000005000500e60000000500590009000000"], 0x60}, 0x1, 0x0, 0x0, 0x10000800}, 0x880) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$BLKFLSBUF(r3, 0x1261, &(0x7f0000000200)=0x5) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x0, r2}) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0xfffffffd, 0x0, "66f5c6df2c9044f053dbeae54ca10b68f7d6d56012ebe5e6c1fea49c8719148fda5d3d67cfc5da11"}) 08:37:11 executing program 0: socketpair(0x0, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, 0x0) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, &(0x7f0000000180)={0x246, 0x5, 0x0, [{0xaf, 0x6, 0x1, 0x1, 0x6, 0xff, 0x2}, {0x7, 0xdea, 0xf01c, 0x0, 0x2, 0x6, 0x3}, {0x6, 0x101, 0x4, 0x52, 0x20, 0x80}, {0x5, 0x2, 0xfffffffffffffff7, 0x5, 0x1, 0x20, 0x1}, {0xffffffff00000000, 0x5, 0x3, 0x96, 0x0, 0x3, 0x8}]}) 08:37:11 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x220001, 0x0) 08:37:11 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:11 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000040)=0x1, 0x4) 08:37:11 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:11 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = accept(r0, 0x0, &(0x7f0000000380)) accept(r1, &(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000000480)=0x80) accept(r0, &(0x7f0000000040)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80) 08:37:12 executing program 3: socketpair(0x1a, 0x1, 0xfffffffe, &(0x7f00000003c0)) 08:37:12 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 5: socketpair(0xb, 0xa, 0x4, 0x0) 08:37:12 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 08:37:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:12 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fedbdf250700000008003b00f80300000800390006000000"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x9004) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:12 executing program 2: socketpair(0x3, 0x4, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 08:37:12 executing program 3: socketpair(0x1a, 0x1, 0x0, &(0x7f00000003c0)) 08:37:12 executing program 4: socketpair(0x1, 0x8000c, 0x20000000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x18000, 0x0) ioctl$RTC_PIE_OFF(r1, 0x7006) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f0000000080)={0xaf, 0x5}) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) 08:37:12 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 3: socketpair(0xf, 0x1, 0x400006, &(0x7f0000000000)) 08:37:12 executing program 5: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="000017009b18bdd50d6e7ae827f900d0f8952e80ef223d0042daba9816f75dce5bf04c30d43fdbeef176f8ce9427afcc00d05dd22f2bda96328073a482e12cacd8d231f7be1084a784f8bfbf2607d2b7315c922c35353bdf8398dd9a3a4d25c717d576949bad4591c55c12135e6f5243f58b6ab865e8553a112ef213afbd6943244dcf049f8e869efe72bdeec29d4f266a75120dc4aecf875990f83a58", @ANYRES16=r0, @ANYBLOB="00012dbd7000fcdbdf257700000008000300", @ANYRES32=r1, @ANYBLOB="0500ee003f0000000800ef000b0000000800ef0008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) socketpair(0x28, 0x80000, 0x0, 0x0) 08:37:12 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:12 executing program 2: ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000080)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x418100, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x1, 0x80000000, 0x24, 0x800}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:12 executing program 5: getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:12 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000040)={'syz_tun\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f00000000c0)={0x9, 0x81, 0xfffff90c, 0x800, 0x1593, 0x0, 0x2}) 08:37:12 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000140), 0xf1, 0x482) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x800, 0x70bd29, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x8811}, 0x100) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r4, 0xc008551a, &(0x7f0000000080)=ANY=[@ANYBLOB="07000000080000000c08df0000000000000000"]) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {&(0x7f0000000280)}}, 0x18) 08:37:12 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x26, 0x5, 0xffff, &(0x7f0000000000)) 08:37:12 executing program 4: socketpair(0x1, 0x3, 0x3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7146bafa", @ANYRES16=r1, @ANYBLOB="000827bd7000ffdbcf25210000000a0001007770616e34000000050020000000000009001f0070687931000000000c0005000203aaaaaaaaaaaa0500200000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60044800}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x41000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10000) r4 = socket$l2tp6(0xa, 0x2, 0x73) accept(r4, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 08:37:12 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x88857a5e79e7ab1a}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x9c, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5}}}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xffffffa3}, {0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}]}, 0x9c}}, 0x40010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000100)={'gretap0\x00', &(0x7f0000000040)={'tunl0\x00', r4, 0x80, 0x8, 0x7, 0x5d2, {{0x1c, 0x4, 0x1, 0x22, 0x70, 0x65, 0x0, 0xff, 0x0, 0x0, @loopback, @empty, {[@timestamp={0x44, 0x18, 0x2e, 0x0, 0xd, [0x7ff, 0x0, 0x1, 0xe22f, 0x8]}, @rr={0x7, 0x2b, 0xeb, [@remote, @private=0xa010100, @broadcast, @rand_addr=0x64010101, @local, @rand_addr=0x64010102, @multicast2, @loopback, @local, @empty]}, @timestamp={0x44, 0x18, 0x39, 0x0, 0xd, [0x1, 0x641f, 0x9, 0x1, 0x4]}]}}}}}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$VHOST_GET_FEATURES(r2, 0x8008af00, &(0x7f0000000180)) 08:37:12 executing program 5: socket$pppl2tp(0x18, 0x1, 0x1) 08:37:12 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f00000000c0)) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000100)) ioctl$RTC_EPOCH_READ(r0, 0x8008700d, &(0x7f0000000040)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:12 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:12 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000002c0), 0x4400, 0x0) socketpair(0x15, 0xa, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000)=0x1f, 0x4) socket$packet(0x11, 0x3, 0x300) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 4: getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4040040) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r2, @ANYBLOB="080025bd7000fedbdf2502000000340025800500010005000000060002000d0c000006006c0002000000060002000004000006000300090000000500010007000100240025800600020001000000060004000900000006000400ff010000050001000000000008006a0032b40000050059000105000008006a000080000008006a0080000000"], 0x8c}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$RTC_WIE_OFF(r3, 0x7010) 08:37:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:12 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) socket$can_raw(0x1d, 0x3, 0x1) getsockname$packet(r2, &(0x7f0000000000), &(0x7f00000000c0)=0xfddb) 08:37:12 executing program 3: socketpair(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40a96cf74669eb5c, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf2506000000050030000100000008003b000800000008002c00030000000f5439b59885f98ab4"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000c800) 08:37:12 executing program 5: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1000}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) socketpair(0x1, 0x1, 0x4, 0x0) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:12 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f00000002c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 08:37:12 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}], @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_OBSS_PD={0xc, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x12}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8018}, 0x20040000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x400}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x2}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x804) 08:37:12 executing program 5: socketpair(0x1, 0x1, 0xffffffff, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000080)=0x80) 08:37:12 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x5, 0x40000) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x257350d71a2969a9) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x400c045) 08:37:12 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r3, 0xb10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x10, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xa4, r4, 0x4, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x880}, 0x20000800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x48}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x40074) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:12 executing program 1: socketpair(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40a96cf74669eb5c, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf2506000000050030000100000008003b000800000008002c00030000000f5439b59885f98ab4"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000c800) 08:37:12 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000180)=0x6f1) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9) ioctl$BLKBSZGET(0xffffffffffffffff, 0x80081270, &(0x7f0000000100)) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x8000040) 08:37:12 executing program 3: ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x4, &(0x7f0000000040)) 08:37:12 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f0000000000)) 08:37:12 executing program 2: socketpair(0x1, 0x0, 0x9, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10}, 0x18) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x400c045) 08:37:12 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x29, 0x6, 0x0, &(0x7f00000003c0)) socketpair(0x1a, 0x3, 0x0, &(0x7f0000000000)) socketpair(0x11, 0x2, 0x7fff, &(0x7f0000000040)) socket$l2tp6(0xa, 0x2, 0x73) socket$can_raw(0x1d, 0x3, 0x1) 08:37:12 executing program 1: socketpair(0x2, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x40a96cf74669eb5c, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00012dbd7000ffdbdf2506000000050030000100000008003b000800000008002c00030000000f5439b59885f98ab4"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000c800) 08:37:12 executing program 5: socketpair(0x1f, 0x800, 0x0, 0x0) 08:37:12 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) socketpair(0xa, 0x80006, 0x4, &(0x7f0000000000)) 08:37:12 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, 0x0, 0x400c045) 08:37:12 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'veth1\x00', 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:37:12 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_raw(r1, &(0x7f0000000940)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000980)=""/213, 0xd5}, {&(0x7f0000000280)=""/230, 0xe6}, {&(0x7f0000000080)=""/158, 0x9e}, {&(0x7f0000000400)=""/220, 0xdc}, {&(0x7f0000000500)=""/131, 0x83}, {&(0x7f00000005c0)=""/183, 0xb7}, {&(0x7f0000000680)=""/240, 0xf0}, {&(0x7f0000000780)=""/74, 0x4a}, {&(0x7f0000000380)=""/16, 0x10}, {&(0x7f0000000800)=""/112, 0x70}], 0xa}, 0x20) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:12 executing program 5: ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000000)={0x6, 0x1, 0x1}) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:12 executing program 1: socketpair(0x1f, 0x800, 0x0, 0x0) 08:37:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0}) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:13 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:13 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = accept(r1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d4}, 0x4000801) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:13 executing program 3: socketpair(0x0, 0x5, 0xfffffffd, &(0x7f0000000000)) 08:37:13 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:13 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = socket$inet(0x2, 0xa, 0x5) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000180)={0x31, 0x23, 0xe, 0x19, 0x5, 0x7fff, 0x2, 0x14c}) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000600)={r2, 0x0, 0x1000, "29f64a194137469d128c34ddc825bf2feb83b3bdac5eba819baab2aba4354a5bcfb3d5f25020259ff8789e3bcb61db75e7b3cafcd00afcaf8ed6e05af0cefbab192ce6bdc3b4a6c025574b52887555102b8b9aefc558dcb8c6c914502f"}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5f}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x100}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c045}, 0x5) 08:37:13 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0xffffffff, 0x7, 0x0, 0x100000000000000, 0x40, 0x7d]}, &(0x7f0000000100)=0x78) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'wg2\x00'}, 0x18) r2 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x3, 0x0, 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:13 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840)={r3, @local, @broadcast}, 0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'gretap0\x00', r3, 0x8000, 0x10, 0x0, 0x7fff, {{0xe, 0x4, 0x2, 0x12, 0x38, 0x64, 0x0, 0x8, 0x2f, 0x0, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x10}, {[@timestamp={0x44, 0x14, 0xd2, 0x0, 0x3, [0x4, 0x9, 0xb76, 0x7ff]}, @timestamp={0x44, 0xc, 0xd2, 0x0, 0x1, [0x4, 0x6]}, @ra={0x94, 0x4}]}}}}}) 08:37:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:13 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:13 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000280), 0x121a00, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x3, &(0x7f0000000000)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @ldst={0x3, 0x1, 0x0, 0x7, 0x5, 0x1, 0xfffffffffffffff0}], &(0x7f0000000040)='syzkaller\x00', 0x6456, 0xcf, &(0x7f0000000080)=""/207, 0x83f00, 0x3, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000001c0)={0x4, 0x3, 0x1, 0x1}, 0x10}, 0x78) 08:37:13 executing program 5: socketpair(0x1, 0x1, 0x400000, 0x0) 08:37:13 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)={0x48, r1, 0x800, 0x70bd27, 0x25cfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r1, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x80) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r1, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60044800}, 0x1) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x9}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000020) socketpair(0x9, 0x80000, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x4040010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:13 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:13 executing program 3: ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000000)={0x2, 0x3, 0x8, 0x80000}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:13 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 08:37:13 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24008080}, 0x400c045) 08:37:13 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f0000000200)={0x24, 0x2, 0x3, 0x12, 0x0, 0x2, 0x2, 0x3f}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, r3, 0x4, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x10) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$EBT_SO_GET_INFO(r4, 0x0, 0x80, &(0x7f0000000000)={'nat\x00'}, &(0x7f0000000080)=0xffffffffffffff80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair(0x35, 0x80000, 0x80, &(0x7f0000000000)) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:14 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x302, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0xcd1, 0xa, 0x1}) 08:37:14 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x400c045) 08:37:14 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) syz_open_dev$rtc(&(0x7f0000000080), 0x8000, 0x420000) syz_open_dev$vcsn(&(0x7f0000000040), 0x7, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) 08:37:14 executing program 1: write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:14 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 08:37:14 executing program 3: socketpair(0x1, 0x6, 0x2, &(0x7f0000000000)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, &(0x7f0000000180)=""/104, 0x68}, 0x2001) 08:37:14 executing program 4: socketpair(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 2: socketpair(0x9, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) socketpair(0x1d, 0x6, 0x25, &(0x7f0000000040)) 08:37:14 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 08:37:14 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair(0x1f, 0x80000, 0x4, &(0x7f0000000040)) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 3: socketpair(0x1, 0x80b, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000000)) 08:37:14 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x286ff53bc6f2c15c}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x800, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24000880}, 0xd0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040d0}, 0x2000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x24, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:14 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) socketpair(0x21, 0x800, 0x101, &(0x7f0000000080)) r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x5, 0x18001) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 3: socketpair(0x1a, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, '\x00', 0x3}, 0x18) 08:37:14 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 2: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socket$bt_bnep(0x1f, 0x3, 0x4) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000080) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r2, 0x1, 0x0, "06125b7c753beb897abe3cb0347adf158e00f104500ac848cb80944558c4cd35419dcdbed348a2c7a59d293f2cdb73eb8601b42dd9fa67d7a8bd0ce85ab1f32a62d0c72fc7de6b29533126e078d0ed91593b50df84637eaadba7f54219430f567650e0ec3f09a7f9923a5a3db97f31641bb153067bd84befdc8400aac3b0105a5d7db6bc2b5651ba0a2d413fa9c2c22a78df1c7a1974392e8ca4f587f144fec4f345916b32d352051387f41b4c8039bb5f"}) 08:37:14 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={r2, @local, @broadcast}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000140)=@raw=[@ldst={0x2, 0x3, 0x0, 0x9, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff0}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}, @exit, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfff}, @call={0x85, 0x0, 0x0, 0x92}, @ldst={0x0, 0x3, 0x3, 0x1, 0x0, 0xffffffffffffffe0, 0xffffffffffffffe7}, @initr0={0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x1}, @map={0x18, 0x3, 0x1, 0x0, 0x1}], &(0x7f00000001c0)='GPL\x00', 0x80000001, 0x88, &(0x7f0000000200)=""/136, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x200, 0xf79}, 0x10}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1e, 0x3, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x42}, @exit, @jmp={0x5, 0x0, 0x5, 0xb, 0x5, 0x4, 0xfffffffffffffff0}], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x4, &(0x7f0000000080)=""/4, 0x40f00, 0x4, '\x00', r2, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x5, 0x9, 0x2}, 0x10, 0xffffffffffffffff, r3}, 0x78) socketpair(0x1, 0x1, 0x1, 0x0) 08:37:14 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1f}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x4090) 08:37:14 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x68, 0x0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x8}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x2}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x845) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000040)={0x7fff, 0x1, 0x4, 0x2000, 0x1, {0x0, 0x2710}, {0x3dd74561786d55dd, 0xc, 0x83, 0x1, 0x3, 0x1, "2f2d410f"}, 0x8, 0x3, @planes=&(0x7f0000000000)={0x1, 0x1000, @userptr=0x4, 0xbf1}, 0x1ff, 0x0, r3}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$bt_bnep(0x1f, 0x3, 0x4) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="02008f2a65587cfb19ea01000000080032007f00000005002e00000000000a000900aaaaaaaaaaaa000008cc19894cdc86da93086b9d72a289000e00", @ANYRES32=r5, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:37:14 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, 0x0, 0x0) 08:37:14 executing program 0: socketpair(0x1, 0x2, 0x0, &(0x7f00000003c0)) 08:37:14 executing program 2: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) socketpair(0x1e, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 08:37:14 executing program 5: ptrace$cont(0x9, 0xffffffffffffffff, 0x4, 0x9) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x3, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) 08:37:14 executing program 3: socketpair(0x15, 0x1, 0x2000, &(0x7f00000003c0)) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000014c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000001580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x44044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:14 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:14 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000003c0)) 08:37:14 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=0x20) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x8001) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00004b", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf25110000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2e8, 0x2e8, 0xffffffff, 0x0, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000080), {[{{@ip={@multicast1, @remote, 0xff000000, 0x0, 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x64, @gre_key=0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0x0, 0xffffffff, 'wg0\x00', '\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x3c2, 0x74, 0x88, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4, 0x1000}, 0xc0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @private=0xa010102, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffff00, 0xff000000, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x3, 0x4}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @local, @rand_addr=0x64010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x0, 0x6, 0x3, 0x4], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 08:37:14 executing program 3: socketpair(0x29, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000000), 0x4) 08:37:14 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000140), 0xcc, 0x4800) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000001c0)) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x600, 0xffffff97, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001500), 0x0, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x400040}, 0xc, &(0x7f00000015c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000102500d8e774e49764b5277fc8e5011e980711e93f60daa990a784143b9b08c27838d7b352090731cfc23417bf8bcb4430e100147a83ef39c5383ac79c0cdb90c83be3e6b3b652d05d9c8b4693cf0e9e300110526ed040f19", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf25770000000c0099003f0000003f0000000500ee00060000000500ee0002000000"], 0x30}}, 0x0) 08:37:14 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000003c0)) 08:37:14 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:14 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f00000000c0)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001740)={'tunl0\x00', r8, 0x1, 0x700, 0x483, 0x401, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) getsockname$packet(r3, 0x0, &(0x7f0000000000)) 08:37:14 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0xffffffff) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x101502, 0x0) 08:37:14 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(0xffffffffffffffff, 0x0, 0x0) 08:37:14 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4400020}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r2, 0x200, 0x70bd28, 0x3, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) 08:37:14 executing program 0: socketpair(0x0, 0x2, 0x0, &(0x7f00000003c0)) 08:37:14 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x8001) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00004b", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf25110000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2e8, 0x2e8, 0xffffffff, 0x0, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000080), {[{{@ip={@multicast1, @remote, 0xff000000, 0x0, 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x64, @gre_key=0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0x0, 0xffffffff, 'wg0\x00', '\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x3c2, 0x74, 0x88, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4, 0x1000}, 0xc0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @private=0xa010102, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffff00, 0xff000000, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x3, 0x4}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @local, @rand_addr=0x64010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x0, 0x6, 0x3, 0x4], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 08:37:15 executing program 5: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000040)={0x47c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x460, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x91}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xcd}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe8}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}]}, {0x31c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x54}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x2f0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x8}, {0x2, 0x2}, {0x2}, {0x0, 0x8}, {0x2, 0x5}, {0x1}, {0x1, 0x8}, {0x0, 0xa}, {0x5, 0x8}, {0x4, 0xa}, {0x3, 0xa}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0xa}, {0x5, 0x3}, {0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x3, 0x1}, {0x7, 0x8}, {0x7, 0x8}, {0x0, 0x5}, {0x3}, {0x6}, {0x7}, {0x5, 0xa}, {0x2, 0xa}, {0x0, 0x6}, {0x0, 0x9}, {0x0, 0x2}, {0x7}, {0x7, 0x8}, {0x2, 0x4}, {0x1, 0x5}, {0x2, 0x3}, {0x6, 0x1}, {0x1, 0x3}, {0x1, 0x3}, {0x4, 0x7}, {0x2, 0x4}, {0x5, 0x7}, {0x0, 0x5}, {0x3, 0x8}, {0x4, 0x7}, {0x3}, {0x5, 0x3}, {0x2, 0x7}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x4, 0x9}, {0x7, 0x7}, {0x7, 0x4}, {0x0, 0x1}, {0x1, 0x2}, {0x7, 0x9}, {0x3, 0x4}, {0x1, 0x9}, {0x2, 0x8}, {0x5, 0x9}, {0x1, 0x3}, {0x1, 0x6}, {0x0, 0x9}, {0x1, 0x8}, {0x6, 0x6}, {0x6, 0x4}, {0x1, 0xa}, {0x5}, {0x2, 0x2}, {0x7, 0x3}, {0x4, 0x9}, {0x1, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0x2, 0x7}, {0x3, 0x3}, {0x5, 0x9}]}]}, @NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x30, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x6, 0x5, 0x7, 0xff80, 0x8000, 0x2, 0x2fa]}}, @NL80211_TXRATE_HT={0x16, 0x2, [{0x1, 0x5}, {0x2, 0x4}, {0x7, 0x1}, {0x0, 0x3}, {0x1, 0x9}, {0x6, 0x6}, {0x4, 0x7}, {0x5, 0x2}, {0x1}, {0x4, 0x3}, {0x7, 0x6}, {0x2, 0x2}, {0x5, 0x7}, {0x7, 0x2}, {0x1, 0x4}, {0x2, 0xa}, {0x0, 0x5}, {0x6, 0x7}]}]}, @NL80211_BAND_2GHZ={0xc0, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x14, 0x1, [0x4, 0x18, 0x48, 0x30, 0x30, 0x60, 0x60, 0x4, 0x12, 0x1, 0x6f, 0x1b, 0x5, 0x12, 0x4, 0x24]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xb, 0x4, 0x16, 0xb, 0x48, 0x60, 0x36, 0x22, 0x60, 0x4, 0xb, 0x4, 0x48, 0x18, 0x1, 0x4, 0x30, 0x30, 0x36, 0x5, 0x9]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6c, 0x16, 0x55, 0x6, 0x30, 0x16, 0x4, 0x16, 0x3, 0x12, 0x2, 0x48, 0x30, 0x24, 0x18, 0x60, 0x2, 0x12, 0xb, 0xb, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x0, 0x5}, {0x4, 0x10}, {0x5, 0x9}, {0x0, 0x4}, {0x7, 0x7}, {0x1, 0x6}, {0x6, 0x3}, {0x0, 0x9}, {0x4, 0x9}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0x5}, {0x1, 0x7}, {0x2, 0x3}, {0x2, 0x4}, {0x0, 0x9}, {0x4, 0x1}, {0x7, 0x8}, {0x1, 0x8}, {0x4, 0x6}, {0x0, 0x6}, {0x3, 0xa}, {0x4, 0x8}, {0x0, 0x3}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x9}, {0x1, 0x5}, {0x5, 0x1}, {0x7, 0xa}, {0x3, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x3}]}, @NL80211_TXRATE_HT={0x48, 0x2, [{0x5, 0x5}, {0x3, 0x9}, {0x7, 0xa}, {0x5}, {0x1}, {0x2, 0x7}, {0x7}, {0x7, 0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x2}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x1}, {0x0, 0x4}, {0x2, 0x8}, {0x2, 0x5}, {0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0x9}, {0x3, 0x7}, {0x3, 0x4}, {0x1, 0x6}, {0x7, 0x5}, {0x3, 0x2}, {0x5, 0xa}, {0x3, 0x3}, {0x4, 0x3}, {0x6, 0x3}, {0x4, 0x2}, {0x6, 0x4}, {0x3}, {0x5, 0x3}, {0x4, 0x8}, {0x1, 0x6}, {0x0, 0x3}, {0x1, 0x9}, {0x2, 0x4}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x5}, {0x7, 0x8}, {0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x0, 0x4}, {0x2, 0xa}, {0x3, 0x4}, {0x6, 0x3}, {0x2, 0x6}, {0x2}, {0x4, 0xa}, {0x5, 0x4}, {0x5, 0x13}, {0x5, 0x4}, {0x0, 0x3}, {0x7, 0x2}, {0x2, 0x6}, {0x2}, {0x0, 0x8}, {0x4, 0x4}, {0x1, 0x5}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x6, 0xa}]}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x49a, 0x401, 0x5, 0x9, 0x1, 0x1, 0x8, 0x8]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x1b, 0x3, 0x1b, 0x3, 0xb, 0x4, 0xc, 0x2, 0x6c, 0x36, 0x9, 0x3]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xffff, 0x6, 0xff, 0x0, 0x0, 0x20, 0x511c]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xffff, 0x800c, 0x7, 0xbe43, 0xff, 0x1ff, 0x7]}}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x0, 0x30, 0x37, 0x24, 0x9, 0xc, 0x36, 0x9, 0x12, 0x48, 0x16]}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3042, 0x98, 0x3ff, 0x0, 0x5f57, 0x1, 0x8]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x4}, {0x2, 0x6}, {0x0, 0x3}, {0x4, 0x4}, {0x6, 0x1}, {0x0, 0x8}, {0x0, 0x2}, {0x1, 0x2}, {0x6, 0x4}, {0x0, 0x5}, {0x0, 0x5}, {0x1, 0x1}, {0x7, 0x2}, {0x4, 0x1}, {0x5}, {0x1, 0x9}, {0x6, 0x6}, {0x5, 0x3}, {0x6, 0xa}, {0x3, 0x9}, {0x5, 0x3}, {0x4, 0x4}, {0x5, 0x8}, {0x5, 0xa}, {0x6, 0x1}, {0x0, 0x5}, {0x0, 0x7}, {0x5, 0x2}, {0x1, 0x1}, {0x4, 0x5}]}, @NL80211_TXRATE_LEGACY={0x16, 0x1, [0x6, 0x60, 0x24, 0x1, 0x16, 0x4, 0x24, 0x12, 0x4, 0x4, 0x30, 0x0, 0x46, 0x9, 0x4, 0x6, 0x2, 0x6c]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x2}, {0x3, 0x2}, {0x0, 0x2}, {0x4, 0x8}, {0x1}, {0x4, 0x2}, {0x6, 0x3}, {0x0, 0x2}, {0x1, 0x4}, {0x7, 0x4}, {0x4, 0x1}, {0x4, 0x6}, {0x1, 0x6}, {0x4, 0x8}, {0x3, 0x4}, {0x3, 0x5}, {0x1, 0x9}, {0x0, 0x7}, {0x6, 0x1}, {0x7, 0xa}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x6}, {0x0, 0x8}, {0x5, 0x6}, {0x7, 0x3}, {0x2, 0x2}, {0x3}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x7, 0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x3, 0x1}, {0x0, 0x8}, {0x0, 0x9}, {0x5, 0x7}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x3, 0xfff, 0xff, 0x43, 0x1, 0xdc27, 0xfd]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x36, 0x30, 0x6c]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x9, 0x3, 0x3, 0xfff9, 0x400, 0x0, 0x3]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x2, 0x12, 0x6, 0x5, 0x4, 0x4, 0xb, 0x0, 0x60, 0x9, 0x6c, 0x9, 0x3, 0x18, 0x12, 0x5, 0x1, 0x4e, 0x3, 0x1b, 0x3, 0x12, 0x48, 0x18, 0x9, 0xb, 0x4, 0x3, 0x6, 0x18]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x36, 0xc, 0xc, 0x12, 0x12, 0x24, 0x0, 0x1b, 0x16, 0x18, 0x48, 0x6, 0x5, 0x3, 0x36, 0x36, 0x0, 0x24, 0x4, 0x48, 0x12, 0x1, 0x5, 0x18, 0x0, 0x3, 0x5, 0x71, 0x12, 0x6, 0x30]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x97}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x50}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xeb}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x10000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0xac, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x90, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x8c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x2, 0xc, 0x60, 0x1, 0x24, 0x36, 0x1, 0x1, 0x1b, 0x36, 0x36, 0x9, 0x6]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x5, 0x8001, 0x5, 0x9bd8, 0x0, 0x6]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x2, 0x1}, {0x1}, {0x3, 0x2}, {0x2, 0x5}, {0x3}, {0x5, 0x2}, {0x0, 0x9}, {0x4, 0x9}, {0x2, 0xa}, {0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x1, 0x5}, {0x7, 0x4}, {0x1, 0xa}, {0x5, 0x2}, {0x1, 0x8}, {0x1, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x8}, {0x3, 0x4}, {0x0, 0x8}, {}, {0x0, 0x9}, {0x2, 0x1}, {0x2, 0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x9}, {0x3, 0x1}, {0x2, 0xa}, {0x2, 0x3}, {0x6, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x7, 0x7}, {0x1, 0x7}, {0x2, 0x1}, {0x5, 0x2}, {0x5, 0x2}, {0x1, 0x3}, {0x7}, {0x0, 0x4}, {0x0, 0x3}, {0x5, 0x9}, {0x2, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x81, 0x7fff, 0x1, 0x9, 0x6, 0x3, 0x6]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x47c}, 0x1, 0x0, 0x0, 0x1}, 0x8040) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:37:15 executing program 3: ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, &(0x7f00000000c0)={0x3}) socketpair(0x1, 0x1, 0x7, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)={0xffffffffffffffff, 0x40, 0x6, "4fbdb85441d634a7dc38bd79917c82d54cbf87017095f9176482d2d24b8e635caf530c02746b261b8d276ac216954e949edfe7cb22520c0d57e7a617483424b1ddd0cef0b0bd0b72ed1fe4fd03ef57d85da2aaddd3474b4179ea562cfd938082da4b808b95edacb024ff726591dc342fa7e1cbde8e692afff54ea8eeacba948a0db772340272cd381802c7f341a114fd0e00"}) accept(r0, &(0x7f0000000000)=@rc, &(0x7f0000000080)=0x80) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x8001) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00004b", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf25110000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2e8, 0x2e8, 0xffffffff, 0x0, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000080), {[{{@ip={@multicast1, @remote, 0xff000000, 0x0, 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x64, @gre_key=0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0x0, 0xffffffff, 'wg0\x00', '\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x3c2, 0x74, 0x88, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4, 0x1000}, 0xc0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @private=0xa010102, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffff00, 0xff000000, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x3, 0x4}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @local, @rand_addr=0x64010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x0, 0x6, 0x3, 0x4], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 08:37:15 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) ioctl$RTC_PIE_OFF(r0, 0x7006) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x8001) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00004b", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf25110000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2e8, 0x2e8, 0xffffffff, 0x0, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000080), {[{{@ip={@multicast1, @remote, 0xff000000, 0x0, 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x64, @gre_key=0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0x0, 0xffffffff, 'wg0\x00', '\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x3c2, 0x74, 0x88, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4, 0x1000}, 0xc0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @private=0xa010102, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffff00, 0xff000000, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x3, 0x4}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @local, @rand_addr=0x64010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x0, 0x6, 0x3, 0x4], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 08:37:15 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:37:15 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_AIE_ON(r1, 0x7001) 08:37:15 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x2c, r3, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}}, 0x8001) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00004b", @ANYRES16=r3, @ANYBLOB="080026bd7000fcdbdf25110000000500290001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x1b, 0x5, 0x468, 0x2e8, 0x2e8, 0xffffffff, 0x0, 0x3d0, 0x3d0, 0x3d0, 0xffffffff, 0x3d0, 0x3d0, 0x5, &(0x7f0000000080), {[{{@ip={@multicast1, @remote, 0xff000000, 0x0, 'erspan0\x00', 'gre0\x00', {}, {0xff}, 0x73, 0x3, 0x2}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x19, @ipv6=@local, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @icmp_id=0x64, @gre_key=0x7}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @loopback, 0x0, 0xffffffff, 'wg0\x00', '\x00', {}, {0xff}, 0x0, 0x2, 0x10}, 0x0, 0x130, 0x168, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@empty, [0xffffff00, 0xffffffff, 0xffffff00], @ipv6=@remote, [0x0, 0xffffffff, 0xffffffff], @ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00, 0xffffffff], @ipv4=@local, [0xffffffff, 0x0, 0xffffffff, 0xff000000], 0x3c2, 0x74, 0x88, 0x4e21, 0x4e24, 0x4e20, 0x4e20, 0x4, 0x1000}, 0xc0, 0x4}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x17, @local, @private=0xa010102, @icmp_id=0x68, @port=0x4e23}}}}, {{@ip={@rand_addr=0x64010100, @loopback, 0xffffff00, 0xff000000, 'veth0\x00', 'syzkaller0\x00', {}, {}, 0xc, 0x3, 0x4}, 0x0, 0x90, 0xc8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xe, @local, @rand_addr=0x64010102, @icmp_id=0x67, @icmp_id=0x64}}}}, {{@ip={@rand_addr=0x64010100, @private=0xa010100, 0xffffff00, 0xff, 'vlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x1, 0x1}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0xffffffffffffffff, [0x5, 0x0, 0x6, 0x3, 0x4], 0x3, 0x2}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x68, @icmp_id=0x67}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) 08:37:15 executing program 2: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="000000004a00e1f5cf6b9005dbba99183fe362fec332559f51fbaffa92c76a90f127d3fa5754da28890df47420f6b43e8e9e38bfab332637eeb189a858a638159bdbddebd00abb6ac9e8fe212bfcdb655f8e512ea0bbe3a8b0b023a44cfae12b1f0357bc091a", @ANYRES16=0x0, @ANYBLOB="00022bbd7000ffdbdf250600000005000d00000000001400200020010000000000000000000000000001140008007663616e300000000000000000000000060001000700000006001d0008000000"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) socketpair(0x1, 0xa, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) getsockname(r1, &(0x7f0000000280)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000300)=0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)={0x64, r4, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x200}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008054}, 0x50) r5 = accept(r1, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) getsockname$packet(r1, 0x0, &(0x7f0000000140)) 08:37:15 executing program 3: socketpair(0x3, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x800}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7fff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000001) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 08:37:15 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3ff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040040}, 0x10) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141040, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000140)={0x7, 0x5, 0x3, 0x7}) 08:37:15 executing program 0: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:15 executing program 3: socketpair(0x1f, 0x1, 0x0, &(0x7f00000003c0)) 08:37:15 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r4, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40001) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x40000) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$packet(0x11, 0xfd53c5ce0a24b50c, 0x300) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0xe01, 0x7, 0x7f, 0x3, {{0x3c, 0x4, 0x0, 0x3, 0xf0, 0x65, 0x0, 0xe0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0x64, 0x3, 0x2, [{@local, 0xfffffc00}, {@local}, {@multicast1, 0x9}]}, @rr={0x7, 0x17, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @lsrr={0x83, 0xb, 0x29, [@empty, @rand_addr=0x64010102]}, @end, @generic={0x44, 0x7, "d3ac6d075b"}, @rr={0x7, 0x17, 0xd9, [@private=0xa010100, @broadcast, @private=0xa010101, @local, @rand_addr=0x64010101]}, @rr={0x7, 0x1b, 0xca, [@remote, @empty, @empty, @broadcast, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xa8, 0x3, 0x0, [{@rand_addr=0x64010100, 0xfff}, {@broadcast, 0x6}, {@broadcast, 0x10000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10001}, {@multicast1, 0x4}]}, @noop, @cipso={0x86, 0x37, 0x2, [{0x0, 0x7, "bee72603fe"}, {0x4, 0x2}, {0x1, 0xb, "ad36bd5c816de6f8fd"}, {0x1, 0x8, "4edb7fa10c2d"}, {0x5, 0x3, "fa"}, {0x5, 0x12, "f0ad1cf5d54b386ff6c3b8d13857f895"}]}]}}}}}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000001c0)={r2, @local, @rand_addr=0x64010102}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:37:15 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) 08:37:15 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x1d, 0x6, 0x7fffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @private=0xa010102}, 0xc) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) 08:37:15 executing program 5: socketpair(0x22, 0x0, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x80000001, 0x4) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0xf0000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:37:15 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$vcsn(&(0x7f0000000000), 0xfff80001, 0x841) getsockname$packet(r2, 0x0, &(0x7f0000000140)) r3 = accept(r1, 0x0, &(0x7f0000000040)) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) 08:37:15 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) 08:37:15 executing program 3: socketpair(0x5, 0x800, 0x6f, &(0x7f0000000040)) 08:37:15 executing program 5: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000080), 0x5, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0xfffffffffffffe01, 0x240000) ioctl$BLKBSZGET(r1, 0x80081270, &(0x7f0000000140)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2a082, 0x0) ioctl$BLKBSZGET(r2, 0x80081270, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000080)=ANY=[@ANYBLOB="2e6c39ec1666fae56cc0ab49001ae09dce000000000000"]) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x10001, 0x0) 08:37:15 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x301000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000000040)) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 08:37:15 executing program 0: socketpair(0x1, 0x2, 0x0, 0x0) 08:37:15 executing program 3: socketpair(0x18, 0xe, 0x80000000, &(0x7f0000000000)) 08:37:15 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x20000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) 08:37:15 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:37:15 executing program 4: ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x3, 0x0, [{0x2000, 0xa3, &(0x7f0000000040)=""/163}, {0x2, 0x7d, &(0x7f0000000100)=""/125}, {0x18006, 0xd, &(0x7f0000000180)=""/13}]}) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000280)) 08:37:15 executing program 2: socketpair(0xa, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x2}) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)) 08:37:15 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 08:37:15 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f00000000c0)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001740)={'tunl0\x00', r8, 0x1, 0x700, 0x483, 0x401, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) getsockname$packet(r3, 0x0, &(0x7f0000000000)) 08:37:15 executing program 5: socketpair(0x1, 0xa, 0x0, 0x0) 08:37:15 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f00000000c0)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001740)={'tunl0\x00', r8, 0x1, 0x700, 0x483, 0x401, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) getsockname$packet(r3, 0x0, &(0x7f0000000000)) 08:37:15 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0xfffffffffffffffc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:15 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000080)={0x7, 0xc, [0xffff, 0x9, 0xff]}) 08:37:15 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x4000800) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="100026bd7000fddbdf250500000008003100810000000a000900aaaaaaaaaaaa000008003200ff01000008003a00570b000005002a000100000008003c000500000008002c0007000000"], 0x50}, 0x1, 0x0, 0x0, 0x24048041}, 0xc050) socketpair(0x10, 0x1, 0x0, 0x0) 08:37:15 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)) 08:37:15 executing program 2: socketpair(0x1f, 0x2, 0x3, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = accept(r0, &(0x7f0000000000)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) getsockname$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) 08:37:15 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r6, 0x80044941, &(0x7f00000000c0)) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001740)={'tunl0\x00', r8, 0x1, 0x700, 0x483, 0x401, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) getsockname$packet(r3, 0x0, &(0x7f0000000000)) 08:37:15 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000000)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0x80) 08:37:15 executing program 4: socketpair(0x23, 0x6, 0x23, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:15 executing program 1: socketpair(0x18, 0x80000, 0x3, &(0x7f0000000080)) 08:37:16 executing program 2: socketpair(0x6, 0x3, 0x10001, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:16 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4020000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x200}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x44}, 0x2400000d) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0)={0x11, 0x0, 0x0}, &(0x7f0000001700)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000001780)={'syztnl1\x00', &(0x7f0000001740)={'tunl0\x00', r7, 0x1, 0x700, 0x483, 0x401, {{0x6, 0x4, 0x0, 0x4, 0x18, 0x68, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@noop]}}}}}) 08:37:16 executing program 5: socketpair(0x29, 0x3, 0x7, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r0, @ANYBLOB="02002cbd7000fcdbdf250f00000008000300", @ANYRES32=r1, @ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 08:37:16 executing program 2: socketpair(0x1, 0x800, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socketpair(0x27, 0x1, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) 08:37:16 executing program 1: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000080)) 08:37:16 executing program 4: socketpair(0x0, 0x2c4d512514d77c30, 0x4000000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="ab2d3c08ffff"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$RTC_WIE_OFF(0xffffffffffffffff, 0x7010) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, &(0x7f0000000100)={0xe, 0x19, 0x0, 0x1f, 0x0, 0xefe, 0x5, 0xcf, 0xffffffffffffffff}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x1c042, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:16 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockname(r3, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000000c0)=0x80) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYBLOB="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"]) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) getsockname$packet(r0, &(0x7f00000016c0), &(0x7f0000001700)=0x14) 08:37:16 executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000040)={r0, 0x10001, 0x6, "9b1872e9b318daa8767009dda8a4724c7060db73d24d162dc58e9f1aade74bce0475ca6f492b1bf65016d789d4dacccb8087c51d515701e8f7eeec210ec5daefaaab55d33f474dee2dede86b820a564ef64d625ed861c19b6032e2dc2320717c6ee05a221c9d78f8f2aaa2443636efddda3cda52730a231d879d830bf61d403c1c493e884ac91ff14967f87c50aee25ade6a38410d063b091ca6f6002e80e4cceb9a4c5111440ba64a9aab4fe514b1225fd2150bac3d55f973f78b304964009d35b7a8ab0f1b292744d8f32c2d63b05a836ae7d58c212a3a1245d735f36f0b277d9bcdc8bd64cd2af3dd6b667704b2f0f7ff"}) 08:37:16 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000000), 0x4) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x1c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x2c, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8eaf605854d04dc72416962c5f"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "25bcb6373e"}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040}, 0x10) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{}, {}], &(0x7f0000000080)=0x10) 08:37:16 executing program 1: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000080)) 08:37:16 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vcsn(&(0x7f0000000000), 0x0, 0x8a42) socketpair(0xb, 0x80000, 0x6, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:16 executing program 3: r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x8, 0x8000) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x1a, 0x39, 0xa, 0x1b, 0x4, 0x81, 0x1, 0x5, 0x1}}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) 08:37:16 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000080)) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x13, 0x9, 0xffffffff, 0x4, 0x91, r1, 0xbf, '\x00', 0x0, r3, 0x3, 0x4, 0x1}, 0x40) 08:37:16 executing program 1: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000080)) 08:37:16 executing program 4: setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000040)=[{{0x0, 0x0, 0x1}, {0x4}}, {{0x4, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1}}, {{0x1}, {0x3, 0x0, 0x0, 0x1}}, {{0x4, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x2}, {0x3, 0x0, 0x1}}], 0x40) getsockname(0xffffffffffffffff, &(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private0}, &(0x7f0000000100)=0x80) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:16 executing program 1: socketpair(0x18, 0x0, 0x3, &(0x7f0000000080)) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 2: socketpair(0x28, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000840)={r4, @local, @broadcast}, 0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000440)={0x80000001, 0x3, 0xffff, 0x6, &(0x7f0000000380)=[{}, {}, {}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r4, 0x80, 0x8001, 0x8, 0x6, {{0x24, 0x4, 0x3, 0x5, 0x90, 0x67, 0x0, 0xfc, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @ssrr={0x89, 0x23, 0xfe, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010102, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x3a, 0x0, [{0x5, 0xc, "4e7fa6cb00c03e283f66"}, {0x0, 0xe, "c66b0110a282befdb04ec610"}, {0x2, 0x10, "b4ad955de2092d6e6c6bf9938d0e"}, {0x6, 0xa, "6eb40c1515524c87"}]}, @lsrr={0x83, 0x1b, 0x87, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast2, @multicast1]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000080)={'gre0\x00', 0x0, 0x20, 0x7, 0xd6f3, 0x7, {{0x3c, 0x4, 0x3, 0x4, 0xf0, 0x67, 0x0, 0x20, 0x4, 0x0, @multicast1, @loopback, {[@generic={0x94, 0xa, "aef8ee4588d87624"}, @ssrr={0x89, 0x13, 0x3a, [@dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @cipso={0x86, 0x75, 0x2, [{0x2, 0xa, "9cfe4ec08d9697f8"}, {0x1, 0xd, "8d8f4ba5476e8fb0db5097"}, {0x6, 0x8, "c5f4f6b8b1f7"}, {0x0, 0x6, "cf61c5cc"}, {0x0, 0xb, "d90c99b13a897a7a2c"}, {0x2, 0xf, "2a3ceab7e4b21e67743aea51ac"}, {0x0, 0xf, "4812bae1226a029148edf7bc39"}, {0x0, 0xe, "0e633b1b6e1fd2ce3620a689"}, {0x5, 0x6, "ad72885e"}, {0x2, 0xd, "6532bb5a7c30a82d601220"}]}, @noop, @ssrr={0x89, 0x2b, 0x6b, [@initdev={0xac, 0x1e, 0x40, 0x0}, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0x64010101, @multicast2, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x19}, @loopback]}, @cipso={0x86, 0x1c, 0x0, [{0x1, 0xb, "fb72fb52f7225329ac"}, {0x7, 0xb, "bb06b30f6e7af85a5e"}]}]}}}}}) r6 = openat$md(0xffffffffffffff9c, &(0x7f00000004c0), 0x111000, 0x0) ioctl$BLKREPORTZONE(r6, 0xc0101282, &(0x7f0000000500)={0x3, 0x2, 0x0, [{0x0, 0x6, 0x8, 0x47, 0x6, 0x0, 0x5}, {0x2, 0x4a3, 0x400, 0x2, 0xff, 0x1, 0xff}]}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000200)={'gre0\x00', r5, 0x40, 0x10, 0x4, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0x6, 0x2f, 0x0, @private=0xa010102, @private=0xa010101}}}}) 08:37:16 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x9c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xfd}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}], @NL80211_ATTR_HE_OBSS_PD={0x34, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x6}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x7}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0xc}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xe}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0xb}]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x1}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x5, 0x5, 0x1, 0x6, 0x4, 0x8000, 0x401]}}]}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) 08:37:16 executing program 5: getitimer(0x2, &(0x7f0000000000)) socketpair(0x1, 0x0, 0x0, 0x0) 08:37:16 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f0000000080)) 08:37:16 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x100081) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000020}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x20}]}, 0x1c}}, 0xc055) openat$md(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0) 08:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x20000800) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:16 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)={0xa, 0x0, [{0x10000, 0x3f, &(0x7f00000000c0)=""/63}, {0x3000, 0x9, &(0x7f0000000100)=""/9}, {0x1000, 0x6f, &(0x7f0000000140)=""/111}, {0x6000, 0x42, &(0x7f00000001c0)=""/66}, {0x6000, 0xea, &(0x7f0000000400)=""/234}, {0x0, 0x59, &(0x7f0000000240)=""/89}, {0x6002, 0x1b, &(0x7f0000000300)=""/27}, {0x4000, 0x45, &(0x7f0000000340)=""/69}, {0x6000, 0xa9, &(0x7f0000000500)=""/169}, {0x1000, 0xd5, &(0x7f00000005c0)=""/213}]}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x2, 0x5}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x14be01a3fa0cab75}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000800}, 0x44040) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x18, 0x30, 0x8, 0x5, 0x9, 0x1, 0x2, 0x79}) 08:37:16 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f0000000080)) 08:37:16 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0x7ff}) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 1: socketpair(0x18, 0x0, 0x0, &(0x7f0000000080)) 08:37:16 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x844}, 0x4805) 08:37:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x625, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffff9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000001}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:16 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x400040, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000080)=0x10000) 08:37:16 executing program 3: r0 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x200, 0x0, 0x4, 0x4, 0x28000, 0x8}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:16 executing program 1: socketpair(0x18, 0x0, 0x3, 0x0) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 2: socketpair(0x1, 0x1, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f00000000c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000040), 0x4) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000080)=0x1, 0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:16 executing program 3: socketpair(0x1d, 0x1, 0x0, &(0x7f00000003c0)) 08:37:16 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) r1 = accept(r0, 0x0, &(0x7f0000000080)) accept(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_open_dev$rtc(&(0x7f0000000040), 0xffffffffffff8000, 0x408000) ioctl$RTC_UIE_OFF(r2, 0x7004) 08:37:16 executing program 4: socketpair(0x1, 0x4, 0x3, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:16 executing program 1: r0 = getpgid(0xffffffffffffffff) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x200, 0x0, 0x4, 0x4, 0x28000, 0x8}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r4, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 4: socketpair(0x1e, 0x3, 0x80, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000040)=0xffffffff) 08:37:16 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 2: syz_open_dev$rtc(&(0x7f0000000080), 0x1, 0x12180) socketpair(0x1f, 0x0, 0x40, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000040)) 08:37:16 executing program 5: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x5) [ 634.684462] can: request_module (can-proto-0) failed. 08:37:16 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) ioctl$BLKRRPART(r1, 0x125f, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:16 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) accept(r0, &(0x7f0000000000)=@l2, &(0x7f0000000080)=0x80) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, &(0x7f00000000c0)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) recvmsg$can_raw(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/11, 0xb}, {&(0x7f0000000140)=""/232, 0xe8}, {&(0x7f0000000240)=""/16, 0x10}], 0x3, &(0x7f00000002c0)=""/38, 0x26}, 0x40000142) [ 634.727470] can: request_module (can-proto-0) failed. 08:37:16 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x10840, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000001580)={0x6, 0x0, [{0x4, 0x1000, &(0x7f0000000400)=""/4096}, {0x10000, 0x39, &(0x7f0000001680)=""/57}, {0x5000, 0xcc, &(0x7f0000000280)=""/204}, {0xd000, 0x2d, &(0x7f0000000380)=""/45}, {0x100000, 0xa9, &(0x7f0000001400)=""/169}, {0x2000, 0xb2, &(0x7f00000014c0)=""/178}]}) ioctl$DRM_IOCTL_SG_ALLOC(r0, 0xc0106438, &(0x7f0000000100)={0x9}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r5, 0x80044941, &(0x7f00000000c0)) 08:37:16 executing program 5: ioctl$RTC_PLL_GET(0xffffffffffffffff, 0x80207011, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x20, 0x0) 08:37:17 executing program 4: ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0x9, 0x8b}) socketpair(0x4, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000180)=@sco, &(0x7f0000000200)=0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000001c0)={0x48, r4, 0x800, 0x70bd27, 0x25cfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000050}, 0x8000) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, r4, 0x100, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x80) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r4, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x81}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x6}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x60044800}, 0x1) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000540)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r4, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xdb1aeeee18c9aa6c}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x1f}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040005}, 0x20004000) sendmsg$NL80211_CMD_PROBE_CLIENT(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000140)) socketpair(0x22, 0x6, 0x3, &(0x7f0000000080)) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7, 0x202) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x880000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0xf97dab6d113ade6c, 0x70bd2c, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", ""]}, 0x44}, 0x1, 0x0, 0x0, 0x24008005}, 0x10000000) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106, 0x9}}, 0x20) 08:37:17 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x5) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000001800)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r3, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000100), 0x10882, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r2, 0x400442c8, &(0x7f0000000140)={r0, 0xb191, 0x3, "bbca137be7516d435eee514814f9ef32e3d63c66883ce0ab07722743b042f864cbe87142b5e11b1fe30aa36b6bf14b5ee9dbd0face8008906328f68bbbd33dbeff18c1a425e9b3885aeb81baa7cee0826b6bdbfc62b0ae8c1b7c8555e69c1f32ef69020d"}) accept(r0, &(0x7f0000000040)=@nl, &(0x7f00000000c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 08:37:17 executing program 2: socketpair(0x1, 0x6, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x5) 08:37:17 executing program 5: ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000017c0), 0x2, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) accept(r1, &(0x7f0000000000)=@rc={0x1f, @fixed}, &(0x7f0000000080)=0x80) 08:37:17 executing program 5: ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 3: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) accept(r0, 0x0, &(0x7f0000000000)) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) ioctl$BLKFRASET(r0, 0x1264, &(0x7f00000000c0)=0x5) 08:37:17 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x15, 0x5, 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25770000000500ee00de0000000500ee00ff0000000800ef00903c6597"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990002000000290000000400280009000a00e1b67390860000000500080004000000600050800800030001ac0f000c00088004000200040002000500020005000000040005000800030005ac0f00200008800400010004000200040001000400010004000200040002000400010011000100dfeefc4766dac043041480ed8d000000080037000100000005000800030000000800090005ac0f00040028000800090005ac0f00"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250600000008003c000180040005002d00000000000500290001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) 08:37:17 executing program 3: socketpair(0x2a, 0x1, 0x0, &(0x7f00000003c0)) 08:37:17 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgid(0x0) sched_rr_get_interval(r2, &(0x7f0000000080)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socket$inet6_udplite(0xa, 0x2, 0x88) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = accept(0xffffffffffffffff, &(0x7f0000000180)=@isdn, &(0x7f0000000200)=0x80) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="98000221", @ANYRES16=0x0, @ANYBLOB="000129bd7000ffdbdf255d0000000c009900030000001c0000001000a6800a00060008021100000000000800a500010000000800a500000000000800a500010000001c00a6800a00060008021100000100000a00060008021100000100000800a500010000000800a500000000001c00a6800a000600ffffffffffff00000a000600ffffffffffff00000800a50000000000"], 0x98}, 0x1, 0x0, 0x0, 0x2004000}, 0x8045) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r4 = syz_open_dev$rtc(&(0x7f0000000480), 0x3, 0x100) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000004c0)) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}]}, 0x34}}, 0x0) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getpgid(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dedafc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44094}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:17 executing program 5: socketpair(0x1d, 0x1, 0x6, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x30000001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe24}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9a}]}, 0x4c}}, 0x40040c4) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x60}}}}, [@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004089}, 0x884) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) [ 635.501832] can: request_module (can-proto-6) failed. 08:37:17 executing program 2: socketpair(0x20, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xe00400}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x54}}, 0x40) 08:37:17 executing program 4: socketpair(0x1, 0x4, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$rtc(&(0x7f0000000040), 0x4, 0xa4080) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x0, 0x4) 08:37:17 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:17 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x80c41, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x5, 0x428241) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE(r2, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r3, 0xc01064c1, &(0x7f0000000140)={r4, 0x1}) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x0, {0x27, 0x33, 0x1, 0x14, 0xb, 0x180000, 0x4, 0x30, 0xffffffffffffffff}}) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r6, 0x80247009, &(0x7f00000002c0)) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f0000000280)={0x0, 0x1}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD(r2, 0xc01064c1, &(0x7f0000000200)={r5, 0x0, r7}) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'tunl0\x00', 0x4}, 0x18) [ 635.558337] can: request_module (can-proto-6) failed. 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 4: socketpair(0x27, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r1, 0x125f, 0x0) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000040)=0xb4c5) 08:37:17 executing program 1: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x7, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) ioctl$RTC_PIE_OFF(0xffffffffffffffff, 0x7006) 08:37:17 executing program 0: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:17 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='hsw_stream_data_format\x00'}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:17 executing program 3: socketpair(0x1d, 0x80000, 0x9, &(0x7f00000004c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) recvmsg$can_raw(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/108, 0x6c}, {&(0x7f0000000080)=""/225, 0xe1}, {&(0x7f0000000180)=""/107, 0x6b}, {&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/206, 0xce}], 0x5, &(0x7f0000000400)=""/94, 0x5e}, 0x100) 08:37:17 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x404240, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:17 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) 08:37:17 executing program 5: socketpair(0x5, 0x1, 0x0, 0x0) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 3: socketpair(0x1, 0x6, 0x0, &(0x7f00000003c0)) ioctl$RTC_WKALM_RD(0xffffffffffffffff, 0x80287010, &(0x7f0000000000)) 08:37:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:18 executing program 4: socketpair(0x2, 0x3, 0x8, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004091}, 0x2000) 08:37:18 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x68, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x2b}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6b}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x40}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40810}, 0x40000) syz_open_dev$amidi(&(0x7f0000000180), 0x7, 0x111882) 08:37:18 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:18 executing program 2: socketpair(0x1, 0x0, 0x9, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:18 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x2c, 0x2, 0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:18 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000001c0)) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x10000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000180), 0x5, 0x440240) write$6lowpan_control(r1, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0xc010) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x28, 0x1, 0x0, 0x0) 08:37:18 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) socketpair(0x5, 0x800, 0x1, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r2, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x24044050) 08:37:18 executing program 2: socketpair(0x1, 0xa, 0x3, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x7, 0x4) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) 08:37:18 executing program 5: ioctl$BLKRAGET(0xffffffffffffffff, 0x1263, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040), 0x180, 0x0) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000080)=0x2) 08:37:18 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000840)={r3, @local, @broadcast}, 0xc) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8000}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x64}}, 0x20044010) 08:37:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x7d, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:18 executing program 4: socketpair(0x1, 0x5, 0x4, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xefb7}]}, 0x58}, 0x1, 0x0, 0x0, 0x4800}, 0x4001) 08:37:18 executing program 3: ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) socketpair(0x27, 0x1, 0x0, &(0x7f00000003c0)) 08:37:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:37:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 5: ioctl$DRM_IOCTL_AGP_FREE(0xffffffffffffffff, 0x40206435, &(0x7f0000000040)) socketpair(0x1, 0x4, 0xff7ffff6, 0x0) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 08:37:18 executing program 4: socketpair(0x1, 0xa, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'ipvlan0\x00', 0x2}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socket$packet(0x11, 0x2, 0x300) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5ab8d9bc23ef12b}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6ab572fd}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004089}, 0x40000) 08:37:18 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) 08:37:18 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 08:37:18 executing program 5: ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) socketpair(0x0, 0x1, 0x0, 0x0) 08:37:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x3) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'syztnl1\x00', r2, 0x8000, 0x0, 0xff, 0xfffffffc, {{0x18, 0x4, 0x2, 0x1, 0x60, 0x66, 0x0, 0x0, 0x29, 0x0, @loopback, @multicast2, {[@noop, @rr={0x7, 0x13, 0x12, [@loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @generic={0x94, 0x7, "ddbb74145b"}, @generic={0x83, 0x4, 'U#'}, @timestamp_addr={0x44, 0x2c, 0x2d, 0x1, 0x2, [{@remote, 0x200}, {@rand_addr=0x64010100, 0x8001}, {@private=0xa010100, 0x200}, {@multicast2, 0x6a43}, {@private=0xa010100, 0x1ff}]}]}}}}}) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1b, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x9, 0xfffffffffffffffc, 0x4}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x9, 0x4, 0xfffffffffffffff4, 0xffffffffffffffff}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x6e, &(0x7f0000000180)=""/110, 0x40f00, 0x8, '\x00', r3, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x2, 0xa1}, 0x10, 0xffffffffffffffff, r4}, 0x78) syz_open_dev$vcsn(&(0x7f0000000200), 0x7, 0x200000) socketpair(0x15, 0x5, 0x7fff, &(0x7f0000000100)) 08:37:18 executing program 1: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) 08:37:18 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) socketpair(0x27, 0x0, 0x2, &(0x7f0000000000)) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x80000001, 0x4) 08:37:18 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000280)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) socketpair(0xa, 0x6, 0x0, &(0x7f00000003c0)) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xb38) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) getsockname(r1, &(0x7f0000000000)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) accept(r2, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) accept(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) 08:37:18 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, &(0x7f00000000c0)) 08:37:18 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0x44) getgroups(0x1, &(0x7f0000000080)=[0x0]) r1 = syz_open_dev$vcsn(&(0x7f00000000c0), 0x2, 0x20100) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @broadcast, @rand_addr=0x64010100}, 0xc) 08:37:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:37:18 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x3) 08:37:18 executing program 3: socket$can_raw(0x1d, 0x3, 0x1) socketpair(0x6, 0xf38970596a05b18c, 0x10496, &(0x7f0000000040)) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:18 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x3) 08:37:18 executing program 5: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000300)) socketpair(0x1, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="94000000", @ANYRES16=r3, @ANYBLOB="000327bd7000fedbdf250c0000000800090005ac0f0012000a000790c5a03f3ce1378e243a3b38a000006400016898d2a4c950800c00088004000100040002000400060008000700000000000900000800000000000000000400050005000200020000000900040009f4800b9c000000050002000300000011000100d31f74c9e2a91a0b93f02bfbbf0000000800030005ac0f00568e258612f2a6325cf89ed478b8aaf2eb5cae90455b1d9d198a0b"], 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x10008000) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r4, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x401}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0xa801}, 0x48851) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 08:37:18 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:18 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x3) 08:37:18 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = syz_open_dev$rtc(&(0x7f0000000100), 0x5, 0x400080) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f0000000180)) r5 = socket$l2tp6(0xa, 0x2, 0x73) accept(r5, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000300)=ANY=[@ANYRES32=r5, @ANYRESOCT]) 08:37:18 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000040)={'gretap0\x00', r1, 0x10, 0x1, 0x0, 0x6, {{0x2f, 0x4, 0x1, 0x1e, 0xbc, 0x66, 0x0, 0x0, 0x29, 0x0, @multicast2, @multicast2, {[@ssrr={0x89, 0x2b, 0xcb, [@empty, @local, @multicast1, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @rand_addr=0x64010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @timestamp_addr={0x44, 0x14, 0x8f, 0x1, 0x0, [{@dev={0xac, 0x14, 0x14, 0xe}, 0x8}, {@multicast1}]}, @timestamp={0x44, 0x18, 0x75, 0x0, 0x0, [0x80000000, 0x800, 0x912c, 0x60, 0x2]}, @ra={0x94, 0x4, 0x1}, @generic={0x94, 0x5, "b48570"}, @generic={0x7, 0xc, "068ad9c64faa2d3500fa"}, @timestamp_prespec={0x44, 0x3c, 0x5a, 0x3, 0x1, [{@broadcast, 0x10001}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@rand_addr=0x64010101, 0x50}, {@rand_addr=0x64010102, 0x6}, {@broadcast, 0x5}, {@loopback, 0x7}, {@multicast1, 0x1}]}]}}}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000840)={r4, @local, @broadcast}, 0xc) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', 0x0, 0x10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x17, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x21}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x98, &(0x7f0000000200)=""/152, 0x41000, 0x15, '\x00', r4, 0x5c8c3f228bf7258c, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x4, 0x100, 0x9}, 0x10, 0x0, r5}, 0x78) 08:37:19 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cubic\x00', 0x6) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x339641) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:19 executing program 3: socketpair(0x1, 0x5, 0x3, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xfffffffffffffda1, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="85bdca3d6c226641190100002200"], 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r3, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x40000c0) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x16}}}}, [@NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x15}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004090}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000800)={'batadv0\x00', 0x0}) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000000840)={r8, @local, @broadcast}, 0xc) r9 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000680)={&(0x7f0000000640)='./file0\x00', 0x0, 0x8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0xc, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, [@map={0x18, 0x7, 0x1, 0x0, r5}, @jmp={0x5, 0x0, 0x7, 0x1, 0x6, 0x8, 0x1}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @ldst={0x1, 0x1, 0x0, 0x0, 0x9, 0x30, 0x4}, @map={0x18, 0x9, 0x1, 0x0, 0x1}, @ldst={0x1, 0x1, 0x3, 0x5, 0x9, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f0000000540)='syzkaller\x00', 0x9, 0x5, &(0x7f0000000580)=""/5, 0x41100, 0x8, '\x00', r8, 0xb, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xb, 0x9, 0xffffff13}, 0x10, 0x0, r9}, 0x78) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) 08:37:19 executing program 2: openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) socketpair(0x2c, 0x5, 0x3, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000100), &(0x7f0000000180)=0x4) 08:37:19 executing program 5: socketpair(0x1, 0x1, 0x200, 0x0) 08:37:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) socket$bt_bnep(0x1f, 0x3, 0x4) 08:37:19 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180), 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x111}}, 0x20) socketpair(0x1, 0x80000, 0x0, &(0x7f00000003c0)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0), 0x18c, 0x3}}, 0x20) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x138, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9f0, 0x5a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x88804}, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000000)={0x1, 0x2, 0x7f, @local, 'veth1\x00'}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:19 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800014}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xd5f}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8080}, 0x4080) 08:37:19 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000000)={0x8, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) sched_rr_get_interval(0xffffffffffffffff, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000009c0)) socketpair(0x1, 0x1, 0x1000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8001, 0x402) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1fa8) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fff, 0x1) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) syz_open_dev$vcsn(&(0x7f00000000c0), 0x3f, 0x3c1042) syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x121000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xc826) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x271) 08:37:19 executing program 3: socketpair(0x1e, 0x1, 0x40000000, &(0x7f00000003c0)) socketpair(0x1e, 0x5, 0x472, &(0x7f0000000000)) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x7, 0x1, {{0xb, 0x4, 0x3, 0xb, 0x2c, 0x65, 0x0, 0x9, 0x2f, 0x0, @local, @rand_addr=0x64010101, {[@ssrr={0x89, 0x17, 0xc4, [@private=0xa010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @private=0xa010101]}]}}}}}) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 4: socketpair(0x29, 0x3, 0x3f000, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = accept(r0, &(0x7f00000000c0)=@l2, &(0x7f0000000040)=0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) 08:37:19 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syzkaller1\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'wg0\x00'}) 08:37:19 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000000)={r1, 0xfff, 0x7, "542526c7e6c140bb4e2f69e2caaab709dfe4f4bf02644aed01f0f4940a"}) 08:37:19 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) accept(r1, 0x0, &(0x7f0000000000)) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r5 = socket$inet(0x2, 0xa, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:19 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000040)) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000000)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x349000, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0x16c2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$BLKRAGET(r3, 0x1263, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x7, &(0x7f00000003c0)) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 5: socketpair(0x1, 0x1, 0x0, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000080)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9600836ca0d6d5ba}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="c54bef24000000", @ANYRES16=r1, @ANYBLOB="00082cbd7000fcdbdf25a5da22bc060000006b551416d473732c69e9979340d410f69a6353e073fdde4163"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 08:37:19 executing program 2: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x40}}, 0x40810) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000140)) 08:37:19 executing program 0: ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 08:37:19 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 637.320079] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 2: socketpair(0xf, 0x3, 0x4, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:19 executing program 5: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@nfc_llcp, &(0x7f0000000080)=0x80) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x538, 0xe8, 0x390, 0x0, 0x1b0, 0x1b0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x6, 0x5f, @dev={0xac, 0x14, 0x14, 0x2e}, 0x4e22}}}, {{@ip={@loopback, @broadcast, 0xff, 0xff, 'wg2\x00', 'erspan0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x44}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@icmp={{0x28}, {0xb, "6b9f"}}, @common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x4, 0x6, 0x6, 0x8, 0x9, 0x9829, 0x9, 0x78, 0x40}, {0xffffffffffffffff}}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x43}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x10001, 0xfffffffa, @rand_addr=0x64010101, 0x4e24}}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x40}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x9, 0x2}}]}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x598) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:19 executing program 4: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:19 executing program 3: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1d7d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004041) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="0038aaf6258ed1d39e1fe030e03f2be067000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x88}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x548, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x14f, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x4, 0x4, @device_b, 0x7f, @broadcast, 0x6, 0x10000, @broadcast, 0x3f}}, @perr={0x84, 0x122, {0x1, 0x12, [@ext={{}, @broadcast, 0x10000, @device_a, 0x9}, @ext={{}, @broadcast, 0xf1a7, @device_a, 0x8}, @not_ext={{}, @device_a, 0x1, "", 0x2f}, @not_ext={{}, @device_a, 0xf07, "", 0x21}, @not_ext={{}, @device_b, 0x10, "", 0x26}, @not_ext={{}, @device_b, 0x2, "", 0x18}, @not_ext={{}, @device_b, 0x4, "", 0x23}, @ext={{}, @broadcast, 0xfffffc00, @broadcast, 0x41}, @not_ext={{}, @device_a, 0xb7, "", 0x8}, @not_ext={{}, @broadcast, 0xa2c, "", 0x35}, @ext={{}, @device_a, 0x8, @device_a, 0xe}, @not_ext={{}, @broadcast, 0x4, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0x2a}, @ext={{}, @device_b, 0x4, @broadcast, 0x2d}, @not_ext={{}, @device_b, 0x60000, "", 0x31}, @ext={{}, @device_a, 0x925, @broadcast, 0x6}, @ext={{}, @broadcast, 0xe1f, @broadcast, 0x12}, @ext={{}, @device_b, 0x101, @device_b, 0x2c}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1bb, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @broadcast, @random="f8c50d471f11", {0x0, 0x783}}, 0x400, @random=0x800, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0x3f, 0x2, 0x40, 0x83d}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x7, 0x9}}, @void, [{0xdd, 0xd0, "c0a01f3552a0177b746085defeb54e953b1e95dab72db3e163845d3a83554f43181df1718a4cf22e5256a3c63f0c8b0b7489a02a783f844ec84a65b987b3219035fd2cc7b950123fc133efd25d0399749d11c3840507076260adb5e0c59a1ad5d37d5491014b35f84c064fc3d7862734fe2e86a7bd5664c5365500e4eb53df2e78bc628939012b2f95119147dc9a70e04066cb3cbaa9b0059f7dbbe99429c1f23d2c2b729f069d851cddc887659957f7c61e51ccec708de604a9b4a23337969e873c900da348c8070663c8770d2478d4"}, {0xdd, 0x79, "ca786f3ff891381569bb50232594b7f0354d2214d5bd7c47e9b24f5b627b6c381a12f508ba283efcfbd23b943985e3ff430de9127967d6e1a09e832eec0fb938aa14a884d44f556fd82c534a90ec10b58f90e2f5b14c821212f4203e1a37c143e2358d871b4bc51b8aac9e6674deaa83a78ff1ad6b6c0a4fad"}, {0xdd, 0x25, "ccdda2c9905d69f32f34cb724ac246f687c42b8bb47334e6d49a0ba4da6e976db9f5b4ae34"}]}}, @NL80211_ATTR_BEACON_TAIL={0x91, 0xf, [@ibss={0x6, 0x2, 0x7fff}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x80, 0x44}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x80, 0x1f, @device_b, 0x5, 0x10001, 0x9e35}}, @measure_req={0x26, 0x6a, {0x7b, 0x7, 0x4, "c7b8bd3eff0f8f7d5eeafd0431baea3d10699754dd43d99132c4afb070a6698f109701f8cf6e461ca330f4e7f810f4f0e500ea9e6bb0e9d04dc45bd8ef39dad9b5a352311cf1dcca45a66c05191ba456d785c4547ebb171057fa7dabe4986f26f793ad4920d2e5"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "c7575afcb92ed6718df7a2430bcfbbfa02802608ad5c448ae669343acd7e846689477b29f532cd23cc8d18443b34983a84f89c8095ec85024e8fcf2b538fb2a949daa98824634acce995297d4628ff54431bd490ffb05a961dc91e7e0ffff6d2c8863c80cbd14391d3bf5a5eab4830454d3d3dc4b384b625908d30c172447fd290596cb30271ef26e6328bcbc08d1e3977989cbf644dadc3b903bb06846f812a3c6545440934dd418f7071c93544140479d3a16f22a40a254d6f56"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4d, 0x3, "e23a9e6b5bd1fb3c7c8b523bee5213361222dca9383387a50d94ebceebeb4314784d569eb46f33e54154cb0520f4552da868c54bbac4118b61475567de8f00ff8cf865e4403e57a403"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10001}]}, 0x548}, 0x1, 0x0, 0x0, 0x22040150}, 0x1) [ 637.407828] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:19 executing program 0: ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 08:37:19 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 2: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xc, 0xff, 0x58, 0x5, 0x2000, r1, 0x1, '\x00', 0x0, r2, 0x4, 0x2, 0x3}, 0x40) getsockname$packet(r0, 0x0, &(0x7f0000000140)) 08:37:19 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)) 08:37:19 executing program 5: r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) getsockname(r0, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @private}}, &(0x7f0000000000)=0x80) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:19 executing program 0: ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 08:37:19 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 4: socketpair(0x26, 0x4, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24008004) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xc, 0x0, 0x8, 0x0, 0x0, r3, 0xfffff000, '\x00', r2, r3}, 0x40) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000004c0), 0x408080, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x8, &(0x7f0000000300)=@raw=[@call={0x85, 0x0, 0x0, 0x88}, @call={0x85, 0x0, 0x0, 0x97}, @call={0x85, 0x0, 0x0, 0x99}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x2}, @map={0x18, 0x3, 0x1, 0x0, r4}], &(0x7f0000000340)='syzkaller\x00', 0x3, 0x55, &(0x7f0000000400)=""/85, 0x41100, 0x18, '\x00', r2, 0x0, r5, 0x8, &(0x7f0000000380)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000480)={0x4, 0x8, 0x8}, 0x10, 0x1787f, r6}, 0x78) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'ah\x00'}, &(0x7f0000000080)=0x1e) ioctl$DRM_IOCTL_AGP_UNBIND(0xffffffffffffffff, 0x40106437, &(0x7f00000000c0)={0x0, 0x6}) 08:37:19 executing program 2: socketpair(0x6, 0x800, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) setsockopt$CAN_RAW_JOIN_FILTERS(r1, 0x65, 0x6, &(0x7f0000000000), 0x4) getsockname$packet(r0, 0x0, &(0x7f0000000140)) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f0000000040)={0x6}) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}, @NL80211_ATTR_PBSS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004044}, 0x40000) 08:37:19 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:19 executing program 2: sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1d7d}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20001000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r4, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004041) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="0038aaf6258ed1d39e1fe030e03f2be067000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000"], 0x14}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r3, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x88}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x40}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000008c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f0000000940)={0x548, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7e}}}}, [@beacon=[@NL80211_ATTR_IE_PROBE_RESP={0x14f, 0x7f, [@prep={0x83, 0x25, @ext={{}, 0x4, 0x4, @device_b, 0x7f, @broadcast, 0x6, 0x10000, @broadcast, 0x3f}}, @perr={0x84, 0x122, {0x1, 0x12, [@ext={{}, @broadcast, 0x10000, @device_a, 0x9}, @ext={{}, @broadcast, 0xf1a7, @device_a, 0x8}, @not_ext={{}, @device_a, 0x1, "", 0x2f}, @not_ext={{}, @device_a, 0xf07, "", 0x21}, @not_ext={{}, @device_b, 0x10, "", 0x26}, @not_ext={{}, @device_b, 0x2, "", 0x18}, @not_ext={{}, @device_b, 0x4, "", 0x23}, @ext={{}, @broadcast, 0xfffffc00, @broadcast, 0x41}, @not_ext={{}, @device_a, 0xb7, "", 0x8}, @not_ext={{}, @broadcast, 0xa2c, "", 0x35}, @ext={{}, @device_a, 0x8, @device_a, 0xe}, @not_ext={{}, @broadcast, 0x4, "", 0x4}, @ext={{}, @device_a, 0x4, @device_b, 0x2a}, @ext={{}, @device_b, 0x4, @broadcast, 0x2d}, @not_ext={{}, @device_b, 0x60000, "", 0x31}, @ext={{}, @device_a, 0x925, @broadcast, 0x6}, @ext={{}, @broadcast, 0xe1f, @broadcast, 0x12}, @ext={{}, @device_b, 0x101, @device_b, 0x2c}]}}]}, @NL80211_ATTR_BEACON_HEAD={0x1bb, 0xe, {@wo_ht={{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0xff}, @broadcast, @broadcast, @random="f8c50d471f11", {0x0, 0x783}}, 0x400, @random=0x800, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x8}, @val={0x4, 0x6, {0x3f, 0x2, 0x40, 0x83d}}, @void, @void, @void, @val={0x2a, 0x1, {0x1, 0x0, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x7, 0x9}}, @void, [{0xdd, 0xd0, "c0a01f3552a0177b746085defeb54e953b1e95dab72db3e163845d3a83554f43181df1718a4cf22e5256a3c63f0c8b0b7489a02a783f844ec84a65b987b3219035fd2cc7b950123fc133efd25d0399749d11c3840507076260adb5e0c59a1ad5d37d5491014b35f84c064fc3d7862734fe2e86a7bd5664c5365500e4eb53df2e78bc628939012b2f95119147dc9a70e04066cb3cbaa9b0059f7dbbe99429c1f23d2c2b729f069d851cddc887659957f7c61e51ccec708de604a9b4a23337969e873c900da348c8070663c8770d2478d4"}, {0xdd, 0x79, "ca786f3ff891381569bb50232594b7f0354d2214d5bd7c47e9b24f5b627b6c381a12f508ba283efcfbd23b943985e3ff430de9127967d6e1a09e832eec0fb938aa14a884d44f556fd82c534a90ec10b58f90e2f5b14c821212f4203e1a37c143e2358d871b4bc51b8aac9e6674deaa83a78ff1ad6b6c0a4fad"}, {0xdd, 0x25, "ccdda2c9905d69f32f34cb724ac246f687c42b8bb47334e6d49a0ba4da6e976db9f5b4ae34"}]}}, @NL80211_ATTR_BEACON_TAIL={0x91, 0xf, [@ibss={0x6, 0x2, 0x7fff}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x20, 0x80, 0x44}}, @rann={0x7e, 0x15, {{0x0, 0x4}, 0x80, 0x1f, @device_b, 0x5, 0x10001, 0x9e35}}, @measure_req={0x26, 0x6a, {0x7b, 0x7, 0x4, "c7b8bd3eff0f8f7d5eeafd0431baea3d10699754dd43d99132c4afb070a6698f109701f8cf6e461ca330f4e7f810f4f0e500ea9e6bb0e9d04dc45bd8ef39dad9b5a352311cf1dcca45a66c05191ba456d785c4547ebb171057fa7dabe4986f26f793ad4920d2e5"}}]}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xbf, 0x2, "c7575afcb92ed6718df7a2430bcfbbfa02802608ad5c448ae669343acd7e846689477b29f532cd23cc8d18443b34983a84f89c8095ec85024e8fcf2b538fb2a949daa98824634acce995297d4628ff54431bd490ffb05a961dc91e7e0ffff6d2c8863c80cbd14391d3bf5a5eab4830454d3d3dc4b384b625908d30c172447fd290596cb30271ef26e6328bcbc08d1e3977989cbf644dadc3b903bb06846f812a3c6545440934dd418f7071c93544140479d3a16f22a40a254d6f56"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4d, 0x3, "e23a9e6b5bd1fb3c7c8b523bee5213361222dca9383387a50d94ebceebeb4314784d569eb46f33e54154cb0520f4552da868c54bbac4118b61475567de8f00ff8cf865e4403e57a403"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_PROBE_RESP={0xc, 0x7f, [@gcr_ga={0xbd, 0x6}]}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_HE_BSS_COLOR={0x14, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xf}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32b}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x10001}]}, 0x548}, 0x1, 0x0, 0x0, 0x22040150}, 0x1) 08:37:19 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:19 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:19 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) socketpair(0x25, 0x6, 0x0, &(0x7f0000000000)) 08:37:19 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:19 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r5 = socket$inet(0x2, 0xa, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:20 executing program 0: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, 0x0) 08:37:20 executing program 1: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:37:20 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:20 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x9d4, r1, 0x114, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3bc, 0x11d, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x8}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x6}, {0x7, 0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x9}, {0x2, 0x4}, {0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x5}, {}, {0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x92e, 0x9, 0x0, 0x7, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x8, 0x2, 0xfc01, 0x4, 0x23, 0xa0fb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x4c38, 0x200, 0xfff, 0x8001, 0x3ff, 0xc49a]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x5, 0x0, 0x9, 0x1, 0xc, 0x9, 0x60, 0x1b, 0x2b, 0x6c, 0x26, 0x6c, 0x30, 0x2, 0x36, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x1b, 0x3, 0x60, 0x6c, 0x6, 0x9, 0x60, 0x1, 0x5, 0x16, 0x36, 0x60, 0xc, 0x5, 0xb, 0x16, 0x0, 0x6c, 0x1, 0xb, 0x6c, 0x5, 0x6c, 0x30, 0x6c, 0x2, 0x9]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x798, 0x1ff, 0x80, 0x3, 0x1, 0x6, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x9, 0x16, 0x18, 0x36, 0x30, 0x48, 0x3, 0x3, 0x12, 0x5, 0x5, 0x36, 0x1b, 0x2, 0x6c, 0x9, 0x9, 0x6, 0x4, 0xb, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x7fff, 0x4, 0xfffd, 0x400, 0xffe1, 0x4, 0xc3b]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x60, 0x9, 0x12, 0x9, 0x1b, 0x12, 0x60, 0xb, 0x30, 0x24, 0x4, 0x48, 0x0, 0x16, 0x48, 0x16, 0x5, 0x24, 0x50, 0x1b, 0x30, 0x12, 0x24, 0x1e, 0x36]}]}, @NL80211_BAND_6GHZ={0x120, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x1}, {0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x4}, {0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x7}, {0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x1}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3e1f, 0x3, 0x6, 0x5, 0xae, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x9, 0xc, 0x12, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x9, 0x16, 0x3b474dc8e598bd93, 0xb, 0x18, 0x4, 0x60, 0x1b, 0x6, 0x18, 0x30, 0x6, 0x11, 0x60, 0x16, 0x2d, 0xc, 0xb, 0x16, 0x30, 0x4641446f98d8018b, 0x1, 0x0, 0x16, 0x1b, 0x0, 0xb]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0xb, 0x48, 0xc, 0x6, 0x9, 0xb, 0x1, 0x30, 0x16, 0x36, 0xb, 0xb, 0x6c, 0xc, 0x18, 0x36, 0xb, 0xc, 0x16, 0x43, 0x12, 0x60, 0x3, 0x3, 0x48, 0x44, 0x5, 0x5, 0x0, 0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x1d}, {0x5, 0xa}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0xa}, {0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3847, 0x40, 0x7, 0x2, 0x1ff, 0x0, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x5, 0x4, 0x9, 0x5, 0x6000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x81, 0xa12f, 0x8, 0x800, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0xa}, {0x3, 0x6}, {}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x16, 0x9, 0x1, 0xb, 0x0, 0x4, 0x3, 0x3, 0x24, 0xc, 0x2, 0x12, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x3f6f33a199a4a940, 0x48, 0x1b, 0x4, 0x60, 0x18, 0x48, 0x16, 0x6, 0x9, 0xc, 0xb, 0x1, 0x6c, 0x6, 0xb, 0x1, 0x2, 0x12, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb71b, 0x20, 0x20, 0x7ff, 0x5a, 0xff5d, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x4}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x8}, {0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {}, {0x5, 0x9}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x4}, {0x1, 0x5}, {0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x6}, {0x1, 0x3}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x24, 0x3, 0x48, 0x1b]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1b, 0x9, 0x3, 0x4, 0x18, 0x5, 0x18, 0x6c, 0x30, 0x18, 0x1, 0x12, 0xb, 0x36, 0x9, 0x6, 0x2, 0x1, 0x36, 0xc, 0x2, 0x24, 0x9, 0x16, 0x1b, 0x0, 0x0, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x9, 0x40, 0xfffa, 0x3, 0x40, 0x8]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x4, 0x5}, {0x2}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x4}, {0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x9}, {0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x18, 0x6c, 0x12, 0x36, 0xb, 0x9, 0x16, 0x16, 0x6, 0x1, 0x16, 0x3, 0x4, 0x9, 0x1b, 0x30, 0x3, 0x12, 0x1, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe08a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}]}]}, @NL80211_ATTR_TID_CONFIG={0x270, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x61c, 0x1c5, 0xffc1, 0x7248, 0xfffd, 0x0, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x6, 0x2, 0x30, 0x5, 0x12, 0x36, 0x9, 0x5, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x4}, {0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x15}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x2}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x3}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x9}, {0x4}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {}, {0x1, 0x5}, {0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x24, 0x30, 0x3, 0x9, 0x9, 0x48, 0x1b, 0x36, 0x24, 0x6, 0x3, 0x48, 0x33, 0xc, 0x6c, 0x6, 0x48, 0x16, 0x1, 0x24, 0x2, 0x9, 0x18, 0x5, 0x3, 0x6, 0x60, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0x1}, {0x7, 0x2}, {}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x1d}, {0x0, 0xa}, {0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3e7, 0x1f, 0xcdd, 0x3f, 0xae, 0x200, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}]}]}, @NL80211_ATTR_TID_CONFIG={0xd4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socketpair(0x22, 0x3, 0x2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$rtc(&(0x7f00000000c0), 0x7fffffff, 0x84400) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000e40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000380)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) socketpair(0x10, 0x3, 0x698, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000280)={0x7, 0x4, 0x4, @broadcast, 'batadv_slave_0\x00'}) 08:37:20 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) syz_open_dev$rtc(&(0x7f0000000080), 0xe0, 0x0) syz_open_dev$rtc(&(0x7f00000000c0), 0x80000001, 0x100) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x400000, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x84800, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000000)) socketpair(0x27, 0x3, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) [ 637.892942] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, &(0x7f0000000080)) 08:37:20 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) socket$packet(0x11, 0x2, 0x300) 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r5 = socket$inet(0x2, 0xa, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 08:37:20 executing program 5: socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 08:37:20 executing program 4: accept(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, &(0x7f0000000180)=0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_tracing={0x1a, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x10001}, [@generic={0x80, 0x5, 0x8, 0xfffc, 0x712a}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0xfeef, 0x50, &(0x7f0000000200)=""/80, 0x41000, 0x2, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x6, 0x20, 0x3}, 0x10, 0x21519}, 0x78) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f00000001c0)={0x9, 0x8, 0x20, @empty, 'veth0_to_team\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:20 executing program 0: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(0xffffffffffffffff, 0x80044941, 0x0) 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) r5 = socket$inet(0x2, 0xa, 0x7) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 638.079270] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 3: socketpair(0x5a, 0x1, 0x0, &(0x7f00000003c0)) r0 = socket$l2tp6(0xa, 0x2, 0x73) accept(r0, 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x531c00, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 08:37:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 08:37:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x4) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f00000000c0)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) socket$pppl2tp(0x18, 0x1, 0x1) 08:37:20 executing program 0: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x9d4, r1, 0x114, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x3bc, 0x11d, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xffff}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xe4, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x80, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3b, 0x2, [{0x6, 0x5}, {0x0, 0x8}, {0x5, 0x6}, {0x6, 0x5}, {0x3, 0x3}, {0x6, 0x3}, {0x4, 0x5}, {0x5}, {0x5, 0x6}, {0x7, 0x9}, {0x6, 0x1}, {0x6, 0x2}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x5}, {0x4, 0x7}, {0x7, 0x8}, {0x4}, {0x3}, {0x4, 0x1}, {0x0, 0x5}, {0x1, 0x8}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x5}, {0x0, 0x6}, {0x2, 0x4}, {0x6}, {0x7, 0x5}, {0x1}, {0x6, 0x1}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0x9}, {0x2, 0x7}, {0x4, 0x8}, {0x3, 0x2}, {0x7, 0x9}, {0x6, 0x9}, {0x2, 0x2}, {0x1, 0x1}, {0x1, 0x4}, {0x3, 0x2}, {0x5, 0xa}, {0x5}, {0x0, 0x3}, {0x7, 0x2}, {0x0, 0x2}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x1}, {0x0, 0x6}, {0x0, 0x4}, {0x7, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x0, 0x9}, {0x2, 0x4}, {0x4}, {0x5, 0x4}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x9}, {0x1}, {0x0, 0x7}, {0x2, 0x7}, {0x5, 0x1}, {0x0, 0x5}, {0x2, 0x1}, {0x5, 0x6}, {0x7, 0x8}, {0x6}, {0x0, 0x8}, {0x1, 0x9}, {0x1, 0x1}, {0x1, 0xa}, {0x3}, {0x6, 0xa}, {0x4, 0x9}, {0x0, 0x7}, {0x0, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x5}, {0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x1}, {0x3, 0x3}, {0x7, 0x6}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x2}, {0x2, 0x7}, {0x5, 0x9}, {0x1, 0x5}, {0x2, 0x7}, {0x2, 0x9}, {0x1, 0x2}, {0x1, 0x1}, {0x2, 0x2}, {0x4, 0x5}, {}, {0x1}, {0x7, 0x6}, {0x6, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x800, 0x92e, 0x9, 0x0, 0x7, 0x6, 0x6]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x400, 0x8, 0x2, 0xfc01, 0x4, 0x23, 0xa0fb]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0x4c38, 0x200, 0xfff, 0x8001, 0x3ff, 0xc49a]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x3, 0x5, 0x0, 0x9, 0x1, 0xc, 0x9, 0x60, 0x1b, 0x2b, 0x6c, 0x26, 0x6c, 0x30, 0x2, 0x36, 0x6c]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x208, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xe4}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x24, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x20, 0x1, [0x48, 0x1b, 0x3, 0x60, 0x6c, 0x6, 0x9, 0x60, 0x1, 0x5, 0x16, 0x36, 0x60, 0xc, 0x5, 0xb, 0x16, 0x0, 0x6c, 0x1, 0xb, 0x6c, 0x5, 0x6c, 0x30, 0x6c, 0x2, 0x9]}]}, @NL80211_BAND_5GHZ={0x54, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x798, 0x1ff, 0x80, 0x3, 0x1, 0x6, 0x2, 0x4]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x3, 0x9, 0x16, 0x18, 0x36, 0x30, 0x48, 0x3, 0x3, 0x12, 0x5, 0x5, 0x36, 0x1b, 0x2, 0x6c, 0x9, 0x9, 0x6, 0x4, 0xb, 0x4]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1f, 0x7fff, 0x4, 0xfffd, 0x400, 0xffe1, 0x4, 0xc3b]}}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x7, 0x7}, {0x2, 0x7}, {0x5, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x0, 0x3}, {0x6, 0x4}, {0x1, 0x1}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0x60, 0x9, 0x12, 0x9, 0x1b, 0x12, 0x60, 0xb, 0x30, 0x24, 0x4, 0x48, 0x0, 0x16, 0x48, 0x16, 0x5, 0x24, 0x50, 0x1b, 0x30, 0x12, 0x24, 0x1e, 0x36]}]}, @NL80211_BAND_6GHZ={0x120, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x6, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x6, 0x1}, {0x2}, {0x0, 0x9}, {0x3, 0x2}, {0x1, 0x9}, {0x5, 0x4}, {0x4, 0x7}, {0x5, 0x7}, {0x7, 0xa}, {0x4, 0x4}, {0x1}, {0x5, 0x5}, {0x7, 0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x3, 0x2}, {0x0, 0x2}, {0x0, 0x5}, {0x1, 0x1}, {0x4, 0x6}, {0x0, 0x7}, {0x7}, {0x7, 0x1}, {0x3, 0x6}, {0x5, 0x9}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x7}, {0x0, 0xa}, {0x6, 0x5}, {0x4, 0x2}, {0x1}, {0x3, 0x2}, {0x5, 0x4}, {0x0, 0x8}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x2}, {0x2, 0x8}, {0x5, 0xa}, {0x7, 0x1}, {0x6, 0xa}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x3e1f, 0x3, 0x6, 0x5, 0xae, 0x3, 0x3]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x9, 0xc, 0x12, 0x6c]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x16, 0x9, 0x16, 0x3b474dc8e598bd93, 0xb, 0x18, 0x4, 0x60, 0x1b, 0x6, 0x18, 0x30, 0x6, 0x11, 0x60, 0x16, 0x2d, 0xc, 0xb, 0x16, 0x30, 0x4641446f98d8018b, 0x1, 0x0, 0x16, 0x1b, 0x0, 0xb]}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1b, 0xb, 0x48, 0xc, 0x6, 0x9, 0xb, 0x1, 0x30, 0x16, 0x36, 0xb, 0xb, 0x6c, 0xc, 0x18, 0x36, 0xb, 0xc, 0x16, 0x43, 0x12, 0x60, 0x3, 0x3, 0x48, 0x44, 0x5, 0x5, 0x0, 0x9, 0xc]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7]}}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x3, 0x3}, {0x0, 0x6}, {0x2, 0x3}, {0x3, 0x2}, {0x4}, {0x6, 0x6}, {0x7, 0x5}, {0x2, 0x8}, {0x5}, {0x2, 0x5}, {0x6, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x7, 0x4}, {0x6, 0x8}, {0x6, 0x6}, {0x3}, {0x1, 0x5}, {0x4}, {0x1, 0x4}, {0x5, 0x3}, {0x6, 0x7}, {0x6, 0x9}, {0x1}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0xa}, {0x7, 0x1d}, {0x5, 0xa}, {0x7, 0x4}, {0x7, 0xa}, {0x1, 0x8}, {0x1, 0xa}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x0, 0x5}, {0x7, 0x4}, {0x2, 0x9}, {0x6, 0xa}, {0x7, 0x7}, {0x7, 0x7}, {0x7, 0x3}, {0x4, 0x3}, {0x5, 0x8}, {0x5, 0x4}, {0x6, 0x2}, {0x2, 0x9}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x7}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x6, 0xa}, {0x4}, {0x7, 0x6}, {0x4, 0x1}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x3}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0x6}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0xa}, {0x7, 0x3}, {0x3, 0x8}, {0x7, 0x9}, {0x1, 0x5}, {}, {0x4, 0xa}, {0x5, 0x3}, {0x1, 0x4}, {0x4, 0x7}, {0x7, 0x2}, {0x2, 0x5}, {0x3}, {0x0, 0x2}]}, @NL80211_TXRATE_GI={0x5}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x88}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf7}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x80000000}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}]}]}, @NL80211_ATTR_TID_CONFIG={0x260, 0x11d, 0x0, 0x1, [{0x234, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x220, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3847, 0x40, 0x7, 0x2, 0x1ff, 0x0, 0x6, 0x5]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x8001, 0x5, 0x4, 0x9, 0x5, 0x6000]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_60GHZ={0x100, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x1, 0x81, 0xa12f, 0x8, 0x800, 0x3, 0x5]}}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x7, 0xa}, {0x3, 0x6}, {}, {0x2, 0x1}, {0x2, 0x8}, {0x7, 0x1}, {0x2, 0x5}, {0x4, 0x8}, {0x6, 0x3}, {0x3, 0xa}, {0x6, 0x1}, {0x7, 0x7}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x2}, {0x7, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x7}, {0x1, 0x7}, {0x4, 0x1}, {0x4, 0xa}, {0x4}, {0x7, 0x4}, {0x6, 0xa}, {0x6, 0x3}, {0x1, 0x7}, {0x7, 0x1}, {0x7, 0x5}, {0x4, 0x6}, {0x0, 0x7}, {0x0, 0x8}, {0x7, 0x8}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x1}, {0x4, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x5, 0xa}, {0x6, 0x5}, {0x7, 0x8}, {0x2, 0x4}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x1}]}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x6, 0x7}, {0x1}, {0x6, 0x8}, {0x1, 0x4}, {0x6, 0x1}, {0x2, 0x7}, {0x6, 0x6}, {0x1}, {0x2, 0x5}, {0x2, 0x5}, {0x3}, {0x7, 0x6}, {0x6, 0x6}, {0x6, 0x7}, {0x4, 0x9}, {0x3, 0x8}, {0x3, 0x8}, {0x0, 0x3}, {0x4, 0x5}, {0x5, 0x7}, {0x3, 0x7}, {0x1, 0x3}, {0x0, 0x5}, {0x1, 0xa}, {0x5, 0x2}, {0x7, 0x5}, {0x6, 0x5}, {0x2, 0xa}, {0x3, 0xa}, {0x1, 0x5}, {0x7, 0x5}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x24, 0x16, 0x9, 0x1, 0xb, 0x0, 0x4, 0x3, 0x3, 0x24, 0xc, 0x2, 0x12, 0x1b, 0x36]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x5, 0x3f6f33a199a4a940, 0x48, 0x1b, 0x4, 0x60, 0x18, 0x48, 0x16, 0x6, 0x9, 0xc, 0xb, 0x1, 0x6c, 0x6, 0xb, 0x1, 0x2, 0x12, 0x1, 0x36, 0x30]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb71b, 0x20, 0x20, 0x7ff, 0x5a, 0xff5d, 0x9, 0x5]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x4}, {0x4, 0x7}, {0x3, 0x8}, {0x7, 0x9}, {0x5, 0x8}, {0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x1}, {0x6, 0x3}, {0x7, 0x9}, {0x4, 0x6}, {0x5, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x5, 0x9}, {0x5, 0x1}, {0x7, 0x1}, {0x1, 0x3}, {0x4}, {0x0, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x3, 0xa}, {0x3, 0xa}, {0x3, 0x8}, {0x5, 0x7}, {0x7, 0x7}, {0x6, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {}, {0x5, 0x9}, {0x4, 0x3}, {0x2, 0x7}, {0x3, 0x2}, {0x4}, {0x1, 0x5}, {0x1}, {0x7, 0xa}, {0x4, 0xa}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x2, 0xa}, {0x2, 0x8}, {0x6}, {0x1, 0x3}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x9, 0x1, [0x48, 0x24, 0x3, 0x48, 0x1b]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xb, 0xc, 0x1b, 0x9, 0x3, 0x4, 0x18, 0x5, 0x18, 0x6c, 0x30, 0x18, 0x1, 0x12, 0xb, 0x36, 0x9, 0x6, 0x2, 0x1, 0x36, 0xc, 0x2, 0x24, 0x9, 0x16, 0x1b, 0x0, 0x0, 0x48]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x4, 0x9, 0x40, 0xfffa, 0x3, 0x40, 0x8]}}]}, @NL80211_BAND_6GHZ={0x88, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x1}, {0x5, 0x4}, {0x4, 0x3}, {0x6, 0x4}, {0x3, 0x6}, {0x4, 0x3}, {0x6, 0x2}, {}, {0x3, 0x5}, {0x1, 0x5}, {0x0, 0x3}, {0x6, 0x7}, {0x3, 0x3}, {0x1, 0x3}, {0x1, 0xa}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x2}, {0x3, 0xa}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x3}, {0x0, 0x9}, {0x3}, {0x1, 0xa}, {0x7, 0x3}, {0x7, 0xa}, {0x7, 0x1}, {0x3, 0x1}, {0x3, 0x4}, {0x2, 0x6}, {0x4, 0x3}, {0x1, 0x7}, {0x5, 0x2}, {0x7, 0x9}, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x9}, {0x1}, {0x2, 0x1}, {0x3, 0x4}, {0x5, 0x5}, {0x7, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x6, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x4, 0x5}, {0x2}, {0x2, 0x8}, {0x4, 0x5}, {0x2, 0x1}, {0x4}, {0x6}, {0x1, 0x4}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x5}, {0x5, 0x6}, {0x7, 0x1}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x7}]}, @NL80211_TXRATE_HT={0x1d, 0x2, [{0x4, 0x4}, {0x2, 0x5}, {0x2, 0x7}, {0x5, 0x3}, {0x1, 0x6}, {0x1, 0x7}, {0x4, 0x4}, {0x5, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x6, 0x1}, {0x4, 0x9}, {0x3}, {0x1, 0xa}, {0x5, 0x9}, {0x4, 0x9}, {0x3, 0x5}, {0x5, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x6, 0x4}, {0x5, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x18, 0x6c, 0x12, 0x36, 0xb, 0x9, 0x16, 0x16, 0x6, 0x1, 0x16, 0x3, 0x4, 0x9, 0x1b, 0x30, 0x3, 0x12, 0x1, 0x9]}]}]}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xe08a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xf6}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf4}]}]}, @NL80211_ATTR_TID_CONFIG={0x270, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8c}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x82}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x5c}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3f}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe7}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x61c, 0x1c5, 0xffc1, 0x7248, 0xfffd, 0x0, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x84}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9f}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x4}, {0x180, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xf, 0x1, [0x16, 0x6, 0x2, 0x30, 0x5, 0x12, 0x36, 0x9, 0x5, 0x12, 0x24]}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x3, 0x4}, {0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x1, 0x2}, {0x3, 0xa}, {0x4, 0x6}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x2}, {0x5, 0x5}, {0x6, 0x8}, {0x6, 0x1}, {0x7, 0xa}, {0x6, 0x6}, {0x6, 0x9}, {0x3, 0x3}, {0x3, 0x8}, {0x3, 0x6}, {0x3, 0x8}, {0x3, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x3, 0x2}, {0x0, 0xa}, {0x0, 0x1}, {0x1, 0x9}, {0x7, 0x5}, {0x1, 0x8}, {0x7, 0x9}, {0x5, 0x2}, {0x2, 0x6}, {0x1, 0x1}, {0x6, 0x6}, {0x0, 0x4}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x3}, {0x7, 0x7}, {0x1, 0x7}, {0x4}, {0x0, 0x2}, {0x6, 0x7}, {0x7, 0x15}, {0x4, 0x8}, {0x3, 0x7}, {0x0, 0xa}, {0x3, 0x9}, {0x4, 0x8}, {0x1}, {0x2, 0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x2, 0x8}, {0x3, 0x1}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x2}, {0x5}, {0x1, 0x4}, {0x0, 0x5}, {0x5, 0x4}]}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x26, 0x2, [{0x1, 0x2}, {0x6, 0x4}, {0x3, 0x3}, {0x0, 0xa}, {0x0, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x4, 0x7}, {0x4, 0x8}, {0x7, 0x4}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x7}, {0x1, 0x7}, {0x3, 0x1}, {0x4, 0xa}, {0x4, 0x9}, {0x4, 0x3}, {0x4, 0xa}, {0x5, 0x7}, {0x2, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x2}, {0x0, 0x5}, {0x1, 0x7}, {0x1, 0x8}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x7}, {0x5}, {0x4, 0x6}, {0x0, 0x8}, {0x3}]}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x1, 0x9}, {0x4}, {0x7, 0x3}, {0x6, 0x5}, {0x1, 0x4}, {0x3, 0x5}, {0x5, 0x8}, {0x2, 0x1}, {0x2, 0x4}, {0x1, 0x5}, {0x4, 0x7}, {0x2, 0x5}, {0x0, 0x5}, {0x2, 0x6}, {0x4, 0x5}, {0x6, 0x5}, {0x3, 0x5}, {0x3, 0x7}, {0x3, 0xa}, {0x5}, {0x1, 0x8}, {0x7, 0x5}, {0x2, 0x4}, {0x7, 0x5}, {0x0, 0x4}, {}, {0x3, 0x3}, {0x5, 0x7}, {0x2, 0x6}, {0x5, 0x8}, {0x6, 0x3}, {0x0, 0x4}, {0x7, 0x4}, {0x4, 0x4}, {0x4, 0x4}]}]}, @NL80211_BAND_5GHZ={0xb4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2b, 0x2, [{0x0, 0x3}, {0x6, 0x6}, {0x4, 0xa}, {0x7, 0x9}, {0x4, 0x7}, {0x0, 0xa}, {0x4, 0x7}, {}, {0x1, 0x5}, {0x6}, {0x7, 0x3}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x7}, {0x1, 0x3}, {0x4, 0x1}, {0x4, 0xa}, {0x7, 0x4}, {0x0, 0x4}, {0x1, 0x2}, {0x3, 0x9}, {0x7, 0x3}, {0x0, 0x6}, {0x2, 0x1}, {0x4, 0x3}, {0x3, 0x5}, {0x7, 0x8}, {0x6, 0x9}, {0x2, 0x1}, {0x7, 0x4}, {0x2, 0x8}, {0x1, 0x8}, {0x2, 0x5}, {0x0, 0x7}, {0x1, 0x4}, {0x1, 0x8}, {0x0, 0x5}, {0x4, 0x9}, {0x1, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x48, 0x24, 0x30, 0x3, 0x9, 0x9, 0x48, 0x1b, 0x36, 0x24, 0x6, 0x3, 0x48, 0x33, 0xc, 0x6c, 0x6, 0x48, 0x16, 0x1, 0x24, 0x2, 0x9, 0x18, 0x5, 0x3, 0x6, 0x60, 0x5]}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x2, 0x6}, {0x5, 0xa}, {0x0, 0x8}, {0x6, 0x6}, {0x7, 0x8}, {0x1, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x6, 0xa}, {0x1, 0x6}, {0x3, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x4, 0xa}, {0x6, 0x5}, {0x5, 0xa}, {0x3, 0x8}, {0x2}, {0x0, 0x1}, {0x7, 0x2}, {}, {0x5, 0x5}, {0x0, 0x3}, {0x4, 0x6}, {0x2, 0x1}, {0x3, 0x4}, {0x7, 0x1}, {0x4, 0x3}, {0x5, 0x1}, {0x6, 0x6}, {0x5, 0x7}, {0x2, 0x5}, {}, {0x1, 0x9}, {0x1, 0x7}, {0x6, 0x6}, {0x5, 0x9}, {0x3, 0x1d}, {0x0, 0xa}, {0x7}, {0x0, 0x5}, {0x7, 0x3}, {0x5, 0x4}, {0x2, 0x5}, {0x7, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x3e7, 0x1f, 0xcdd, 0x3f, 0xae, 0x200, 0x20]}}]}]}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}]}]}, @NL80211_ATTR_TID_CONFIG={0xd4, 0x11d, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x91}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1f}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x7}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x51}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x60, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x101}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x17}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x46}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8a}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x9d4}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socketpair(0x22, 0x3, 0x2000, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_open_dev$rtc(&(0x7f00000000c0), 0x7fffffff, 0x84400) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000e40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000380)={0x2c, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) socketpair(0x10, 0x3, 0x698, &(0x7f0000000100)) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x10000}) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r5, 0x800442d3, &(0x7f0000000280)={0x7, 0x4, 0x4, @broadcast, 'batadv_slave_0\x00'}) 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) socket$inet(0x2, 0xa, 0x7) 08:37:20 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) 08:37:20 executing program 3: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 638.217432] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 4: socketpair(0xb, 0x1, 0xfffffffc, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) sendmsg$can_raw(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=@canfd={{0x0, 0x1, 0x1, 0x1}, 0xb, 0x0, 0x0, 0x0, "e632ad28d579cb5e15134b148eae21a2bbeed5d87ffee47859ef2a6feed073599d000d7803509be364c0e1e6041be085a077c928fce41476a604a69fa78780f5"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000880) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:20 executing program 0: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x40}}, 0x40810) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) getsockname$packet(r2, 0x0, &(0x7f0000000140)) 08:37:20 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000000), 0x40c0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 1: r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) [ 638.357971] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r2 = socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$l2tp6(0xa, 0x2, 0x73) accept(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r3, 0x0, 0x0) accept(r2, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x80) 08:37:20 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x5, 0x1000, 0x5, 0x0, r0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r3, 0x800, 0x70bd2d, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 08:37:20 executing program 3: socketpair(0x2b, 0x80001, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r1 = socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$l2tp6(0xa, 0x2, 0x73) accept(r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r2, 0x0, 0x0) accept(r1, 0x0, 0x0) [ 638.515169] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xcaa}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x20}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x20008081) 08:37:20 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x308b}]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x1) 08:37:20 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0xc2300, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_PIE_OFF(r0, 0x7006) 08:37:20 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f00000003c0)) 08:37:20 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r1, 0x0, 0x0) 08:37:20 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x21, 0x2, 0xfffffffa, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7f532c1aa6ed234d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) [ 638.653691] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:20 executing program 5: socketpair(0x1, 0x5, 0x0, 0x0) 08:37:20 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:20 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:11 0', 0x1b) socketpair(0x1f, 0x1, 0x9, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x2, 0xfffffffe}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) socket$can_raw(0x1d, 0x3, 0x1) 08:37:20 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:21 executing program 5: socketpair(0x1, 0x5, 0x0, 0x0) 08:37:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 638.761371] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:21 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:21 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x21, 0x2, 0xfffffffa, &(0x7f0000000080)) openat$ion(0xffffffffffffff9c, &(0x7f0000000040), 0x401, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f0000000200)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x7f532c1aa6ed234d}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004014}, 0x0) 08:37:21 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:21 executing program 3: socketpair(0x1, 0xa, 0x0, &(0x7f00000003c0)) 08:37:21 executing program 5: socketpair(0x1, 0x5, 0x0, 0x0) 08:37:21 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 638.897462] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:21 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="90000004", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fcdbdf250c0000000c000a0086c033612c16804111000700ae4f2d3a7adeac321dd45a04e10000000c0050800600040010d20000090007008c83ba59a40000001100070011d9ba34d31aa36237fa5c06da00000013000a00a7c84a094f5a510bc8bcf66e75036e0005000800050000001100070066cf4242337a22d57e1d329353000000"], 0x90}, 0x1, 0x0, 0x0, 0x20044044}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:21 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r1, 0x0, 0x0) 08:37:21 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xa76a}) 08:37:21 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r1, 0x0, 0x0) 08:37:21 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:21 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 639.080676] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:21 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r1, 0x0, 0x0) 08:37:21 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:21 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 639.124000] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:21 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:21 executing program 5: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:21 executing program 1: socketpair(0x8, 0x2, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:21 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 639.246404] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x7b7d03, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x6, 0x0, 0x3, @empty, 'wlan0\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 08:37:24 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) accept(r1, 0x0, 0x0) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:24 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 0: socketpair(0x8, 0x2, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 641.897817] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 641.916487] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$RTC_EPOCH_SET(0xffffffffffffffff, 0x4008700e, 0x9) 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x5}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x3}, {0x4}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x5, 0x3}, {0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x3, 0x9}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc000}, 0x404c011) r2 = accept(r0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000480)={0x13, 0x36, 0x7, 0x8, 0xb, 0x2, 0x4, 0xf8}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000400), 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$RTC_WIE_ON(r4, 0x700f) [ 642.054743] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000780)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1f0, 0xf8, 0xf8, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000740), {[{{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ah={{0x30}, {[0x1, 0x8b], 0x1}}, @common=@ah={{0x30}, {[0xffffffff, 0x2], 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0xc0, 0x3f}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@unspec=@state={{0x28}, {0x8}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x3, 0x2, 0x1, 0x1, 0x4, 0x3], 0x2}, {0x2, [0x6, 0x3, 0x2, 0x4, 0x2], 0x6}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x5, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:24 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000700), 0x400000, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:24 executing program 3: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0x5, 0x1c, [0xffff, 0x1d4, 0x5, 0x2, 0x6, 0xfffff9c9, 0x100]}) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) 08:37:24 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) [ 642.227076] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 0: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 642.336645] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000000)={r0, 0x5, 0x9, "87ee18210e80a781fc9f7269e6b6bec7343d8d677a97bfd3e4a9e50a439d9248f5112775589270fc807df7cc8aa4bd715fb6c2a1b39d217e2c6f4a1748e42e4dc8db7b8d61b7d8439e5ae8246dccee9a42a1670f42cee4843d7aee81dbd97caaeaaf4708e6048bed80b3cd88167cbc90a77f5855afbefa5110e92e449aadab19427a24440834f08fa5458be7a1a809795587626fffc02028d64faefd1f26f8f87435d7bc1842f8522795d25063d791453f8c97fe7ab84db6e500ac2b30890ca0"}) 08:37:24 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)) 08:37:24 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 3: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000080), 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14c, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1d}}}}, [@NL80211_ATTR_TID_CONFIG={0xa4, 0x11d, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xfffffffffffffffe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xe0}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x70, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x6, 0xa}, {0x1, 0x3}, {0x7, 0x9}, {0x6}, {0x6, 0x6}, {0x1, 0x4}, {0x5}, {0x7, 0x3}, {0x2, 0x7}, {0x7, 0x5}, {0x6, 0x7}, {0x0, 0x9}]}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x2, 0x6}, {0x4, 0x7}, {0x4, 0x7}, {0x2, 0x2}, {0x1, 0x8}, {0x1, 0x2}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x7}, {0x7, 0x3}, {0x2, 0xa}, {0x0, 0x2}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x1, 0x8}, {0x1, 0x3}, {0x3, 0xa}, {0x4, 0x5}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x5}, {0x2, 0x2}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0xa}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x6}, {0x5, 0x5}, {0x4, 0x1}, {0x0, 0x5}, {0x2, 0x9}, {0x5, 0xa}, {0x4, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x7, 0x1}, {0x0, 0x8}, {0x7, 0x3}, {0x0, 0x1}, {0x3, 0x2}, {0x5, 0x2}, {0x1, 0x2}, {0x2, 0x9}, {0x1}, {0x2, 0x4}, {0x7, 0x1}, {0x7, 0x7}, {0x0, 0x2}, {0x7, 0x3}, {0x4}, {0x3, 0x4}, {0x3, 0x7}, {0x1, 0x1}, {0x0, 0x6}, {0x2, 0x7}, {0x5, 0x3}, {0x5}, {0x7, 0xa}, {0x3, 0x3}, {0x2, 0x4}, {0x6, 0x9}, {0x2, 0x2}, {0x6, 0x5}, {0x1, 0x3}, {0x0, 0x4}, {0x6, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x6}, {0x3, 0x9}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x4c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x5e}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x8a}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xfa}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3ff}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x3f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0xc000}, 0x404c011) r2 = accept(r0, &(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f0000000380)=0x80) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000480)={0x13, 0x36, 0x7, 0x8, 0xb, 0x2, 0x4, 0xf8}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000400), 0x4) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000440), 0x2000, 0x0) ioctl$RTC_WIE_ON(r4, 0x700f) 08:37:24 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 642.472229] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 2: bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x7b7d03, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x6, 0x0, 0x3, @empty, 'wlan0\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 08:37:24 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:24 executing program 0: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 5: socketpair(0x8, 0x2, 0x0, 0x0) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 642.613114] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:24 executing program 3: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x7b7d03, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000000c0)={0x6, 0x0, 0x3, @empty, 'wlan0\x00'}) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) 08:37:24 executing program 0: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:24 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:24 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)) 08:37:24 executing program 3: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:24 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:24 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 642.750078] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:25 executing program 3: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:25 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:25 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xa76a}) 08:37:25 executing program 0: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 3: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:25 executing program 0: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:25 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:25 executing program 3: socketpair(0x0, 0x5, 0x0, 0x0) 08:37:25 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, &(0x7f0000000180), {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:25 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:25 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) 08:37:26 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xa76a}) 08:37:26 executing program 3: socketpair(0x0, 0x5, 0x0, 0x0) 08:37:26 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 08:37:26 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:26 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0xc2300, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_PIE_OFF(r0, 0x7006) 08:37:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 08:37:26 executing program 4: socketpair(0x1, 0x1, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'syzkaller1\x00'}) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000002c0)) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'wg0\x00'}) 08:37:26 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:26 executing program 3: socketpair(0x0, 0x5, 0x0, 0x0) 08:37:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 08:37:26 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:27 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) ioctl$DRM_IOCTL_SG_FREE(r2, 0x40106439, &(0x7f0000000040)={0xa76a}) 08:37:27 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, 0x0, &(0x7f00000009c0)) socketpair(0x1, 0x1, 0x1000, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8001, 0x402) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x1fa8) r2 = syz_open_dev$vcsn(&(0x7f0000000080), 0x7fff, 0x1) ioctl$RTC_PIE_OFF(r2, 0x7006) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r4, 0x80247009, &(0x7f00000002c0)) syz_open_dev$vcsn(&(0x7f00000000c0), 0x3f, 0x3c1042) syz_open_dev$vcsn(&(0x7f0000000100), 0x5, 0x121000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0xc826) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x271) 08:37:27 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0xff000000, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:27 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:27 executing program 3: socketpair(0x1e, 0x0, 0x0, 0x0) 08:37:27 executing program 5: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:27 executing program 4: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f0000000280)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) socketpair(0xa, 0x6, 0x0, &(0x7f00000003c0)) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xb38) r1 = socket$l2tp6(0xa, 0x2, 0x73) accept(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)) getsockname(r1, &(0x7f0000000000)=@in={0x2, 0x0, @local}, &(0x7f0000000080)=0x80) r2 = socket$l2tp6(0xa, 0x2, 0x73) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) accept(r2, 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_EPOCH_SET(r3, 0x4008700e, 0x9) accept(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000140)=0x80) 08:37:27 executing program 3: socketpair(0x1e, 0x0, 0x0, 0x0) 08:37:27 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:27 executing program 5: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 645.271932] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:27 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000004c0)={'broute\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0}, 0x78) socketpair(0x1, 0x1, 0x0, 0x0) 08:37:28 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) 08:37:28 executing program 3: socketpair(0x1e, 0x0, 0x0, 0x0) 08:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0xffffffff, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:28 executing program 5: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:28 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:28 executing program 4: socketpair(0x1d, 0x1, 0x6, 0x0) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4048000}, 0x30000001) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x100, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r3, 0x1}, 0x14}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x4c, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10000}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe24}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44008000}, 0x20000080) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r4, 0x4, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1f}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xf}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xa}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9a}]}, 0x4c}}, 0x40040c4) 08:37:28 executing program 5: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:28 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$RTC_PLL_GET(r0, 0x80207011, &(0x7f0000000080)) socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 08:37:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00', {0xff}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 646.130971] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:28 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:28 executing program 4: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) socketpair(0x15, 0x5, 0x0, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fbdbdf25770000000500ee00de0000000500ee00ff0000000800ef00903c6597"], 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000ffdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="0c00990002000000290000000400280009000a00e1b67390860000000500080004000000600050800800030001ac0f000c00088004000200040002000500020005000000040005000800030005ac0f00200008800400010004000200040001000400010004000200040002000400010011000100dfeefc4766dac043041480ed8d000000080037000100000005000800030000000800090005ac0f00040028000800090005ac0f00"], 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r6, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdf250600000008003c000180040005002d00000000000500290001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x80) [ 646.175989] can: request_module (can-proto-6) failed. 08:37:28 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000000c0)) [ 646.248214] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:29 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) 08:37:29 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00', {}, {0xff}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:29 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 3: socketpair(0x1, 0x3, 0x0, &(0x7f00000003c0)) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000140)) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)) 08:37:29 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) 08:37:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00', {}, {}, 0x5c, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 647.025999] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:29 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:29 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x44211040}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 647.183436] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:30 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 08:37:30 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:30 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:30 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:30 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x3, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:30 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) 08:37:30 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:31 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:31 executing program 4: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 648.818134] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:31 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x21}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:31 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:31 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) [ 649.000057] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:32 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:32 executing program 4: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:32 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:32 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:32 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x800, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:32 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) 08:37:33 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:33 executing program 4: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:33 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:33 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 650.871696] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:33 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:33 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 651.003699] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 652.077790] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 652.094385] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 652.107567] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 652.117906] CPU: 0 PID: 26360 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 652.124013] syz-executor.3 cpuset= [ 652.125788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.125795] Call Trace: [ 652.125814] dump_stack+0x1b2/0x281 [ 652.125827] warn_alloc.cold+0x96/0x1cc [ 652.145218] / [ 652.148837] ? zone_watermark_ok_safe+0x220/0x220 [ 652.153303] mems_allowed=0-1 [ 652.155384] __alloc_pages_nodemask+0x2127/0x2720 [ 652.155401] ? lock_acquire+0x170/0x3f0 [ 652.167351] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 652.172209] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 652.177657] ? __mutex_unlock_slowpath+0x75/0x770 [ 652.182494] ? retint_kernel+0x2d/0x2d [ 652.186379] alloc_pages_current+0x155/0x260 [ 652.190787] ion_page_pool_alloc+0x118/0x1b0 [ 652.195191] ion_system_heap_allocate+0x133/0x8c0 [ 652.200029] ? ion_alloc+0x187/0x810 [ 652.203738] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 652.209184] ? ion_system_contig_heap_create+0x130/0x130 [ 652.214640] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 652.219668] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 652.224539] ion_alloc+0x204/0x810 [ 652.228081] ? ion_dma_buf_release+0x40/0x40 [ 652.232485] ? __might_fault+0x177/0x1b0 [ 652.236557] ion_ioctl+0xea/0x1f0 [ 652.240003] ? ion_query_heaps+0x360/0x360 [ 652.244236] ? ion_query_heaps+0x360/0x360 [ 652.248466] do_vfs_ioctl+0x75a/0xff0 [ 652.252267] ? ioctl_preallocate+0x1a0/0x1a0 [ 652.256668] ? lock_downgrade+0x740/0x740 [ 652.260810] ? __fget+0x225/0x360 [ 652.264255] ? do_vfs_ioctl+0xff0/0xff0 [ 652.268226] ? security_file_ioctl+0x83/0xb0 [ 652.272632] SyS_ioctl+0x7f/0xb0 [ 652.276011] ? do_vfs_ioctl+0xff0/0xff0 [ 652.279975] do_syscall_64+0x1d5/0x640 [ 652.283869] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 652.289050] RIP: 0033:0x4665f9 [ 652.292229] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.299929] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 652.307203] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 652.314466] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 652.321733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 652.328996] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 652.345762] CPU: 1 PID: 26359 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 652.346883] Mem-Info: [ 652.353646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 652.353650] Call Trace: [ 652.353668] dump_stack+0x1b2/0x281 [ 652.353682] warn_alloc.cold+0x96/0x1cc [ 652.353694] ? zone_watermark_ok_safe+0x220/0x220 [ 652.353717] __alloc_pages_nodemask+0x2127/0x2720 [ 652.353734] ? lock_acquire+0x170/0x3f0 [ 652.356841] active_anon:12389 inactive_anon:4694 isolated_anon:0 [ 652.356841] active_file:8916 inactive_file:4271 isolated_file:0 [ 652.356841] unevictable:0 dirty:241 writeback:0 unstable:0 [ 652.356841] slab_reclaimable:20055 slab_unreclaimable:115103 [ 652.356841] mapped:61064 shmem:4883 pagetables:744 bounce:0 [ 652.356841] free:33958 free_pcp:197 free_cma:0 [ 652.365501] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 652.365519] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 652.365532] ? __mutex_unlock_slowpath+0x75/0x770 [ 652.365547] alloc_pages_current+0x155/0x260 [ 652.365561] ion_page_pool_alloc+0x118/0x1b0 [ 652.365571] ion_system_heap_allocate+0x133/0x8c0 [ 652.365582] ? ion_alloc+0x187/0x810 [ 652.365591] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 652.365599] ? ion_system_contig_heap_create+0x130/0x130 [ 652.365608] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 652.365619] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 652.365631] ion_alloc+0x204/0x810 [ 652.372754] Node 0 active_anon:49556kB inactive_anon:18776kB active_file:35660kB inactive_file:17080kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:244256kB dirty:960kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 652.376030] ? ion_dma_buf_release+0x40/0x40 [ 652.376045] ? __might_fault+0x177/0x1b0 [ 652.380947] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 652.385726] ion_ioctl+0xea/0x1f0 [ 652.385736] ? ion_query_heaps+0x360/0x360 [ 652.385748] ? ion_query_heaps+0x360/0x360 [ 652.394121] Node 0 [ 652.423379] do_vfs_ioctl+0x75a/0xff0 [ 652.423392] ? ioctl_preallocate+0x1a0/0x1a0 [ 652.423401] ? lock_downgrade+0x740/0x740 [ 652.423413] ? __fget+0x225/0x360 [ 652.423422] ? do_vfs_ioctl+0xff0/0xff0 [ 652.423433] ? security_file_ioctl+0x83/0xb0 [ 652.423442] SyS_ioctl+0x7f/0xb0 [ 652.423449] ? do_vfs_ioctl+0xff0/0xff0 [ 652.423459] do_syscall_64+0x1d5/0x640 [ 652.423473] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 652.423482] RIP: 0033:0x4665f9 [ 652.423487] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 652.423497] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 652.423502] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 652.423507] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 652.423513] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 652.423518] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 652.646925] DMA free:11124kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.673054] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 652.678167] Node 0 DMA32 free:76196kB min:36200kB low:45248kB high:54296kB active_anon:49556kB inactive_anon:18776kB active_file:35864kB inactive_file:17376kB unevictable:0kB writepending:960kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2976kB bounce:0kB free_pcp:724kB local_pcp:96kB free_cma:0kB [ 652.708175] lowmem_reserve[]: 0 0 0 0 0 [ 652.712287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.738019] lowmem_reserve[]: 0 0 0 0 0 [ 652.742655] Node 1 Normal free:53692kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 652.781616] lowmem_reserve[]: 0 0 0 0 0 [ 652.790101] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11068kB [ 652.814654] Node 0 DMA32: 1196*4kB (UME) 659*8kB (UMEH) 510*16kB (UMEH) 609*32kB (UMH) 12*64kB (UM) 2*128kB (M) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 38728kB [ 652.829908] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 652.846845] Node 1 Normal: 76*4kB (UE) 410*8kB (UE) 296*16kB (UE) 78*32kB (U) 7*64kB (UE) 18*128kB (U) 5*256kB (U) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 6*4096kB (UM) = 53760kB [ 652.867557] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.892111] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 652.910688] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 652.938191] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 652.956791] 10701 total pagecache pages [ 652.965321] 0 pages in swap cache [ 652.969766] Swap cache stats: add 0, delete 0, find 0/0 [ 652.982694] Free swap = 0kB [ 652.998706] Total swap = 0kB [ 653.015570] 2097051 pages RAM [ 653.031619] 0 pages HighMem/MovableOnly [ 653.046018] 363849 pages reserved [ 653.052967] 0 pages cma reserved [ 653.329780] systemd-journal invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=1, oom_score_adj=0 [ 653.353967] systemd-journal cpuset=/ mems_allowed=0-1 [ 653.363026] CPU: 0 PID: 4623 Comm: systemd-journal Not tainted 4.14.232-syzkaller #0 [ 653.370941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 653.380283] Call Trace: [ 653.382866] dump_stack+0x1b2/0x281 [ 653.386484] dump_header+0x178/0x82f [ 653.390185] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 653.395275] ? ___ratelimit+0x2cd/0x530 [ 653.399239] oom_kill_process.cold+0x10/0xa40 [ 653.403732] out_of_memory+0xe3e/0x1190 [ 653.407699] ? oom_killer_disable+0x1c0/0x1c0 [ 653.412182] ? mutex_trylock+0x152/0x1a0 [ 653.416339] __alloc_pages_nodemask+0x23e1/0x2720 [ 653.421202] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 653.426049] ? entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 653.431412] ? debug_check_no_obj_freed+0x2c0/0x680 [ 653.436424] ? cache_grow_begin+0x3f/0x700 [ 653.440655] cache_grow_begin+0x91/0x700 [ 653.444719] fallback_alloc+0x207/0x2c0 [ 653.448704] kmem_cache_alloc+0x1e5/0x3c0 [ 653.452840] getname_flags+0xc8/0x550 [ 653.456668] user_path_at_empty+0x2a/0x50 [ 653.460807] SyS_faccessat+0x21b/0x680 [ 653.464691] ? SyS_fallocate+0x80/0x80 [ 653.468570] ? do_syscall_64+0x4c/0x640 [ 653.472532] ? SyS_faccessat+0x680/0x680 [ 653.476669] do_syscall_64+0x1d5/0x640 [ 653.480586] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 653.485878] RIP: 0033:0x7f39b5ead9c7 [ 653.489576] RSP: 002b:00007ffe452696e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 653.497273] RAX: ffffffffffffffda RBX: 00007ffe4526c710 RCX: 00007f39b5ead9c7 [ 653.504530] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055758ca0f9a3 [ 653.511805] RBP: 00007ffe45269830 R08: 000055758ca053e5 R09: 0000000000000018 [ 653.520156] R10: 0000000000000069 R11: 0000000000000246 R12: 0000000000000000 [ 653.527439] R13: 0000000000000000 R14: 000055758e8608a0 R15: 00007ffe45269d20 [ 653.562830] Mem-Info: [ 653.565277] active_anon:14179 inactive_anon:4694 isolated_anon:0 [ 653.565277] active_file:35 inactive_file:4 isolated_file:0 [ 653.565277] unevictable:0 dirty:34 writeback:22 unstable:0 [ 653.565277] slab_reclaimable:19910 slab_unreclaimable:109339 [ 653.565277] mapped:53706 shmem:4883 pagetables:744 bounce:0 [ 653.565277] free:25132 free_pcp:30 free_cma:0 [ 653.598514] Node 0 active_anon:56716kB inactive_anon:18776kB active_file:20kB inactive_file:160kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:214792kB dirty:116kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 653.626541] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 653.652619] Node 0 DMA free:11068kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.684075] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 653.689154] Node 0 DMA32 free:36068kB min:36200kB low:45248kB high:54296kB active_anon:56716kB inactive_anon:18776kB active_file:0kB inactive_file:444kB unevictable:0kB writepending:112kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7744kB pagetables:2976kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 653.718400] lowmem_reserve[]: 0 0 0 0 0 [ 653.722402] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.748059] lowmem_reserve[]: 0 0 0 0 0 [ 653.761149] Node 1 Normal free:53608kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 653.794194] lowmem_reserve[]: 0 0 0 0 0 [ 653.798198] Node 0 DMA: 1*4kB (E) 1*8kB (U) 1*16kB (E) 1*32kB (E) 2*64kB (UE) 1*128kB (E) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11068kB [ 653.817530] Node 0 DMA32: 1597*4kB (UME) 885*8kB (MEH) 387*16kB (MEH) 160*32kB (MH) 75*64kB (UM) 32*128kB (M) 6*256kB (UM) 2*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 36236kB [ 653.836613] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 653.847469] Node 1 Normal: 66*4kB (UE) 410*8kB (UE) 289*16kB (UE) 78*32kB (U) 7*64kB (UE) 18*128kB (U) 5*256kB (U) 6*512kB (UME) 3*1024kB (UME) 4*2048kB (UM) 6*4096kB (UM) = 53608kB [ 653.866236] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.875337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 653.897030] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 653.905947] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 653.919193] 4943 total pagecache pages [ 653.923115] 0 pages in swap cache [ 653.926592] Swap cache stats: add 0, delete 0, find 0/0 [ 653.932081] Free swap = 0kB [ 653.942176] Total swap = 0kB [ 653.945223] 2097051 pages RAM [ 653.948343] 0 pages HighMem/MovableOnly [ 653.952305] 363849 pages reserved [ 653.955742] 0 pages cma reserved [ 653.969757] Out of memory (oom_kill_allocating_task): Kill process 4623 (systemd-journal) score 0 or sacrifice child [ 653.985364] Killed process 4623 (systemd-journal) total-vm:46096kB, anon-rss:508kB, file-rss:4kB, shmem-rss:5924kB [ 653.999953] oom_reaper: reaped process 4623 (systemd-journal), now anon-rss:0kB, file-rss:0kB, shmem-rss:5924kB [ 654.027127] in:imklog invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 654.053336] in:imklog cpuset=/ mems_allowed=0-1 [ 654.062731] CPU: 0 PID: 7727 Comm: in:imklog Not tainted 4.14.232-syzkaller #0 [ 654.070099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.079478] Call Trace: [ 654.082070] dump_stack+0x1b2/0x281 [ 654.085711] dump_header+0x178/0x82f [ 654.089422] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 654.094522] ? ___ratelimit+0x2cd/0x530 [ 654.098496] oom_kill_process.cold+0x10/0xa40 [ 654.103017] out_of_memory+0xe3e/0x1190 [ 654.106992] ? oom_killer_disable+0x1c0/0x1c0 [ 654.111486] ? mutex_trylock+0x152/0x1a0 [ 654.115542] __alloc_pages_nodemask+0x23e1/0x2720 [ 654.120392] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 654.125246] alloc_pages_current+0x155/0x260 [ 654.129649] filemap_fault+0x11a1/0x1ad0 [ 654.133715] ext4_filemap_fault+0x84/0xb0 [ 654.137862] __do_fault+0xfa/0x380 [ 654.141397] __handle_mm_fault+0x2497/0x4620 [ 654.145800] ? vm_insert_page+0x7c0/0x7c0 [ 654.149949] ? lock_downgrade+0x740/0x740 [ 654.154076] ? mark_held_locks+0xa6/0xf0 [ 654.158142] handle_mm_fault+0x455/0x9c0 [ 654.162187] __do_page_fault+0x549/0xad0 [ 654.166226] ? spurious_fault+0x640/0x640 [ 654.170379] ? do_page_fault+0x60/0x500 [ 654.174334] ? page_fault+0x2f/0x50 [ 654.177938] page_fault+0x45/0x50 [ 654.181369] RIP: fffff7e7:0x1f9f [ 654.184707] RSP: 6286e4a0:00007f426286e4ac EFLAGS: 7f426286eda0 [ 654.187103] Mem-Info: [ 654.190644] syz-executor.3: [ 654.193224] active_anon:14053 inactive_anon:4693 isolated_anon:0 [ 654.193224] active_file:38 inactive_file:0 isolated_file:0 [ 654.193224] unevictable:0 dirty:12 writeback:0 unstable:0 [ 654.193224] slab_reclaimable:19910 slab_unreclaimable:109322 [ 654.193224] mapped:52225 shmem:4883 pagetables:715 bounce:0 [ 654.193224] free:13939 free_pcp:60 free_cma:0 [ 654.202475] page allocation failure: order:0 [ 654.232047] Node 0 active_anon:56212kB inactive_anon:18772kB active_file:152kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:44kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 654.232063] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.248276] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 654.264252] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.264278] lowmem_reserve[]: [ 654.300407] (null) [ 654.326057] 0 2717 2718 2718 2718 [ 654.332280] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:56212kB inactive_anon:18772kB active_file:168kB inactive_file:36kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2860kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 654.341318] syz-executor.3 cpuset= [ 654.363989] lowmem_reserve[]: 0 0 0 0 0 [ 654.371583] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.379571] / [ 654.406039] lowmem_reserve[]: 0 0 0 0 0 [ 654.410468] mems_allowed=0-1 [ 654.411816] Node 1 Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 654.414867] CPU: 1 PID: 26359 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 654.414875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 654.451343] lowmem_reserve[]: [ 654.460622] Call Trace: [ 654.460644] dump_stack+0x1b2/0x281 [ 654.460657] warn_alloc.cold+0x96/0x1cc [ 654.460668] ? zone_watermark_ok_safe+0x220/0x220 [ 654.460678] ? usleep_range+0x130/0x130 [ 654.460686] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 654.460698] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 654.460708] ? run_timer_softirq+0x5a0/0x5a0 [ 654.460724] __alloc_pages_nodemask+0x2127/0x2720 [ 654.460738] ? lock_acquire+0x170/0x3f0 [ 654.468192] 0 [ 654.470023] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 654.470034] ? ion_page_pool_alloc+0x9e/0x1b0 [ 654.470050] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 654.470069] alloc_pages_current+0x155/0x260 [ 654.470080] ion_page_pool_alloc+0x118/0x1b0 [ 654.470090] ion_system_heap_allocate+0x133/0x8c0 [ 654.482507] 0 [ 654.482830] ? ion_alloc+0x187/0x810 [ 654.487905] 0 [ 654.492908] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 654.492919] ? ion_system_contig_heap_create+0x130/0x130 [ 654.492927] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 654.492939] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 654.492949] ion_alloc+0x204/0x810 [ 654.492961] ? ion_dma_buf_release+0x40/0x40 [ 654.492980] ? __might_fault+0x177/0x1b0 [ 654.492992] ion_ioctl+0xea/0x1f0 [ 654.504202] 0 [ 654.506188] ? ion_query_heaps+0x360/0x360 [ 654.507981] 0 [ 654.512816] ? ion_query_heaps+0x360/0x360 [ 654.512827] do_vfs_ioctl+0x75a/0xff0 [ 654.512839] ? ioctl_preallocate+0x1a0/0x1a0 [ 654.512848] ? lock_downgrade+0x740/0x740 [ 654.512860] ? __fget+0x225/0x360 [ 654.512869] ? do_vfs_ioctl+0xff0/0xff0 [ 654.512882] ? security_file_ioctl+0x83/0xb0 [ 654.522820] SyS_ioctl+0x7f/0xb0 [ 654.522830] ? do_vfs_ioctl+0xff0/0xff0 [ 654.522841] do_syscall_64+0x1d5/0x640 [ 654.522855] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 654.522864] RIP: 0033:0x4665f9 [ 654.522868] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.522877] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 654.522882] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 654.522887] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 654.522892] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 654.522896] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 654.538172] warn_alloc_show_mem: 1 callbacks suppressed [ 654.538176] Mem-Info: [ 654.547630] Node 0 [ 654.562975] active_anon:14053 inactive_anon:4693 isolated_anon:0 [ 654.562975] active_file:11 inactive_file:0 isolated_file:0 [ 654.562975] unevictable:0 dirty:12 writeback:0 unstable:0 [ 654.562975] slab_reclaimable:19910 slab_unreclaimable:109322 [ 654.562975] mapped:52225 shmem:4883 pagetables:715 bounce:0 [ 654.562975] free:13939 free_pcp:60 free_cma:0 [ 654.573366] DMA: [ 654.583952] Node 0 active_anon:56212kB inactive_anon:18772kB active_file:44kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:44kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.595412] 1*4kB [ 654.605834] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 654.606458] (E) [ 654.621343] Node 0 [ 654.630313] 1*8kB [ 654.643361] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.654232] (U) [ 654.672831] lowmem_reserve[]: [ 654.683512] 2*16kB [ 654.701229] 0 [ 654.734519] (UE) [ 654.767964] 2717 [ 654.791805] 1*32kB [ 654.830398] 2718 2718 2718 [ 654.835586] Node 0 DMA32 free:17976kB min:36200kB low:45248kB high:54296kB active_anon:56212kB inactive_anon:18772kB active_file:56kB inactive_file:0kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2860kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 654.837378] (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10956kB [ 654.878823] lowmem_reserve[]: 0 0 0 0 0 [ 654.886997] Node 0 DMA32: 1226*4kB (UME) 641*8kB (UME) 251*16kB (UME) 84*32kB (UM) 23*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18208kB [ 654.901646] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 654.924731] Node 0 [ 654.953840] lowmem_reserve[]: 0 0 0 0 0 [ 654.957399] Normal: [ 654.962335] Node 1 [ 654.962418] 0*4kB [ 654.964673] Normal free:26824kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 654.966891] 0*8kB [ 654.975472] lowmem_reserve[]: 0 0 0 0 0 [ 655.008028] 0*16kB [ 655.009968] Node 0 DMA: 1*4kB (E) [ 655.012230] 0*32kB [ 655.012238] 1*8kB [ 655.015755] 0*64kB [ 655.017979] (U) 2*16kB (UE) 1*32kB (E) 2*64kB (UE) 2*128kB (UE) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10956kB [ 655.028553] 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.046300] Node 0 DMA32: 1205*4kB (ME) 636*8kB (UME) 251*16kB (UME) 84*32kB (UM) 23*64kB (UM) 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18084kB [ 655.055118] Node 1 Normal: 2*4kB (E) 2*8kB (E) 3*16kB (UE) 0*32kB 2*64kB (UE) 0*128kB 0*256kB 2*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 4*4096kB (UM) = 26824kB [ 655.075535] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.096847] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.107276] Node 1 Normal: 2*4kB (E) 3*8kB (UE) 2*16kB (E) 0*32kB 2*64kB (UE) 1*128kB (U) 0*256kB 2*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 4*4096kB (UM) = 26944kB [ 655.123561] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.137951] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.137958] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.137964] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.137971] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.137978] 4922 total pagecache pages [ 655.155546] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 655.198928] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 655.207503] 4922 total pagecache pages [ 655.213642] 0 pages in swap cache [ 655.213750] 0 pages in swap cache [ 655.217092] Swap cache stats: add 0, delete 0, find 0/0 [ 655.217098] Free swap = 0kB [ 655.233355] Total swap = 0kB [ 655.235188] Swap cache stats: add 0, delete 0, find 0/0 [ 655.236468] 2097051 pages RAM [ 655.245645] 0 pages HighMem/MovableOnly [ 655.248214] Free swap = 0kB [ 655.252626] Total swap = 0kB [ 655.253795] 363849 pages reserved [ 655.255654] 2097051 pages RAM [ 655.261181] 0 pages cma reserved [ 655.265759] Out of memory (oom_kill_allocating_task): Kill process 7727 (in:imklog) score 0 or sacrifice child [ 655.276729] 0 pages HighMem/MovableOnly [ 655.283399] Killed process 7679 (rsyslogd) total-vm:254332kB, anon-rss:880kB, file-rss:0kB, shmem-rss:0kB [ 655.306652] oom_reaper: reaped process 26359 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 655.307902] 363849 pages reserved [ 655.340464] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 655.360044] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 655.361309] 0 pages cma reserved [ 655.364856] CPU: 0 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 655.375656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 655.385010] Call Trace: [ 655.387601] dump_stack+0x1b2/0x281 [ 655.391670] dump_header+0x178/0x82f [ 655.395378] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 655.400578] ? ___ratelimit+0x2cd/0x530 [ 655.404557] oom_kill_process.cold+0x10/0xa40 [ 655.414703] out_of_memory+0xe3e/0x1190 [ 655.418680] ? oom_killer_disable+0x1c0/0x1c0 [ 655.423175] ? mutex_trylock+0x152/0x1a0 [ 655.427228] __alloc_pages_nodemask+0x23e1/0x2720 [ 655.432076] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 655.436954] alloc_pages_current+0x155/0x260 [ 655.441359] filemap_fault+0x11a1/0x1ad0 [ 655.445459] ext4_filemap_fault+0x84/0xb0 [ 655.449606] __do_fault+0xfa/0x380 [ 655.453152] __handle_mm_fault+0x2497/0x4620 [ 655.457599] ? vm_insert_page+0x7c0/0x7c0 [ 655.461759] ? mark_held_locks+0xa6/0xf0 [ 655.465821] handle_mm_fault+0x455/0x9c0 [ 655.469905] __do_page_fault+0x549/0xad0 [ 655.473970] ? spurious_fault+0x640/0x640 [ 655.478135] ? do_page_fault+0x60/0x500 [ 655.482105] ? page_fault+0x2f/0x50 [ 655.485743] page_fault+0x45/0x50 [ 655.489279] RIP: 0f00:0x947811 [ 655.493426] RSP: 03e7:000000c000039e40 EFLAGS: 00000003 [ 655.587360] Mem-Info: [ 655.595326] active_anon:13272 inactive_anon:4693 isolated_anon:0 [ 655.595326] active_file:51 inactive_file:20 isolated_file:0 [ 655.595326] unevictable:0 dirty:11 writeback:0 unstable:0 [ 655.595326] slab_reclaimable:19910 slab_unreclaimable:109324 [ 655.595326] mapped:52225 shmem:4883 pagetables:715 bounce:0 [ 655.595326] free:268936 free_pcp:361 free_cma:0 [ 655.688362] Node 0 active_anon:53088kB inactive_anon:18772kB active_file:300kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208900kB dirty:40kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 655.728445] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 655.808408] Node 0 DMA free:11188kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.835782] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 655.841168] Node 0 DMA32 free:157836kB min:36200kB low:45248kB high:54296kB active_anon:53080kB inactive_anon:18772kB active_file:100kB inactive_file:544kB unevictable:0kB writepending:40kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2860kB bounce:0kB free_pcp:980kB local_pcp:632kB free_cma:0kB [ 655.871237] lowmem_reserve[]: 0 0 0 0 0 [ 655.875412] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 655.901562] lowmem_reserve[]: 0 0 0 0 0 [ 655.905670] Node 1 Normal free:719460kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1408kB local_pcp:668kB free_cma:0kB [ 655.936236] lowmem_reserve[]: 0 0 0 0 0 [ 655.940681] Node 0 DMA: 1*4kB (E) 0*8kB 1*16kB (E) 3*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11188kB [ 655.957022] Node 0 DMA32: 486*4kB (UME) 654*8kB (ME) 330*16kB (UME) 614*32kB (UME) 248*64kB (UME) 120*128kB (UME) 31*256kB (UE) 12*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 77416kB [ 655.973842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 655.984925] Node 1 Normal: 87*4kB (UE) 412*8kB (UE) 291*16kB (UE) 79*32kB (U) 19*64kB (UE) 19*128kB (U) 6*256kB (U) 6*512kB (UME) 259*1024kB (UME) 101*2048kB (UM) 32*4096kB (UM) = 622220kB [ 656.008508] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.029445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 656.047492] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 656.066570] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 656.081602] 6035 total pagecache pages [ 656.085519] 0 pages in swap cache [ 656.089378] Swap cache stats: add 0, delete 0, find 0/0 [ 656.095160] Free swap = 0kB [ 656.098181] Total swap = 0kB [ 656.108772] 2097051 pages RAM [ 656.111903] 0 pages HighMem/MovableOnly [ 656.115879] 363849 pages reserved [ 656.122395] 0 pages cma reserved [ 656.125773] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 656.136258] Killed process 7977 (syz-executor.3) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 656.164534] oom_reaper: reaped process 26360 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 656.195818] oom_reaper: reaped process 7977 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 656.272263] systemd-cgroups invoked oom-killer: gfp_mask=0x14200ca(GFP_HIGHUSER_MOVABLE), nodemask=(null), order=0, oom_score_adj=0 [ 656.276157] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 656.296527] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 656.301720] CPU: 0 PID: 26359 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 656.309690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.319036] Call Trace: [ 656.321635] dump_stack+0x1b2/0x281 [ 656.325263] warn_alloc.cold+0x96/0x1cc [ 656.328292] systemd-cgroups cpuset= [ 656.329231] ? zone_watermark_ok_safe+0x220/0x220 [ 656.329257] __alloc_pages_nodemask+0x2127/0x2720 [ 656.333029] / [ 656.337822] ? io_schedule_timeout+0x140/0x140 [ 656.337841] ? lock_acquire+0x170/0x3f0 [ 656.337858] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.357852] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 656.358258] mems_allowed=0-1 [ 656.363298] ? __mutex_unlock_slowpath+0x75/0x770 [ 656.371221] alloc_pages_current+0x155/0x260 [ 656.375670] ion_page_pool_alloc+0x118/0x1b0 [ 656.380079] ion_system_heap_allocate+0x133/0x8c0 [ 656.384913] ? _raw_spin_unlock+0x29/0x40 [ 656.389053] ? _ion_heap_freelist_drain+0x6e/0x410 [ 656.393973] ? ion_system_contig_heap_create+0x130/0x130 [ 656.399417] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 656.404424] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 656.409259] ion_alloc+0x27a/0x810 [ 656.412802] ? ion_dma_buf_release+0x40/0x40 [ 656.417209] ? __might_fault+0x177/0x1b0 [ 656.421266] ion_ioctl+0xea/0x1f0 [ 656.424710] ? ion_query_heaps+0x360/0x360 [ 656.429030] ? ion_query_heaps+0x360/0x360 [ 656.433273] do_vfs_ioctl+0x75a/0xff0 [ 656.437087] ? ioctl_preallocate+0x1a0/0x1a0 [ 656.441496] ? lock_downgrade+0x740/0x740 [ 656.445636] ? __fget+0x225/0x360 [ 656.449084] ? do_vfs_ioctl+0xff0/0xff0 [ 656.453051] ? security_file_ioctl+0x83/0xb0 [ 656.457451] SyS_ioctl+0x7f/0xb0 [ 656.460815] ? do_vfs_ioctl+0xff0/0xff0 [ 656.464787] do_syscall_64+0x1d5/0x640 [ 656.468695] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 656.473872] RIP: 0033:0x4665f9 [ 656.477047] RSP: 002b:00007fbe2b48d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.484742] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 656.491999] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 656.499616] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 656.506892] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 656.514166] R13: 00007ffe0ff93f1f R14: 00007fbe2b48d300 R15: 0000000000022000 [ 656.521458] CPU: 1 PID: 26388 Comm: systemd-cgroups Not tainted 4.14.232-syzkaller #0 [ 656.522817] Mem-Info: [ 656.529428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.529484] Call Trace: [ 656.531899] active_anon:13282 inactive_anon:4693 isolated_anon:0 [ 656.531899] active_file:664 inactive_file:685 isolated_file:0 [ 656.531899] unevictable:0 dirty:0 writeback:0 unstable:0 [ 656.531899] slab_reclaimable:19909 slab_unreclaimable:109276 [ 656.531899] mapped:44704 shmem:4883 pagetables:670 bounce:0 [ 656.531899] free:152597 free_pcp:161 free_cma:0 [ 656.541238] dump_stack+0x1b2/0x281 [ 656.541250] dump_header+0x178/0x82f [ 656.541260] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 656.541268] ? ___ratelimit+0x2cd/0x530 [ 656.541278] oom_kill_process.cold+0x10/0xa40 [ 656.541295] out_of_memory+0xe3e/0x1190 [ 656.541311] ? oom_killer_disable+0x1c0/0x1c0 [ 656.543948] Node 0 active_anon:53128kB inactive_anon:18772kB active_file:2652kB inactive_file:2740kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:178816kB dirty:0kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 656.577213] ? mutex_trylock+0x152/0x1a0 [ 656.577227] __alloc_pages_nodemask+0x23e1/0x2720 [ 656.577241] ? timespec_trunc+0xb7/0x120 [ 656.577254] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 656.577264] ? lock_downgrade+0x740/0x740 [ 656.577270] ? uprobe_mmap+0xcb/0xa30 [ 656.577281] ? __anon_vma_prepare+0x28f/0x4f0 [ 656.577296] ? anon_vma_interval_tree_insert+0x20a/0x3c0 [ 656.581006] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 656.584610] alloc_pages_vma+0xd2/0x6d0 [ 656.589808] Node 0 [ 656.593827] __handle_mm_fault+0xe4f/0x4620 [ 656.593842] ? vm_insert_page+0x7c0/0x7c0 [ 656.598452] DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:28kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.602281] ? vm_mmap_pgoff+0x168/0x1a0 [ 656.606746] lowmem_reserve[]: [ 656.634765] ? mark_held_locks+0xa6/0xf0 [ 656.634777] handle_mm_fault+0x455/0x9c0 [ 656.634790] __do_page_fault+0x549/0xad0 [ 656.634801] ? spurious_fault+0x640/0x640 [ 656.634808] ? do_page_fault+0x60/0x500 [ 656.634816] ? page_fault+0x2f/0x50 [ 656.634822] page_fault+0x45/0x50 [ 656.634830] RIP: 0002:0x801 [ 656.634834] RSP: fb7264f0:00007ffef6e4c130 EFLAGS: 7ffef6e4c218 [ 656.684328] systemd[1]: systemd-journald.service: Failed with result 'signal'. [ 656.708028] 0 2717 2718 2718 2718 [ 656.708050] Node 0 DMA32 free:153852kB min:36200kB low:45248kB high:54296kB active_anon:53128kB inactive_anon:18772kB active_file:2820kB inactive_file:4592kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2680kB bounce:0kB free_pcp:308kB local_pcp:48kB free_cma:0kB 08:37:38 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:38 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:38 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:38 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:38 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 656.763090] systemd[1]: rsyslog.service: Main process exited, code=killed, status=9/KILL [ 656.777457] lowmem_reserve[]: [ 656.895725] systemd[1]: rsyslog.service: Unit entered failed state. [ 656.899557] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 656.907320] systemd[1]: rsyslog.service: Failed with result 'signal'. [ 656.927941] 0 0 0 0 0 [ 656.943731] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 656.949376] systemd[1]: systemd-journald.service: Service has no hold-off time, scheduling restart. [ 656.979588] lowmem_reserve[]: 0 0 0 0 0 [ 656.984182] Node 1 Normal free:798832kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 657.006293] Mem-Info: [ 657.016234] lowmem_reserve[]: 0 0 0 0 0 [ 657.021059] active_anon:13794 inactive_anon:4693 isolated_anon:0 [ 657.021059] active_file:1476 inactive_file:2106 isolated_file:0 [ 657.021059] unevictable:0 dirty:31 writeback:0 unstable:0 [ 657.021059] slab_reclaimable:19919 slab_unreclaimable:109406 [ 657.021059] mapped:45861 shmem:4883 pagetables:697 bounce:0 [ 657.021059] free:308279 free_pcp:270 free_cma:0 [ 657.023290] Node 0 [ 657.058707] systemd[1]: rsyslog.service: Service hold-off time over, scheduling restart. [ 657.059307] DMA: [ 657.064559] systemd[1]: Stopped System Logging Service. [ 657.110368] 3*4kB (UME) 2*8kB (UM) 2*16kB (UE) 2*32kB (UE) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11004kB [ 657.127826] systemd[1]: Starting System Logging Service... [ 657.149943] Node 0 DMA32: 261*4kB (UE) 97*8kB (UME) 297*16kB (UE) 319*32kB (U) 0*64kB 0*128kB 1*256kB (M) 1*512kB (M) 271*1024kB (U) 85*2048kB (UM) 33*4096kB (UM) = 604300kB [ 657.153744] systemd[1]: Stopped Flush Journal to Persistent Storage. [ 657.178416] Node 0 active_anon:53772kB inactive_anon:18772kB active_file:6384kB inactive_file:8844kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:183604kB dirty:176kB writeback:0kB shmem:19532kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 657.211319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.228565] systemd[1]: Stopping Flush Journal to Persistent Storage... [ 657.232859] Node 1 Normal: 44*4kB (UE) 412*8kB (UME) 290*16kB (UE) 80*32kB (UM) 1*64kB (E) 1*128kB (M) 2*256kB (UM) 2*512kB (UE) 380*1024kB (UME) 80*2048kB (UM) 57*4096kB (U) = 798832kB [ 657.253639] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:80kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 657.285815] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.304594] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.313319] Node 0 DMA free:11004kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:28kB inactive_file:24kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.340499] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.349384] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.358012] 9068 total pagecache pages [ 657.361963] 0 pages in swap cache [ 657.365429] Swap cache stats: add 0, delete 0, find 0/0 [ 657.370868] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 657.375941] Node 0 DMA32 free:788356kB min:36200kB low:45248kB high:54296kB active_anon:53676kB inactive_anon:18772kB active_file:6992kB inactive_file:8996kB unevictable:0kB writepending:176kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:2728kB bounce:0kB free_pcp:840kB local_pcp:660kB free_cma:0kB [ 657.406173] Free swap = 0kB [ 657.409237] Total swap = 0kB [ 657.412264] 2097051 pages RAM [ 657.415394] 0 pages HighMem/MovableOnly [ 657.419409] 363849 pages reserved [ 657.422856] 0 pages cma reserved [ 657.448310] lowmem_reserve[]: 0 0 0 0 0 [ 657.452421] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 657.508338] lowmem_reserve[]: 0 0 0 0 0 [ 657.512361] Node 1 Normal free:1180784kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:36kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:108kB local_pcp:0kB free_cma:0kB [ 657.568283] lowmem_reserve[]: 0 0 0 0 0 [ 657.572388] Node 0 DMA: 3*4kB (UME) 2*8kB (UM) 2*16kB (UE) 2*32kB (UE) 2*64kB (ME) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11004kB [ 657.608779] Node 0 DMA32: 249*4kB (ME) 1089*8kB (UME) 63*16kB (UME) 2*32kB (UM) 2*64kB (UM) 39*128kB (UM) 25*256kB (UM) 9*512kB (UM) 312*1024kB (U) 111*2048kB (U) 47*4096kB (UM) = 766236kB [ 657.647246] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 657.663070] Node 1 Normal: 44*4kB (UE) 412*8kB (UME) 290*16kB (UE) 80*32kB (UM) 12*64kB (UE) 1*128kB (M) 2*256kB (UM) 2*512kB (UE) 683*1024kB (UME) 91*2048kB (UM) 69*4096kB (U) = 1181488kB [ 657.686937] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.695886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.708853] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 657.734115] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 657.754908] 9364 total pagecache pages [ 657.760681] systemd-journald[26412]: File /run/log/journal/04d8c135ee6b410280ba31a58c89679d/system.journal corrupted or uncleanly shut down, renaming and replacing. [ 657.780038] 0 pages in swap cache [ 657.783495] Swap cache stats: add 0, delete 0, find 0/0 [ 657.802849] Free swap = 0kB [ 657.805903] Total swap = 0kB [ 657.820333] 2097051 pages RAM [ 657.823451] 0 pages HighMem/MovableOnly [ 657.827420] 363849 pages reserved [ 657.850223] 0 pages cma reserved [ 657.853634] Out of memory (oom_kill_allocating_task): Kill process 26388 (systemd-cgroups) score 0 or sacrifice child [ 657.878763] Killed process 26388 (systemd-cgroups) total-vm:33452kB, anon-rss:160kB, file-rss:616kB, shmem-rss:0kB 08:37:40 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) 08:37:40 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:40 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:40 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:40 executing program 4: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:40 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:40 executing program 1: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:40 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0xffffffff, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 658.155391] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:40 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:40 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:40 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 658.271547] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 658.521639] IPVS: stopping master sync thread 23906 ... [ 658.530851] IPVS: stopping backup sync thread 1649 ... [ 658.550555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.567432] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.594893] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.602442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.616568] device bridge_slave_1 left promiscuous mode [ 658.628802] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.636224] device bridge_slave_0 left promiscuous mode [ 658.642968] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.653447] device veth1_macvtap left promiscuous mode [ 658.659694] device veth0_macvtap left promiscuous mode [ 658.665098] device veth1_vlan left promiscuous mode [ 658.671447] device veth0_vlan left promiscuous mode [ 658.793386] device hsr_slave_1 left promiscuous mode [ 658.803418] device hsr_slave_0 left promiscuous mode [ 658.825323] team0 (unregistering): Port device team_slave_1 removed [ 658.836901] team0 (unregistering): Port device team_slave_0 removed [ 658.849361] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 658.862006] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 658.899020] bond0 (unregistering): Released all slaves [ 661.184515] IPVS: ftp: loaded support on port[0] = 21 [ 661.295232] chnl_net:caif_netlink_parms(): no params data found [ 661.348581] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.354963] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.362969] device bridge_slave_0 entered promiscuous mode [ 661.370516] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.376898] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.384548] device bridge_slave_1 entered promiscuous mode [ 661.403754] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 661.413350] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 661.434928] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 661.442089] team0: Port device team_slave_0 added [ 661.447481] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 661.454803] team0: Port device team_slave_1 added [ 661.473167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.479659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.506187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.518208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.524987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.552644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.563766] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 661.571666] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 661.593677] device hsr_slave_0 entered promiscuous mode [ 661.599592] device hsr_slave_1 entered promiscuous mode [ 661.605574] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 661.614030] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 661.686177] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.693157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.699867] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.707449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.740417] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 661.746526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.755024] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 661.764453] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 661.771768] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.779032] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.788834] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 661.794972] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.803653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 661.811762] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.818089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.829974] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 661.837687] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.844213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.856700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 661.866579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 661.876643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 661.887665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 661.900076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 661.909724] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 661.915727] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 661.929610] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 661.936716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 661.943879] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 661.954297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.008182] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 662.018694] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 662.048169] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 662.055643] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 662.062781] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 662.073094] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 662.080705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 662.087513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 662.096365] device veth0_vlan entered promiscuous mode [ 662.105454] device veth1_vlan entered promiscuous mode [ 662.111671] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 662.122826] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 662.133583] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 662.143101] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 662.151658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 662.159458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 662.169527] device veth0_macvtap entered promiscuous mode [ 662.175644] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 662.184242] device veth1_macvtap entered promiscuous mode [ 662.193921] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 662.203807] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 662.213041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.223309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.232475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.242223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.251427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.261895] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.271068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.280871] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.290046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 662.299796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.310768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.318515] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 662.325842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.335837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.344922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.354881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.364205] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.374049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.383193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.393104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.402282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.412218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.421473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 662.431334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.442102] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 662.449117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.456283] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.464307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:37:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0xffffff00, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:44 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) 08:37:44 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:44 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, 0x0}, 0x8000) 08:37:44 executing program 1: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:44 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:44 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:44 executing program 4: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:44 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:44 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 662.617112] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:44 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:44 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:44 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) [ 662.732006] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 663.238717] Bluetooth: hci0 command 0x0409 tx timeout [ 663.583070] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.584810] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 663.600877] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 663.612071] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 663.613882] CPU: 1 PID: 26716 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 663.625587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.635124] Call Trace: [ 663.637722] dump_stack+0x1b2/0x281 [ 663.641352] warn_alloc.cold+0x96/0x1cc [ 663.645328] ? zone_watermark_ok_safe+0x220/0x220 [ 663.650188] __alloc_pages_nodemask+0x2127/0x2720 [ 663.655031] ? lock_acquire+0x170/0x3f0 [ 663.659008] ? lock_acquire+0x170/0x3f0 [ 663.662982] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 663.667828] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 663.673278] ? __mutex_unlock_slowpath+0x75/0x770 [ 663.678121] alloc_pages_current+0x155/0x260 [ 663.682552] ion_page_pool_alloc+0x118/0x1b0 [ 663.686957] ion_system_heap_allocate+0x133/0x8c0 [ 663.691797] ? ion_alloc+0x187/0x810 [ 663.695507] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 663.700956] ? ion_system_contig_heap_create+0x130/0x130 [ 663.706490] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 663.711515] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 663.716366] ion_alloc+0x204/0x810 [ 663.720088] ? ion_dma_buf_release+0x40/0x40 [ 663.724603] ? __might_fault+0x177/0x1b0 [ 663.728663] ion_ioctl+0xea/0x1f0 [ 663.732135] ? ion_query_heaps+0x360/0x360 [ 663.736454] ? ion_query_heaps+0x360/0x360 [ 663.740687] do_vfs_ioctl+0x75a/0xff0 [ 663.744511] ? ioctl_preallocate+0x1a0/0x1a0 [ 663.748921] ? lock_downgrade+0x740/0x740 [ 663.753073] ? __fget+0x225/0x360 [ 663.756525] ? do_vfs_ioctl+0xff0/0xff0 [ 663.760511] ? security_file_ioctl+0x83/0xb0 [ 663.764916] SyS_ioctl+0x7f/0xb0 [ 663.768279] ? do_vfs_ioctl+0xff0/0xff0 [ 663.772276] do_syscall_64+0x1d5/0x640 [ 663.776180] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 663.781369] RIP: 0033:0x4665f9 [ 663.784550] RSP: 002b:00007f7316748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 663.792275] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 663.799552] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 663.806847] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 663.814124] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 663.821482] R13: 00007fffe77c260f R14: 00007f7316748300 R15: 0000000000022000 [ 663.834410] CPU: 0 PID: 26710 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 663.842322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 663.849458] Mem-Info: [ 663.851762] Call Trace: [ 663.851781] dump_stack+0x1b2/0x281 [ 663.851795] warn_alloc.cold+0x96/0x1cc [ 663.854248] active_anon:14218 inactive_anon:6724 isolated_anon:12 [ 663.854248] active_file:2689 inactive_file:5509 isolated_file:12 [ 663.854248] unevictable:0 dirty:129 writeback:0 unstable:0 [ 663.854248] slab_reclaimable:19553 slab_unreclaimable:107231 [ 663.854248] mapped:57637 shmem:6932 pagetables:762 bounce:0 [ 663.854248] free:41910 free_pcp:105 free_cma:0 [ 663.856798] ? zone_watermark_ok_safe+0x220/0x220 [ 663.856822] __alloc_pages_nodemask+0x2127/0x2720 [ 663.863040] Node 0 active_anon:56872kB inactive_anon:26896kB active_file:10604kB inactive_file:21816kB unevictable:0kB isolated(anon):48kB isolated(file):48kB mapped:230276kB dirty:512kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 663.864488] ? io_schedule_timeout+0x140/0x140 [ 663.864522] ? lock_acquire+0x170/0x3f0 [ 663.901342] Node 1 active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:272kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 663.904673] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 663.904693] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 663.911255] Node 0 [ 663.940549] ? __mutex_unlock_slowpath+0x75/0x770 [ 663.940572] alloc_pages_current+0x155/0x260 [ 663.940586] ion_page_pool_alloc+0x118/0x1b0 [ 663.940595] ion_system_heap_allocate+0x133/0x8c0 [ 663.940605] ? ion_alloc+0x187/0x810 [ 663.940615] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 663.940629] ? ion_system_contig_heap_create+0x130/0x130 [ 663.949273] DMA free:11116kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 663.975531] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 663.975545] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 663.975564] ion_alloc+0x204/0x810 [ 663.975578] ? ion_dma_buf_release+0x40/0x40 [ 663.975589] ? __might_fault+0x177/0x1b0 [ 663.975600] ion_ioctl+0xea/0x1f0 [ 663.980579] lowmem_reserve[]: [ 663.985881] ? ion_query_heaps+0x360/0x360 [ 663.985895] ? ion_query_heaps+0x360/0x360 [ 663.988175] 0 [ 663.992969] do_vfs_ioctl+0x75a/0xff0 [ 663.992981] ? ioctl_preallocate+0x1a0/0x1a0 [ 663.992991] ? lock_downgrade+0x740/0x740 [ 663.993004] ? __fget+0x225/0x360 [ 663.993014] ? do_vfs_ioctl+0xff0/0xff0 [ 663.993025] ? security_file_ioctl+0x83/0xb0 [ 663.993035] SyS_ioctl+0x7f/0xb0 [ 664.003994] 2717 [ 664.006682] ? do_vfs_ioctl+0xff0/0xff0 [ 664.006695] do_syscall_64+0x1d5/0x640 [ 664.006710] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 664.006720] RIP: 0033:0x4665f9 [ 664.010510] 2718 [ 664.015880] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 664.015890] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 664.015895] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 664.015901] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 664.015906] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 664.015911] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 664.183454] 2718 2718 [ 664.185981] Node 0 DMA32 free:48040kB min:36200kB low:45248kB high:54296kB active_anon:54748kB inactive_anon:26896kB active_file:10612kB inactive_file:21728kB unevictable:0kB writepending:540kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2900kB bounce:0kB free_pcp:544kB local_pcp:256kB free_cma:0kB [ 664.217151] lowmem_reserve[]: 0 0 0 0 0 [ 664.221248] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.247902] lowmem_reserve[]: 0 0 0 0 0 [ 664.251980] Node 1 Normal free:53640kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:0kB active_file:152kB inactive_file:220kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 664.280236] lowmem_reserve[]: 0 0 0 0 0 [ 664.284258] Node 0 DMA: 3*4kB (UME) 19*8kB (UM) 13*16kB (UE) 6*32kB (UE) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11124kB [ 664.300340] Node 0 DMA32: 550*4kB (ME) 177*8kB (UME) 513*16kB (UME) 1050*32kB (U) 2*64kB (U) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (M) 0*4096kB = 47600kB [ 664.314742] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 664.325568] Node 1 Normal: 72*4kB (UME) 415*8kB (UME) 289*16kB (UE) 81*32kB (UM) 15*64kB (UME) 19*128kB (UM) 6*256kB (UM) 6*512kB (UME) 2*1024kB (UE) 4*2048kB (UM) 6*4096kB (U) = 53640kB [ 664.342534] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.351466] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 664.360390] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 664.369308] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 664.377927] 14522 total pagecache pages [ 664.382001] 0 pages in swap cache [ 664.385452] Swap cache stats: add 0, delete 0, find 0/0 [ 664.391312] Free swap = 0kB [ 664.394329] Total swap = 0kB [ 664.397368] 2097051 pages RAM [ 664.400571] 0 pages HighMem/MovableOnly [ 664.404579] 363849 pages reserved [ 664.408038] 0 pages cma reserved 08:37:47 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) 08:37:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {}, {0xff}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:47 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:47 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x8000) 08:37:47 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={0x0}}, 0x8000) 08:37:47 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:47 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:47 executing program 4: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:47 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {}, {}, 0x1d, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:47 executing program 0: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 665.103757] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:37:47 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:47 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 665.225084] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 665.318502] Bluetooth: hci0 command 0x041b tx timeout [ 665.706903] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 665.722912] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 665.730425] CPU: 0 PID: 26757 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 665.736130] syz-executor.1: [ 665.738326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.738330] Call Trace: [ 665.738352] dump_stack+0x1b2/0x281 [ 665.738366] warn_alloc.cold+0x96/0x1cc [ 665.738378] ? zone_watermark_ok_safe+0x220/0x220 [ 665.738399] __alloc_pages_nodemask+0x2127/0x2720 [ 665.741425] page allocation failure: order:4 [ 665.750754] ? lock_acquire+0x170/0x3f0 [ 665.750770] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 665.750788] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 665.750800] ? __mutex_unlock_slowpath+0x75/0x770 [ 665.750813] alloc_pages_current+0x155/0x260 [ 665.750827] ion_page_pool_alloc+0x118/0x1b0 [ 665.766428] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 665.770614] ion_system_heap_allocate+0x133/0x8c0 [ 665.770624] ? ion_alloc+0x187/0x810 [ 665.770635] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 665.770652] ? ion_system_contig_heap_create+0x130/0x130 [ 665.775046] (null) [ 665.779022] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 665.779035] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 665.779045] ion_alloc+0x204/0x810 [ 665.779059] ? ion_dma_buf_release+0x40/0x40 [ 665.779071] ? __might_fault+0x177/0x1b0 [ 665.779083] ion_ioctl+0xea/0x1f0 [ 665.799326] syz-executor.1 cpuset= [ 665.803072] ? ion_query_heaps+0x360/0x360 [ 665.810186] / [ 665.815079] ? ion_query_heaps+0x360/0x360 [ 665.815090] do_vfs_ioctl+0x75a/0xff0 [ 665.815101] ? ioctl_preallocate+0x1a0/0x1a0 [ 665.815109] ? lock_downgrade+0x740/0x740 [ 665.815123] ? __fget+0x225/0x360 [ 665.819024] mems_allowed=0-1 [ 665.824423] ? do_vfs_ioctl+0xff0/0xff0 [ 665.893667] ? security_file_ioctl+0x83/0xb0 [ 665.898069] SyS_ioctl+0x7f/0xb0 [ 665.901433] ? do_vfs_ioctl+0xff0/0xff0 [ 665.905397] do_syscall_64+0x1d5/0x640 [ 665.909281] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 665.914461] RIP: 0033:0x4665f9 [ 665.917647] RSP: 002b:00007f7316748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.925435] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 665.932696] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 665.940911] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 665.948190] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 665.955451] R13: 00007fffe77c260f R14: 00007f7316748300 R15: 0000000000022000 [ 665.967565] CPU: 1 PID: 26756 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 665.975462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 665.984809] Call Trace: [ 665.987398] dump_stack+0x1b2/0x281 [ 665.991031] warn_alloc.cold+0x96/0x1cc [ 665.995012] ? zone_watermark_ok_safe+0x220/0x220 [ 665.999865] __alloc_pages_nodemask+0x2127/0x2720 [ 666.004708] ? __schedule+0x893/0x1de0 [ 666.008602] ? lock_acquire+0x170/0x3f0 [ 666.012597] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 666.017447] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 666.022929] ? __mutex_unlock_slowpath+0x75/0x770 [ 666.028381] ? retint_kernel+0x2d/0x2d [ 666.032284] alloc_pages_current+0x155/0x260 [ 666.036704] ion_page_pool_alloc+0x118/0x1b0 [ 666.041110] ion_system_heap_allocate+0x133/0x8c0 [ 666.045952] ? ion_alloc+0x187/0x810 [ 666.049668] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 666.055121] ? ion_system_contig_heap_create+0x130/0x130 [ 666.060573] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 666.065590] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 666.070519] ion_alloc+0x204/0x810 [ 666.074070] ? ion_dma_buf_release+0x40/0x40 [ 666.078481] ? __might_fault+0x177/0x1b0 [ 666.082547] ion_ioctl+0xea/0x1f0 [ 666.085999] ? ion_query_heaps+0x360/0x360 [ 666.090234] ? ion_query_heaps+0x360/0x360 [ 666.094583] do_vfs_ioctl+0x75a/0xff0 [ 666.098391] ? ioctl_preallocate+0x1a0/0x1a0 [ 666.102914] ? lock_downgrade+0x740/0x740 [ 666.107078] ? __fget+0x225/0x360 [ 666.110538] ? do_vfs_ioctl+0xff0/0xff0 [ 666.114511] ? security_file_ioctl+0x83/0xb0 [ 666.118921] SyS_ioctl+0x7f/0xb0 [ 666.122284] ? do_vfs_ioctl+0xff0/0xff0 [ 666.126346] do_syscall_64+0x1d5/0x640 [ 666.130238] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 666.135426] RIP: 0033:0x4665f9 [ 666.138699] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 666.146491] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 666.153767] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 666.161037] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 666.168301] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 666.175567] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 666.217040] warn_alloc_show_mem: 1 callbacks suppressed [ 666.217044] Mem-Info: [ 666.234365] active_anon:14143 inactive_anon:6724 isolated_anon:0 [ 666.234365] active_file:3562 inactive_file:3873 isolated_file:18 [ 666.234365] unevictable:0 dirty:145 writeback:0 unstable:0 [ 666.234365] slab_reclaimable:19455 slab_unreclaimable:107180 [ 666.234365] mapped:57553 shmem:6932 pagetables:762 bounce:0 [ 666.234365] free:273376 free_pcp:187 free_cma:0 [ 666.269401] Node 0 active_anon:56552kB inactive_anon:26884kB active_file:14176kB inactive_file:15420kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:230072kB dirty:576kB writeback:0kB shmem:27716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 666.302792] Node 1 active_anon:20kB inactive_anon:12kB active_file:72kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):72kB mapped:140kB dirty:4kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 666.330391] Node 0 DMA free:12080kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:52kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.360289] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 666.365457] Node 0 DMA32 free:288200kB min:36200kB low:45248kB high:54296kB active_anon:56832kB inactive_anon:26884kB active_file:14124kB inactive_file:15420kB unevictable:0kB writepending:576kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3048kB bounce:0kB free_pcp:388kB local_pcp:292kB free_cma:0kB [ 666.406239] lowmem_reserve[]: 0 0 0 0 0 [ 666.414826] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 666.468819] lowmem_reserve[]: 0 0 0 0 0 [ 666.477389] Node 1 Normal free:1115396kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:12kB active_file:72kB inactive_file:72kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:224kB local_pcp:224kB free_cma:0kB [ 666.538316] lowmem_reserve[]: 0 0 0 0 0 [ 666.546852] Node 0 DMA: 2*4kB (UE) 3*8kB (UME) 7*16kB (UME) 7*32kB (UME) 1*64kB (E) 3*128kB (UME) 3*256kB (UME) 3*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 1*4096kB (M) = 12336kB [ 666.564563] Node 0 DMA32: 858*4kB (ME) 227*8kB (UME) 145*16kB (UME) 63*32kB (ME) 529*64kB (UME) 374*128kB (UME) 40*256kB (UE) 9*512kB (U) 159*1024kB (U) 37*2048kB (UM) 18*4096kB (U) = 418480kB [ 666.583230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 666.606297] Node 1 Normal: 77*4kB (UME) 402*8kB (UME) 290*16kB (UME) 81*32kB (UM) 16*64kB (UME) 18*128kB (UM) 6*256kB (UM) 6*512kB (UME) 911*1024kB (UE) 26*2048kB (UM) 27*4096kB (U) = 1115396kB [ 666.624176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.635108] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 666.644679] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 666.654726] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 666.669173] 13834 total pagecache pages [ 666.678102] 0 pages in swap cache [ 666.687344] Swap cache stats: add 0, delete 0, find 0/0 [ 666.693589] Free swap = 0kB [ 666.696683] Total swap = 0kB [ 666.701069] 2097051 pages RAM [ 666.704279] 0 pages HighMem/MovableOnly [ 666.709548] 363849 pages reserved [ 666.713107] 0 pages cma reserved [ 667.405777] Bluetooth: hci0 command 0x040f tx timeout [ 668.323644] syz-executor.1 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 668.337340] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 668.375948] CPU: 0 PID: 7984 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 668.383764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.393133] Call Trace: [ 668.395720] dump_stack+0x1b2/0x281 [ 668.399391] dump_header+0x178/0x82f [ 668.403101] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 668.408198] ? ___ratelimit+0x2cd/0x530 [ 668.412168] oom_kill_process.cold+0x10/0xa40 [ 668.416666] out_of_memory+0xe3e/0x1190 [ 668.420654] ? oom_killer_disable+0x1c0/0x1c0 [ 668.425143] ? mutex_trylock+0x152/0x1a0 [ 668.429200] __alloc_pages_nodemask+0x23e1/0x2720 [ 668.434049] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 668.438915] alloc_pages_current+0x155/0x260 [ 668.443324] filemap_fault+0x11a1/0x1ad0 [ 668.447419] ext4_filemap_fault+0x84/0xb0 [ 668.451564] __do_fault+0xfa/0x380 [ 668.455101] __handle_mm_fault+0x2497/0x4620 [ 668.459503] ? vm_insert_page+0x7c0/0x7c0 [ 668.463644] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 668.468063] ? nanosleep_copyout+0x100/0x100 [ 668.472492] ? mark_held_locks+0xa6/0xf0 [ 668.476550] handle_mm_fault+0x455/0x9c0 [ 668.480610] __do_page_fault+0x549/0xad0 [ 668.484688] ? spurious_fault+0x640/0x640 [ 668.488844] ? do_page_fault+0x60/0x500 [ 668.492908] ? page_fault+0x2f/0x50 [ 668.496534] page_fault+0x45/0x50 [ 668.503891] RIP: a2996:0x2 [ 668.506725] RSP: 2726:00007ffe35df82bc EFLAGS: 0000000f [ 668.601121] Mem-Info: [ 668.609016] active_anon:14146 inactive_anon:6723 isolated_anon:0 [ 668.609016] active_file:14 inactive_file:22 isolated_file:0 [ 668.609016] unevictable:0 dirty:1 writeback:0 unstable:0 [ 668.609016] slab_reclaimable:19391 slab_unreclaimable:106347 [ 668.609016] mapped:52634 shmem:6931 pagetables:740 bounce:0 [ 668.609016] free:25058 free_pcp:31 free_cma:0 [ 668.646872] Node 0 active_anon:56564kB inactive_anon:26880kB active_file:72kB inactive_file:64kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210532kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 668.682843] Node 1 active_anon:20kB inactive_anon:12kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 668.711206] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.744121] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 668.751356] Node 0 DMA32 free:36060kB min:36200kB low:45248kB high:54296kB active_anon:56544kB inactive_anon:26880kB active_file:92kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2960kB bounce:0kB free_pcp:124kB local_pcp:124kB free_cma:0kB [ 668.782615] lowmem_reserve[]: 0 0 0 0 0 [ 668.786615] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.812210] lowmem_reserve[]: 0 0 0 0 0 [ 668.816217] Node 1 Normal free:53344kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:12kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 668.843672] lowmem_reserve[]: 0 0 0 0 0 [ 668.847653] Node 0 DMA: 3*4kB (UME) 3*8kB (UME) 4*16kB (UME) 3*32kB (ME) 2*64kB (UE) 2*128kB (ME) 3*256kB (UME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11076kB [ 668.863539] Node 0 DMA32: 1637*4kB (UME) 767*8kB (UME) 279*16kB (ME) 111*32kB (UME) 72*64kB (UME) 24*128kB (ME) 12*256kB (UME) 5*512kB (M) 2*1024kB (UM) 0*2048kB 0*4096kB = 36060kB [ 668.879953] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 668.890730] Node 1 Normal: 6*4kB (ME) 5*8kB (UME) 4*16kB (ME) 3*32kB (M) 2*64kB (ME) 2*128kB (M) 2*256kB (M) 2*512kB (ME) 2*1024kB (UE) 4*2048kB (UM) 10*4096kB (U) = 53344kB [ 668.906500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 668.915345] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.923965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 668.932840] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 668.943446] 6955 total pagecache pages [ 668.947373] 0 pages in swap cache [ 668.957341] Swap cache stats: add 0, delete 0, find 0/0 [ 668.964906] Free swap = 0kB [ 668.967927] Total swap = 0kB [ 668.975274] 2097051 pages RAM [ 668.980686] 0 pages HighMem/MovableOnly [ 668.984676] 363849 pages reserved [ 668.988113] 0 pages cma reserved [ 668.995855] Out of memory (oom_kill_allocating_task): Kill process 7984 (syz-executor.1) score 0 or sacrifice child [ 669.006862] Killed process 26756 (syz-executor.1) total-vm:93252kB, anon-rss:2196kB, file-rss:34820kB, shmem-rss:0kB [ 669.037367] oom_reaper: reaped process 26756 (syz-executor.1), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 669.055548] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 669.067747] ion_system_heap cpuset=/ mems_allowed=0-1 [ 669.080043] CPU: 0 PID: 4246 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 669.087956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.097320] Call Trace: [ 669.099909] dump_stack+0x1b2/0x281 [ 669.103532] dump_header+0x178/0x82f [ 669.107241] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 669.112340] ? ___ratelimit+0x2cd/0x530 [ 669.116310] oom_kill_process.cold+0x10/0xa40 [ 669.120822] ? lock_downgrade+0x740/0x740 [ 669.124968] out_of_memory+0x2dc/0x1190 [ 669.128948] ? oom_killer_disable+0x1c0/0x1c0 [ 669.133437] ? mutex_trylock+0x152/0x1a0 [ 669.137495] __alloc_pages_nodemask+0x23e1/0x2720 [ 669.142366] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.147226] ? kasan_kmalloc+0xeb/0x160 [ 669.151195] ? ion_heap_deferred_free+0x22a/0x470 [ 669.156032] ? cache_grow_begin+0x3f/0x700 [ 669.160267] cache_grow_begin+0x91/0x700 [ 669.164328] fallback_alloc+0x207/0x2c0 [ 669.168303] kmem_cache_alloc_node_trace+0xed/0x400 [ 669.173316] alloc_vmap_area+0xf0/0x7c0 [ 669.177287] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 669.182729] ? purge_vmap_area_lazy+0xb0/0xb0 [ 669.187214] ? __get_vm_area_node+0xed/0x340 [ 669.191625] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 669.196915] __get_vm_area_node+0x126/0x340 [ 669.201319] vmap+0xd5/0x290 [ 669.204341] ? ion_heap_clear_pages+0x23/0x70 [ 669.208830] ? vunmap+0x50/0x50 [ 669.212101] ? __vunmap+0x21c/0x300 [ 669.215726] ion_heap_clear_pages+0x23/0x70 [ 669.220055] ion_heap_sglist_zero+0x165/0x220 [ 669.224555] ? ion_heap_clear_pages+0x70/0x70 [ 669.229064] ? pagerange_is_ram_callback+0x100/0x100 [ 669.234160] ? ion_heap_deferred_free+0x222/0x470 [ 669.239003] ion_system_heap_free+0x1d0/0x240 [ 669.243494] ion_buffer_destroy+0x132/0x190 [ 669.247810] ion_heap_deferred_free+0x22a/0x470 [ 669.252475] ? __schedule+0x807/0x1de0 [ 669.256366] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 669.261030] ? wait_woken+0x230/0x230 [ 669.264830] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 669.269927] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 669.272649] syz-executor.1: page allocation failure: order:0 [ 669.274612] kthread+0x30d/0x420 [ 669.283862] ? kthread_create_on_node+0xd0/0xd0 [ 669.288528] ret_from_fork+0x24/0x30 [ 669.292425] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 669.302420] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 669.306663] Mem-Info: [ 669.307540] CPU: 1 PID: 26756 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 669.309977] active_anon:13612 inactive_anon:6723 isolated_anon:0 [ 669.309977] active_file:12 inactive_file:12 isolated_file:0 [ 669.309977] unevictable:0 dirty:0 writeback:0 unstable:0 [ 669.309977] slab_reclaimable:19392 slab_unreclaimable:106332 [ 669.309977] mapped:52633 shmem:6931 pagetables:739 bounce:0 [ 669.309977] free:13951 free_pcp:139 free_cma:0 [ 669.317810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 669.351020] Node 0 active_anon:54428kB inactive_anon:26880kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210532kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.360375] Call Trace: [ 669.360399] dump_stack+0x1b2/0x281 [ 669.360413] warn_alloc.cold+0x96/0x1cc [ 669.360427] ? zone_watermark_ok_safe+0x220/0x220 [ 669.388144] Node 1 active_anon:20kB inactive_anon:12kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.390669] ? usleep_range+0x130/0x130 [ 669.390680] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 669.390693] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 669.394297] Node 0 [ 669.398261] ? run_timer_softirq+0x5a0/0x5a0 [ 669.398280] __alloc_pages_nodemask+0x2127/0x2720 [ 669.398297] ? lock_acquire+0x170/0x3f0 [ 669.403119] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.429052] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 669.429063] ? ion_page_pool_alloc+0x9e/0x1b0 [ 669.429080] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 669.429098] alloc_pages_current+0x155/0x260 [ 669.433069] lowmem_reserve[]: [ 669.438163] ion_page_pool_alloc+0x118/0x1b0 [ 669.443180] 0 [ 669.445377] ion_system_heap_allocate+0x133/0x8c0 [ 669.449792] 2717 [ 669.454723] ? ion_alloc+0x187/0x810 [ 669.458691] 2718 [ 669.484264] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 669.484275] ? ion_system_contig_heap_create+0x130/0x130 [ 669.484285] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 669.484297] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 669.484309] ion_alloc+0x204/0x810 [ 669.489167] 2718 [ 669.493628] ? ion_dma_buf_release+0x40/0x40 [ 669.499088] 2718 [ 669.503453] ? __might_fault+0x177/0x1b0 [ 669.511066] ion_ioctl+0xea/0x1f0 [ 669.511078] ? ion_query_heaps+0x360/0x360 [ 669.511089] ? ion_query_heaps+0x360/0x360 [ 669.511099] do_vfs_ioctl+0x75a/0xff0 [ 669.511111] ? ioctl_preallocate+0x1a0/0x1a0 [ 669.512893] Node 0 [ 669.517725] ? lock_downgrade+0x740/0x740 [ 669.517745] ? __fget+0x225/0x360 [ 669.519836] DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:54408kB inactive_anon:26880kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2956kB bounce:0kB free_pcp:436kB local_pcp:320kB free_cma:0kB [ 669.523481] ? do_vfs_ioctl+0xff0/0xff0 [ 669.525513] lowmem_reserve[]: [ 669.530952] ? security_file_ioctl+0x83/0xb0 [ 669.530963] SyS_ioctl+0x7f/0xb0 [ 669.530972] ? do_vfs_ioctl+0xff0/0xff0 [ 669.530983] do_syscall_64+0x1d5/0x640 [ 669.530998] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 669.536418] 0 [ 669.541418] RIP: 0033:0x4665f9 [ 669.541423] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.541433] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 669.541440] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 669.546259] 0 [ 669.549774] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 669.549779] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 669.549785] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 669.558429] warn_alloc_show_mem: 1 callbacks suppressed [ 669.558433] Mem-Info: [ 669.558455] active_anon:13612 inactive_anon:6723 isolated_anon:0 [ 669.558455] active_file:12 inactive_file:12 isolated_file:0 [ 669.558455] unevictable:0 dirty:0 writeback:0 unstable:0 [ 669.558455] slab_reclaimable:19392 slab_unreclaimable:106332 [ 669.558455] mapped:52633 shmem:6931 pagetables:739 bounce:0 [ 669.558455] free:13951 free_pcp:139 free_cma:0 [ 669.558473] Node 0 active_anon:54428kB inactive_anon:26880kB active_file:44kB inactive_file:48kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210532kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.558489] Node 1 active_anon:20kB inactive_anon:12kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 669.558492] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.558512] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 669.558541] Node 0 DMA32 free:18020kB min:36200kB low:45248kB high:54296kB active_anon:54408kB inactive_anon:26880kB active_file:44kB inactive_file:48kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2956kB bounce:0kB free_pcp:436kB local_pcp:116kB free_cma:0kB [ 669.558563] lowmem_reserve[]: 0 0 0 0 0 [ 669.558582] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.558600] lowmem_reserve[]: [ 669.568898] Bluetooth: hci0 command 0x0419 tx timeout [ 669.576744] 0 [ 669.608000] 0 [ 669.629504] 0 [ 669.642860] 0 [ 669.652210] 0 [ 669.661008] 0 [ 669.664085] 0 [ 669.693925] 0 [ 669.708287] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.777674] lowmem_reserve[]: [ 669.805527] Node 1 [ 669.829913] 0 [ 669.865842] Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:12kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 669.893293] 0 [ 669.899278] lowmem_reserve[]: [ 669.908359] 0 [ 669.937958] 0 [ 669.952851] 0 [ 669.972047] 0 0 0 0 [ 669.980795] Node 0 DMA: 2*4kB (ME) 3*8kB (UME) 4*16kB (UME) 4*32kB (UME) 2*64kB (UE) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 669.986656] 0 [ 670.001135] Node 0 DMA32: 1467*4kB (UME) 656*8kB (UME) 200*16kB (UME) 58*32kB (UM) 31*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18540kB [ 670.017706] Node 1 Normal free:26908kB min:53696kB low:67120kB high:80544kB active_anon:20kB inactive_anon:12kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 670.017750] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 670.061605] lowmem_reserve[]: 0 0 0 0 0 [ 670.062467] Node 1 [ 670.066400] Node 0 [ 670.066409] Normal: 6*4kB (ME) 5*8kB (UME) 5*16kB (UME) 3*32kB (M) 3*64kB (UME) 3*128kB (UM) 2*256kB (M) 2*512kB (ME) 2*1024kB (UE) 3*2048kB (M) 4*4096kB (U) = 26928kB [ 670.082787] DMA: [ 670.094804] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.104537] 2*4kB (ME) 3*8kB (UME) 4*16kB (UME) 4*32kB (UME) 2*64kB (UE) 3*128kB [ 670.105749] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.105751] (UME) 2*256kB [ 670.117509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.137315] (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 10976kB [ 670.138092] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 670.156640] Node 0 DMA32: 1436*4kB (UME) 663*8kB (UME) 200*16kB (UME) 58*32kB (UM) 31*64kB (UM) 3*128kB (UM) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18472kB [ 670.157831] 6955 total pagecache pages [ 670.179719] 0 pages in swap cache [ 670.183173] Swap cache stats: add 0, delete 0, find 0/0 [ 670.186045] Node 0 [ 670.188605] Free swap = 0kB [ 670.188609] Total swap = 0kB [ 670.188615] 2097051 pages RAM [ 670.188619] 0 pages HighMem/MovableOnly [ 670.188625] 363849 pages reserved [ 670.196771] Normal: [ 670.196860] 0 pages cma reserved [ 670.207892] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 670.536446] Node 1 Normal: 6*4kB (ME) 5*8kB (UME) 5*16kB (UME) 3*32kB (M) 3*64kB (UME) 3*128kB (UM) 2*256kB (M) 2*512kB (ME) 336*1024kB (UE) 3*2048kB (M) 4*4096kB (U) = 368944kB [ 670.553555] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 670.564363] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB 08:37:52 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:52 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:52 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:52 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:52 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 670.725130] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 671.158511] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 671.183416] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 671.580597] 10498 total pagecache pages [ 671.715121] 0 pages in swap cache [ 671.725324] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 671.740730] syz-executor.1: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 671.740770] syz-executor.3 cpuset= [ 671.752542] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 671.765355] (null) [ 671.767976] syz-executor.0 cpuset= [ 671.770109] / mems_allowed=0-1 [ 671.776880] CPU: 1 PID: 26790 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 671.782621] syz-executor.1 cpuset= [ 671.784752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 671.784757] Call Trace: [ 671.784779] dump_stack+0x1b2/0x281 [ 671.784792] warn_alloc.cold+0x96/0x1cc [ 671.794970] / [ 671.798757] ? zone_watermark_ok_safe+0x220/0x220 [ 671.810983] mems_allowed=0-1 [ 671.815427] __alloc_pages_nodemask+0x2127/0x2720 [ 671.815451] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 671.828189] ? migrate_swap_stop+0x880/0x880 [ 671.832594] ? lock_acquire+0x170/0x3f0 [ 671.836577] ? wake_up_q+0x82/0xd0 [ 671.840120] ? __mutex_unlock_slowpath+0x261/0x770 [ 671.845049] alloc_pages_current+0x155/0x260 [ 671.849457] ion_page_pool_alloc+0x118/0x1b0 [ 671.853862] ion_system_heap_allocate+0x133/0x8c0 [ 671.858700] ? ion_alloc+0x187/0x810 [ 671.862407] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 671.867857] ? ion_system_contig_heap_create+0x130/0x130 [ 671.873354] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 671.878367] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 671.883202] ion_alloc+0x204/0x810 [ 671.886749] ? ion_dma_buf_release+0x40/0x40 [ 671.891153] ? __might_fault+0x177/0x1b0 [ 671.895209] ion_ioctl+0xea/0x1f0 [ 671.898658] ? ion_query_heaps+0x360/0x360 [ 671.902887] ? ion_query_heaps+0x360/0x360 [ 671.907113] do_vfs_ioctl+0x75a/0xff0 [ 671.910909] ? ioctl_preallocate+0x1a0/0x1a0 [ 671.915316] ? lock_downgrade+0x740/0x740 [ 671.919468] ? __fget+0x225/0x360 [ 671.922917] ? do_vfs_ioctl+0xff0/0xff0 [ 671.926884] ? security_file_ioctl+0x83/0xb0 [ 671.931282] SyS_ioctl+0x7f/0xb0 [ 671.934638] ? do_vfs_ioctl+0xff0/0xff0 [ 671.938609] do_syscall_64+0x1d5/0x640 [ 671.942494] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 671.947672] RIP: 0033:0x4665f9 [ 671.950852] RSP: 002b:00007f7316748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 671.958553] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 671.966681] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 671.973948] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 671.981214] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 671.988564] R13: 00007fffe77c260f R14: 00007f7316748300 R15: 0000000000022000 [ 671.995842] CPU: 0 PID: 26756 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 671.996449] / [ 672.003814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.003875] mems_allowed=0-1 [ 672.005520] Call Trace: [ 672.020547] dump_stack+0x1b2/0x281 [ 672.024174] warn_alloc.cold+0x96/0x1cc [ 672.028141] ? zone_watermark_ok_safe+0x220/0x220 [ 672.032992] __alloc_pages_nodemask+0x2127/0x2720 [ 672.037842] ? lock_acquire+0x170/0x3f0 [ 672.041826] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.046680] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 672.052122] ? __mutex_unlock_slowpath+0x75/0x770 [ 672.056972] alloc_pages_current+0x155/0x260 [ 672.061378] ion_page_pool_alloc+0x118/0x1b0 [ 672.065780] ion_system_heap_allocate+0x133/0x8c0 [ 672.070622] ? _raw_spin_unlock+0x29/0x40 [ 672.074759] ? _ion_heap_freelist_drain+0x6e/0x410 [ 672.079681] ? ion_system_contig_heap_create+0x130/0x130 [ 672.085123] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.090131] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 672.094962] ion_alloc+0x27a/0x810 [ 672.098511] ? ion_dma_buf_release+0x40/0x40 [ 672.102914] ? __might_fault+0x177/0x1b0 [ 672.106965] ion_ioctl+0xea/0x1f0 [ 672.110406] ? ion_query_heaps+0x360/0x360 [ 672.114631] ? ion_query_heaps+0x360/0x360 [ 672.118875] do_vfs_ioctl+0x75a/0xff0 [ 672.122672] ? ioctl_preallocate+0x1a0/0x1a0 [ 672.127071] ? lock_downgrade+0x740/0x740 [ 672.131210] ? __fget+0x225/0x360 [ 672.134653] ? do_vfs_ioctl+0xff0/0xff0 [ 672.138616] ? security_file_ioctl+0x83/0xb0 [ 672.143010] SyS_ioctl+0x7f/0xb0 [ 672.146362] ? do_vfs_ioctl+0xff0/0xff0 [ 672.150328] do_syscall_64+0x1d5/0x640 [ 672.154230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 672.159420] RIP: 0033:0x4665f9 [ 672.162599] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.170294] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 672.177549] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 672.184806] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 672.192061] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 672.199321] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 672.219337] CPU: 0 PID: 26785 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 672.227252] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 672.236620] Call Trace: [ 672.239214] dump_stack+0x1b2/0x281 [ 672.242853] warn_alloc.cold+0x96/0x1cc [ 672.246824] ? zone_watermark_ok_safe+0x220/0x220 [ 672.250838] Mem-Info: [ 672.251680] __alloc_pages_nodemask+0x2127/0x2720 [ 672.254078] active_anon:14164 inactive_anon:6719 isolated_anon:0 [ 672.254078] active_file:952 inactive_file:2615 isolated_file:0 [ 672.254078] unevictable:0 dirty:63 writeback:0 unstable:0 [ 672.254078] slab_reclaimable:19388 slab_unreclaimable:107575 [ 672.254078] mapped:55160 shmem:6931 pagetables:765 bounce:0 [ 672.254078] free:143891 free_pcp:344 free_cma:0 [ 672.258902] ? __schedule+0x893/0x1de0 [ 672.258919] ? lock_acquire+0x170/0x3f0 [ 672.258934] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 672.258950] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 672.258963] ? __mutex_unlock_slowpath+0x75/0x770 [ 672.258978] alloc_pages_current+0x155/0x260 [ 672.258991] ion_page_pool_alloc+0x118/0x1b0 [ 672.259000] ion_system_heap_allocate+0x133/0x8c0 [ 672.259009] ? ion_alloc+0x187/0x810 [ 672.259018] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 672.259027] ? ion_system_contig_heap_create+0x130/0x130 [ 672.259055] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 672.348836] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 672.353680] ion_alloc+0x204/0x810 [ 672.357220] ? ion_dma_buf_release+0x40/0x40 [ 672.361625] ? __might_fault+0x177/0x1b0 [ 672.365682] ion_ioctl+0xea/0x1f0 [ 672.369129] ? ion_query_heaps+0x360/0x360 [ 672.373360] ? ion_query_heaps+0x360/0x360 [ 672.377611] do_vfs_ioctl+0x75a/0xff0 [ 672.378336] Node 0 active_anon:56656kB inactive_anon:26872kB active_file:3808kB inactive_file:10456kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:220640kB dirty:248kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.381404] ? ioctl_preallocate+0x1a0/0x1a0 [ 672.414287] ? lock_downgrade+0x740/0x740 [ 672.418431] ? __fget+0x225/0x360 [ 672.421890] ? do_vfs_ioctl+0xff0/0xff0 [ 672.425867] ? security_file_ioctl+0x83/0xb0 [ 672.430274] SyS_ioctl+0x7f/0xb0 [ 672.433646] ? do_vfs_ioctl+0xff0/0xff0 [ 672.437617] do_syscall_64+0x1d5/0x640 [ 672.441502] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 672.446688] RIP: 0033:0x4665f9 [ 672.449866] RSP: 002b:00007f11cbb2c188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 672.457574] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 672.458305] Node 1 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 672.464842] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 672.464851] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 672.505040] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 672.512314] R13: 00007ffd14e117ff R14: 00007f11cbb2c300 R15: 0000000000022000 [ 672.539399] Node 0 DMA free:10980kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.598334] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 672.603490] Node 0 DMA32 free:190076kB min:36200kB low:45248kB high:54296kB active_anon:56656kB inactive_anon:26872kB active_file:3808kB inactive_file:10456kB unevictable:0kB writepending:248kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3060kB bounce:0kB free_pcp:656kB local_pcp:620kB free_cma:0kB [ 672.668300] lowmem_reserve[]: 0 0 0 0 0 [ 672.672333] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 672.723832] lowmem_reserve[]: 0 0 0 0 0 [ 672.732497] Node 1 Normal free:537948kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:1256kB local_pcp:628kB free_cma:0kB [ 672.791698] lowmem_reserve[]: 0 0 0 0 0 [ 672.800359] Node 0 DMA: 7*4kB (UE) 5*8kB (UE) 6*16kB (UE) 6*32kB (UE) 2*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10980kB [ 672.833367] Node 0 DMA32: 612*4kB (UME) 136*8kB (ME) 28*16kB (ME) 1184*32kB (UM) 1444*64kB (UM) 241*128kB (UM) 42*256kB (U) 12*512kB (U) 9*1024kB (U) 1*2048kB (U) 0*4096kB = 193296kB [ 672.867912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 672.890222] Node 1 Normal: 83*4kB (U) 411*8kB (U) 302*16kB (U) 93*32kB (U) 2332*64kB (U) 2204*128kB (U) 94*256kB (U) 53*512kB (U) 39*1024kB (U) 2*2048kB (U) 0*4096kB = 538020kB [ 672.910939] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.919936] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 672.930100] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 672.939974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 672.949382] 10474 total pagecache pages [ 672.953439] 0 pages in swap cache [ 672.956962] Swap cache stats: add 0, delete 0, find 0/0 [ 672.964053] Free swap = 0kB [ 672.967147] Total swap = 0kB [ 672.971309] 2097051 pages RAM [ 672.974497] 0 pages HighMem/MovableOnly [ 672.980037] 363849 pages reserved [ 672.983573] 0 pages cma reserved [ 672.989403] Swap cache stats: add 0, delete 0, find 0/0 [ 673.005762] Free swap = 0kB [ 673.015568] Total swap = 0kB [ 673.027582] 2097051 pages RAM [ 673.055743] 0 pages HighMem/MovableOnly [ 673.082758] 363849 pages reserved [ 673.104341] 0 pages cma reserved [ 673.119740] Out of memory: Kill process 26752 (syz-executor.3) score 1005 or sacrifice child [ 673.539079] syz-executor.1 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 673.552757] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 673.558702] CPU: 0 PID: 26756 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 673.566584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 673.575933] Call Trace: [ 673.578533] dump_stack+0x1b2/0x281 [ 673.582331] dump_header+0x178/0x82f [ 673.586041] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 673.591136] ? ___ratelimit+0x2cd/0x530 [ 673.595104] oom_kill_process.cold+0x10/0xa40 [ 673.599610] out_of_memory+0xe3e/0x1190 [ 673.603582] ? oom_killer_disable+0x1c0/0x1c0 [ 673.608065] ? mutex_trylock+0x152/0x1a0 [ 673.612119] __alloc_pages_nodemask+0x23e1/0x2720 [ 673.616957] ? lock_acquire+0x170/0x3f0 [ 673.620944] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 673.625775] ? ion_page_pool_alloc+0x9e/0x1b0 [ 673.630274] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 673.635750] ? alloc_pages_current+0x73/0x260 [ 673.640257] alloc_pages_current+0x155/0x260 [ 673.644674] ion_page_pool_alloc+0x118/0x1b0 [ 673.649089] ion_system_heap_allocate+0x133/0x8c0 [ 673.653937] ? _raw_spin_unlock+0x29/0x40 [ 673.658081] ? _ion_heap_freelist_drain+0x6e/0x410 [ 673.663015] ? ion_system_contig_heap_create+0x130/0x130 [ 673.668466] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 673.673499] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 673.678340] ion_alloc+0x27a/0x810 [ 673.681890] ? ion_dma_buf_release+0x40/0x40 [ 673.686727] ? __might_fault+0x177/0x1b0 [ 673.690781] ion_ioctl+0xea/0x1f0 [ 673.694226] ? ion_query_heaps+0x360/0x360 [ 673.698456] ? ion_query_heaps+0x360/0x360 [ 673.702679] do_vfs_ioctl+0x75a/0xff0 [ 673.706478] ? ioctl_preallocate+0x1a0/0x1a0 [ 673.711058] ? lock_downgrade+0x740/0x740 [ 673.715198] ? __fget+0x225/0x360 [ 673.718642] ? do_vfs_ioctl+0xff0/0xff0 [ 673.722608] ? security_file_ioctl+0x83/0xb0 [ 673.727005] SyS_ioctl+0x7f/0xb0 [ 673.730373] ? do_vfs_ioctl+0xff0/0xff0 [ 673.734342] do_syscall_64+0x1d5/0x640 [ 673.738230] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 673.743416] RIP: 0033:0x4665f9 [ 673.746599] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 673.754304] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 673.761830] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 673.769190] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 673.776478] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 673.783741] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 673.799511] Mem-Info: [ 673.801960] active_anon:14178 inactive_anon:6719 isolated_anon:0 [ 673.801960] active_file:37 inactive_file:21 isolated_file:0 [ 673.801960] unevictable:0 dirty:25 writeback:0 unstable:0 [ 673.801960] slab_reclaimable:19357 slab_unreclaimable:107688 [ 673.801960] mapped:52747 shmem:6931 pagetables:765 bounce:0 [ 673.801960] free:13737 free_pcp:7 free_cma:0 [ 673.842013] Node 0 active_anon:56712kB inactive_anon:26872kB active_file:48kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210888kB dirty:96kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.882593] Node 1 active_anon:0kB inactive_anon:4kB active_file:100kB inactive_file:72kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100kB dirty:4kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 673.928107] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 673.960490] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 673.965566] Node 0 DMA32 free:17684kB min:36200kB low:45248kB high:54296kB active_anon:56712kB inactive_anon:26872kB active_file:440kB inactive_file:184kB unevictable:0kB writepending:296kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3060kB bounce:0kB free_pcp:28kB local_pcp:0kB free_cma:0kB [ 674.000870] lowmem_reserve[]: 0 0 0 0 0 [ 674.004883] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.036600] lowmem_reserve[]: 0 0 0 0 0 [ 674.043411] Node 1 Normal free:26716kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:12kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.079144] lowmem_reserve[]: 0 0 0 0 0 [ 674.083162] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 7*16kB (UE) 6*32kB (UE) 2*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10960kB [ 674.105091] Node 0 DMA32: 1471*4kB (UME) 861*8kB (UME) 218*16kB (UME) 54*32kB (M) 17*64kB (UM) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 19588kB [ 674.128085] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 674.146855] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 22*1024kB (U) 2*2048kB (UM) 0*4096kB = 26836kB [ 674.168132] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.177498] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.194865] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 674.203789] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 674.217832] 6954 total pagecache pages [ 674.233432] 0 pages in swap cache [ 674.236901] Swap cache stats: add 0, delete 0, find 0/0 [ 674.246336] Free swap = 0kB [ 674.253831] Total swap = 0kB [ 674.256857] 2097051 pages RAM [ 674.263982] 0 pages HighMem/MovableOnly [ 674.275156] 363849 pages reserved [ 674.280910] 0 pages cma reserved [ 674.284287] Out of memory (oom_kill_allocating_task): Kill process 26756 (syz-executor.1) score 0 or sacrifice child [ 674.297646] Killed process 26756 (syz-executor.1) total-vm:93252kB, anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 674.320115] syz-executor.1: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 674.343290] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 674.364560] syz-executor.1 cpuset=/ mems_allowed=0-1 [ 674.369760] CPU: 0 PID: 26756 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 674.377656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.387005] Call Trace: [ 674.389779] dump_stack+0x1b2/0x281 [ 674.393426] warn_alloc.cold+0x96/0x1cc [ 674.397405] ? zone_watermark_ok_safe+0x220/0x220 [ 674.402262] ? wait_for_completion_io+0x10/0x10 [ 674.402562] syz-fuzzer cpuset=/ [ 674.406940] __alloc_pages_nodemask+0x2127/0x2720 [ 674.406962] ? lock_acquire+0x170/0x3f0 [ 674.406976] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.406986] ? ion_page_pool_alloc+0x9e/0x1b0 [ 674.427890] mems_allowed=0-1 [ 674.428489] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 674.428506] ? alloc_pages_current+0x73/0x260 [ 674.428517] alloc_pages_current+0x155/0x260 [ 674.428531] ion_page_pool_alloc+0x118/0x1b0 [ 674.428541] ion_system_heap_allocate+0x133/0x8c0 [ 674.428553] ? _raw_spin_unlock+0x29/0x40 [ 674.428561] ? _ion_heap_freelist_drain+0x6e/0x410 [ 674.428569] ? ion_system_contig_heap_create+0x130/0x130 [ 674.428580] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 674.428592] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 674.442531] syz-executor.3: [ 674.446087] ion_alloc+0x27a/0x810 [ 674.474525] page allocation failure: order:0 [ 674.474784] ? ion_dma_buf_release+0x40/0x40 [ 674.494941] ? __might_fault+0x177/0x1b0 [ 674.499005] ion_ioctl+0xea/0x1f0 [ 674.502458] ? ion_query_heaps+0x360/0x360 [ 674.502554] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 674.506693] ? ion_query_heaps+0x360/0x360 [ 674.506704] do_vfs_ioctl+0x75a/0xff0 [ 674.522448] ? ioctl_preallocate+0x1a0/0x1a0 [ 674.526878] ? lock_downgrade+0x740/0x740 [ 674.531031] ? __fget+0x225/0x360 [ 674.534483] ? do_vfs_ioctl+0xff0/0xff0 [ 674.538454] ? security_file_ioctl+0x83/0xb0 [ 674.542860] SyS_ioctl+0x7f/0xb0 [ 674.546220] ? do_vfs_ioctl+0xff0/0xff0 [ 674.546907] syz-executor.3 cpuset= [ 674.550210] do_syscall_64+0x1d5/0x640 [ 674.550224] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 674.550232] RIP: 0033:0x4665f9 [ 674.550237] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.550246] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 674.550251] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 674.550255] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 674.550260] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 674.550265] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 674.557270] CPU: 0 PID: 7962 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 674.566637] / [ 674.573757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.591737] mems_allowed=0-1 [ 674.595543] Call Trace: [ 674.605501] warn_alloc_show_mem: 2 callbacks suppressed [ 674.605504] Mem-Info: [ 674.610171] dump_stack+0x1b2/0x281 [ 674.610184] dump_header+0x178/0x82f [ 674.610195] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 674.610203] ? ___ratelimit+0x2cd/0x530 [ 674.610214] oom_kill_process.cold+0x10/0xa40 [ 674.610233] out_of_memory+0xe3e/0x1190 [ 674.610247] ? oom_killer_disable+0x1c0/0x1c0 [ 674.666904] active_anon:14178 inactive_anon:6723 isolated_anon:0 [ 674.666904] active_file:3 inactive_file:20 isolated_file:0 [ 674.666904] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.666904] slab_reclaimable:19356 slab_unreclaimable:107290 [ 674.666904] mapped:52683 shmem:6931 pagetables:765 bounce:0 [ 674.666904] free:13972 free_pcp:30 free_cma:0 [ 674.668369] ? mutex_trylock+0x152/0x1a0 [ 674.668382] __alloc_pages_nodemask+0x23e1/0x2720 [ 674.668403] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.668426] alloc_pages_current+0x155/0x260 [ 674.668438] filemap_fault+0x11a1/0x1ad0 [ 674.668457] ext4_filemap_fault+0x84/0xb0 [ 674.674586] Node 0 active_anon:56712kB inactive_anon:26888kB active_file:12kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210732kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.705862] __do_fault+0xfa/0x380 [ 674.705873] __handle_mm_fault+0x2497/0x4620 [ 674.705882] ? vm_insert_page+0x7c0/0x7c0 [ 674.705898] ? mark_held_locks+0xa6/0xf0 [ 674.705908] handle_mm_fault+0x455/0x9c0 [ 674.705919] __do_page_fault+0x549/0xad0 [ 674.705930] ? spurious_fault+0x640/0x640 [ 674.705939] ? do_page_fault+0x60/0x500 [ 674.705948] ? page_fault+0x2f/0x50 [ 674.705955] page_fault+0x45/0x50 [ 674.705963] RIP: 0f00:0x4 [ 674.705967] RSP: 03c8:000000c000039e40 EFLAGS: 00000003 [ 674.724046] Mem-Info: [ 674.724591] CPU: 1 PID: 26790 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 674.730613] active_anon:14178 inactive_anon:6723 isolated_anon:0 [ 674.730613] active_file:3 inactive_file:20 isolated_file:0 [ 674.730613] unevictable:0 dirty:0 writeback:0 unstable:0 [ 674.730613] slab_reclaimable:19356 slab_unreclaimable:107290 [ 674.730613] mapped:52683 shmem:6931 pagetables:765 bounce:0 [ 674.730613] free:13972 free_pcp:30 free_cma:0 [ 674.732575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 674.760295] Node 0 active_anon:56712kB inactive_anon:26888kB active_file:12kB inactive_file:76kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210732kB dirty:0kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.763763] Call Trace: [ 674.768190] Node 1 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.772352] dump_stack+0x1b2/0x281 [ 674.772365] warn_alloc.cold+0x96/0x1cc [ 674.772377] ? zone_watermark_ok_safe+0x220/0x220 [ 674.772389] ? usleep_range+0x130/0x130 [ 674.776443] Node 0 [ 674.780496] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 674.780509] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 674.780519] ? run_timer_softirq+0x5a0/0x5a0 [ 674.780536] __alloc_pages_nodemask+0x2127/0x2720 [ 674.784588] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 674.788739] ? lock_acquire+0x170/0x3f0 [ 674.788759] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 674.792712] lowmem_reserve[]: [ 674.796349] ? ion_page_pool_alloc+0x9e/0x1b0 [ 674.799807] 0 [ 674.802520] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 674.807856] 2717 [ 674.810257] ? __sanitizer_cov_trace_pc+0x23/0x50 [ 674.810271] alloc_pages_current+0x155/0x260 [ 674.810288] ion_page_pool_alloc+0x118/0x1b0 [ 674.818163] 2718 [ 674.851063] ion_system_heap_allocate+0x133/0x8c0 [ 674.851073] ? ion_alloc+0x187/0x810 [ 674.851083] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 674.851091] ? ion_system_contig_heap_create+0x130/0x130 [ 674.851101] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 674.851116] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 674.860500] 2718 [ 674.888163] ion_alloc+0x204/0x810 [ 674.888178] ? ion_dma_buf_release+0x40/0x40 [ 674.888190] ? __might_fault+0x177/0x1b0 [ 674.888201] ion_ioctl+0xea/0x1f0 [ 674.890815] 2718 [ 674.916566] ? ion_query_heaps+0x360/0x360 [ 674.916577] ? ion_query_heaps+0x360/0x360 [ 674.916587] do_vfs_ioctl+0x75a/0xff0 [ 674.916598] ? ioctl_preallocate+0x1a0/0x1a0 [ 674.916612] ? lock_downgrade+0x740/0x740 [ 674.924218] ? __fget+0x225/0x360 [ 674.929076] Node 0 [ 674.933011] ? do_vfs_ioctl+0xff0/0xff0 [ 674.935234] DMA32 free:18092kB min:36200kB low:45248kB high:54296kB active_anon:56712kB inactive_anon:26888kB active_file:12kB inactive_file:76kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3060kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 674.940319] ? security_file_ioctl+0x83/0xb0 [ 674.940329] SyS_ioctl+0x7f/0xb0 [ 674.940337] ? do_vfs_ioctl+0xff0/0xff0 [ 674.940350] do_syscall_64+0x1d5/0x640 [ 674.945342] lowmem_reserve[]: [ 674.949766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 674.949775] RIP: 0033:0x4665f9 [ 674.949780] RSP: 002b:00007f7316748188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 674.949793] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 674.954705] 0 [ 674.981297] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 674.981303] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 674.981307] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 674.981312] R13: 00007fffe77c260f R14: 00007f7316748300 R15: 0000000000022000 [ 674.982255] Node 1 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 674.999967] 0 0 0 0 [ 674.999984] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.000003] lowmem_reserve[]: 0 0 0 0 0 [ 675.000020] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.000036] lowmem_reserve[]: 0 0 0 0 0 [ 675.000056] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 7*16kB (UE) 6*32kB (UE) 2*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10960kB [ 675.000133] Node 0 DMA32: 1468*4kB (UME) 664*8kB (UME) 216*16kB (ME) 54*32kB (M) 17*64kB (UM) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17968kB [ 675.000194] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 675.000242] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 1*64kB (U) 1*128kB (U) 0*256kB 0*512kB 22*1024kB (U) 2*2048kB (UM) 0*4096kB = 26836kB [ 675.000311] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.000317] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.000323] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 675.000329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 675.000332] 6954 total pagecache pages [ 675.000342] 0 pages in swap cache [ 675.000347] Swap cache stats: add 0, delete 0, find 0/0 [ 675.000351] Free swap = 0kB [ 675.000354] Total swap = 0kB [ 675.000361] 2097051 pages RAM [ 675.000364] 0 pages HighMem/MovableOnly [ 675.000368] 363849 pages reserved [ 675.000371] 0 pages cma reserved [ 675.000378] Out of memory (oom_kill_allocating_task): Kill process 7962 (syz-fuzzer) score 0 or sacrifice child [ 675.000444] Killed process 7973 (syz-executor.0) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 675.031215] oom_reaper: reaped process 26790 (syz-executor.3), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 675.034959] Node 0 [ 675.050394] syz-executor.3 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 675.055625] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.055644] (null) [ 675.059225] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 675.059246] Node 0 DMA32 free:20016kB min:36200kB low:45248kB high:54296kB active_anon:54588kB inactive_anon:26888kB active_file:4kB inactive_file:84kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7712kB pagetables:3060kB bounce:0kB free_pcp:376kB local_pcp:120kB free_cma:0kB [ 675.059272] lowmem_reserve[]: [ 675.082181] , order=0, oom_score_adj=0 [ 675.087864] 0 [ 675.106471] syz-executor.3 cpuset= [ 675.134534] 0 [ 675.153777] / [ 675.157866] 0 [ 675.173589] mems_allowed=0-1 [ 675.175561] 0 [ 675.176444] CPU: 0 PID: 26463 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 675.183750] 0 [ 675.190970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 675.190975] Call Trace: [ 675.190995] dump_stack+0x1b2/0x281 [ 675.191007] dump_header+0x178/0x82f [ 675.191017] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 675.191025] ? ___ratelimit+0x2cd/0x530 [ 675.191034] oom_kill_process.cold+0x10/0xa40 [ 675.191052] out_of_memory+0xe3e/0x1190 [ 675.191065] ? oom_killer_disable+0x1c0/0x1c0 [ 675.205610] ? mutex_trylock+0x152/0x1a0 [ 675.233867] Node 0 [ 675.259343] __alloc_pages_nodemask+0x23e1/0x2720 [ 675.259364] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 675.259386] alloc_pages_current+0x155/0x260 [ 675.259397] filemap_fault+0x11a1/0x1ad0 [ 675.259415] ext4_filemap_fault+0x84/0xb0 [ 675.259425] __do_fault+0xfa/0x380 [ 675.259433] __handle_mm_fault+0x2497/0x4620 [ 675.259442] ? vm_insert_page+0x7c0/0x7c0 [ 675.259449] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 675.259457] ? nanosleep_copyout+0x100/0x100 [ 675.259471] ? mark_held_locks+0xa6/0xf0 [ 675.265972] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.290694] handle_mm_fault+0x455/0x9c0 [ 675.290710] __do_page_fault+0x549/0xad0 [ 675.290720] ? spurious_fault+0x640/0x640 [ 675.290728] ? do_page_fault+0x60/0x500 [ 675.290736] ? page_fault+0x2f/0x50 [ 675.290742] page_fault+0x45/0x50 [ 675.290750] RIP: a3f64:0x5 [ 675.290753] RSP: 000b:00007fffe77c28cc EFLAGS: 00000064 [ 675.308764] Mem-Info: [ 675.312165] lowmem_reserve[]: [ 675.508315] active_anon:13632 inactive_anon:6723 isolated_anon:0 [ 675.508315] active_file:60 inactive_file:549 isolated_file:0 [ 675.508315] unevictable:0 dirty:0 writeback:0 unstable:0 [ 675.508315] slab_reclaimable:19356 slab_unreclaimable:107297 [ 675.508315] mapped:53008 shmem:6931 pagetables:742 bounce:0 [ 675.508315] free:45835 free_pcp:137 free_cma:0 [ 675.524463] 0 [ 675.768308] Node 0 active_anon:54528kB inactive_anon:26888kB active_file:244kB inactive_file:3788kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213932kB dirty:100kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 675.828857] Node 1 active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 675.856608] Node 0 DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.883287] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 675.888381] Node 0 DMA32 free:20648kB min:36200kB low:45248kB high:54296kB active_anon:54528kB inactive_anon:26888kB active_file:504kB inactive_file:852kB unevictable:0kB writepending:148kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2968kB bounce:0kB free_pcp:628kB local_pcp:0kB free_cma:0kB [ 675.915377] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 675.917653] lowmem_reserve[]: 0 0 0 0 0 [ 675.933486] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.935830] syz-executor.3 cpuset= [ 675.959400] lowmem_reserve[]: 0 0 0 0 0 [ 675.959422] Node 1 Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 675.959447] lowmem_reserve[]: [ 675.969759] / [ 675.995708] 0 0 0 0 0 [ 676.001553] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 7*16kB (UE) 6*32kB (UE) 3*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11024kB [ 676.004117] mems_allowed=0-1 [ 676.016964] Node 0 DMA32: 1441*4kB (UME) 686*8kB (UME) 218*16kB (UME) 57*32kB (UM) 17*64kB (UM) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18164kB [ 676.028635] 0 0 0 0 [ 676.035301] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.038911] CPU: 0 PID: 26790 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 676.048878] Node 1 [ 676.057667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 676.057677] Normal: [ 676.059893] Call Trace: [ 676.059915] dump_stack+0x1b2/0x281 [ 676.059928] warn_alloc.cold+0x96/0x1cc [ 676.059939] ? zone_watermark_ok_safe+0x220/0x220 [ 676.059961] __alloc_pages_nodemask+0x2127/0x2720 [ 676.069388] 1*4kB [ 676.071666] ? lock_acquire+0x170/0x3f0 [ 676.074212] (U) [ 676.077843] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 676.081838] 0*8kB [ 676.086814] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 676.091752] 1*16kB [ 676.093806] ? __mutex_unlock_slowpath+0x75/0x770 [ 676.097749] (U) 0*32kB 225*64kB (U) [ 676.099723] ? __list_del_entry_valid+0xb3/0xf0 [ 676.099737] alloc_pages_current+0x155/0x260 [ 676.099752] ion_page_pool_alloc+0x118/0x1b0 [ 676.099761] ion_system_heap_allocate+0x133/0x8c0 [ 676.104598] Node 1 [ 676.106735] ? _raw_spin_unlock+0x29/0x40 [ 676.112234] Normal free:26836kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.114397] ? _ion_heap_freelist_drain+0x6e/0x410 [ 676.119249] 55*128kB [ 676.122909] ? ion_system_contig_heap_create+0x130/0x130 [ 676.127571] (U) 5*256kB (U) 6*512kB [ 676.131981] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 676.131994] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 676.132005] ion_alloc+0x27a/0x810 [ 676.132018] ? ion_dma_buf_release+0x40/0x40 [ 676.132030] ? __might_fault+0x177/0x1b0 [ 676.132041] ion_ioctl+0xea/0x1f0 [ 676.132050] ? ion_query_heaps+0x360/0x360 [ 676.132062] ? ion_query_heaps+0x360/0x360 [ 676.136463] lowmem_reserve[]: [ 676.141277] do_vfs_ioctl+0x75a/0xff0 [ 676.141290] ? ioctl_preallocate+0x1a0/0x1a0 [ 676.141299] ? lock_downgrade+0x740/0x740 [ 676.141312] ? __fget+0x225/0x360 [ 676.141322] ? do_vfs_ioctl+0xff0/0xff0 [ 676.143538] 0 [ 676.147676] ? security_file_ioctl+0x83/0xb0 [ 676.174384] (U) [ 676.179751] SyS_ioctl+0x7f/0xb0 [ 676.179761] ? do_vfs_ioctl+0xff0/0xff0 [ 676.179777] do_syscall_64+0x1d5/0x640 [ 676.182175] 1*1024kB [ 676.187638] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 676.191382] (U) [ 676.196320] RIP: 0033:0x4665f9 [ 676.201249] 0 [ 676.204718] RSP: 002b:00007f7316748188 EFLAGS: 00000246 [ 676.209163] 0*2048kB [ 676.213149] ORIG_RAX: 0000000000000010 [ 676.216580] 0*4096kB [ 676.220791] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 676.220797] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 676.220802] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 676.220806] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 676.220811] R13: 00007fffe77c260f R14: 00007f7316748300 R15: 0000000000022000 [ 676.255473] 0 [ 676.258823] = 26836kB [ 676.297991] 0 [ 676.317286] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.338277] 0 [ 676.338287] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 7*16kB [ 676.346780] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.359522] (UE) 6*32kB (UE) 3*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11024kB [ 676.376345] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.387573] Node 0 DMA32: 1445*4kB (UME) 675*8kB (UME) 218*16kB (UME) 57*32kB (UM) 17*64kB (UM) 2*128kB (M) 1*256kB (U) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 18092kB [ 676.397006] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.411512] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 676.420793] 6981 total pagecache pages [ 676.425868] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 225*64kB (U) 55*128kB (U) 5*256kB (U) 6*512kB (U) 2*1024kB (U) 0*2048kB 0*4096kB = 27860kB [ 676.433714] 0 pages in swap cache [ 676.445973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.454922] warn_alloc_show_mem: 1 callbacks suppressed [ 676.454926] Mem-Info: [ 676.456189] Swap cache stats: add 0, delete 0, find 0/0 [ 676.464870] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.468145] Free swap = 0kB [ 676.476780] active_anon:13625 inactive_anon:6723 isolated_anon:0 [ 676.476780] active_file:53 inactive_file:0 isolated_file:0 [ 676.476780] unevictable:0 dirty:24 writeback:0 unstable:0 [ 676.476780] slab_reclaimable:19347 slab_unreclaimable:107444 [ 676.476780] mapped:52702 shmem:6931 pagetables:719 bounce:0 [ 676.476780] free:14253 free_pcp:29 free_cma:0 [ 676.476799] Node 0 active_anon:54500kB inactive_anon:26888kB active_file:208kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:210808kB dirty:96kB writeback:0kB shmem:27720kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 676.476815] Node 1 active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:4kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 676.476821] Node 0 [ 676.490585] Total swap = 0kB [ 676.515825] DMA free:11024kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.553614] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 676.574135] lowmem_reserve[]: [ 676.603671] 2097051 pages RAM [ 676.612858] 0 pages HighMem/MovableOnly [ 676.616840] 363849 pages reserved [ 676.620067] 0 2717 2718 2718 2718 [ 676.623833] Node 0 DMA32 free:18128kB min:36200kB low:45248kB high:54296kB active_anon:54500kB inactive_anon:26888kB active_file:208kB inactive_file:0kB unevictable:0kB writepending:96kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7680kB pagetables:2876kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB [ 676.626360] 0 pages cma reserved [ 676.663080] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 676.667413] lowmem_reserve[]: [ 676.671728] 6981 total pagecache pages [ 676.671738] 0 pages in swap cache [ 676.671744] Swap cache stats: add 0, delete 0, find 0/0 [ 676.671747] Free swap = 0kB [ 676.671755] Total swap = 0kB [ 676.679681] 0 [ 676.688666] 2097051 pages RAM [ 676.702080] 0 0 0 0 [ 676.703119] Out of memory (oom_kill_allocating_task): Kill process 26463 (syz-executor.3) score 0 or sacrifice child [ 676.704422] Node 0 [ 676.717608] 0 pages HighMem/MovableOnly [ 676.724011] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.727974] 363849 pages reserved [ 676.760636] Killed process 26463 (syz-executor.3) total-vm:93120kB, anon-rss:108kB, file-rss:33688kB, shmem-rss:0kB [ 676.763631] lowmem_reserve[]: [ 676.786032] 0 pages cma reserved [ 676.792920] 0 0 0 0 0 [ 676.795443] Node 1 Normal free:27860kB min:53696kB low:67120kB high:80544kB active_anon:0kB inactive_anon:4kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 676.898317] lowmem_reserve[]: 0 0 0 0 0 [ 676.902343] Node 0 DMA: 2*4kB (UE) 3*8kB (UE) 7*16kB (UE) 6*32kB (UE) 3*64kB (UE) 4*128kB (UE) 1*256kB (E) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11024kB [ 676.938302] Node 0 DMA32: 1413*4kB (ME) 672*8kB (ME) 218*16kB (UME) 56*32kB (M) 16*64kB (M) 2*128kB (M) 1*256kB (U) 0*512kB 169*1024kB (U) 63*2048kB (U) 2*4096kB (U) = 328116kB [ 676.994787] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 677.037792] Node 1 Normal: 1*4kB (U) 0*8kB 1*16kB (U) 0*32kB 188*64kB (U) 78*128kB (U) 3*256kB (U) 23*512kB (U) 579*1024kB (U) 21*2048kB (U) 1*4096kB (U) = 674580kB [ 677.065070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.088303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.096907] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 677.118357] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 677.127409] 7692 total pagecache pages [ 677.148295] 0 pages in swap cache [ 677.152634] Swap cache stats: add 0, delete 0, find 0/0 [ 677.157995] Free swap = 0kB [ 677.168354] Total swap = 0kB [ 677.178306] 2097051 pages RAM [ 677.181513] 0 pages HighMem/MovableOnly [ 677.188335] 363849 pages reserved [ 677.192057] 0 pages cma reserved 08:37:59 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:37:59 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:37:59 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:37:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:37:59 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x8000) 08:37:59 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:37:59 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 677.436312] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 677.542528] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:00 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:00 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:00 executing program 5: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 08:38:00 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) [ 678.721743] IPVS: stopping master sync thread 24639 ... [ 678.727767] IPVS: stopping backup sync thread 32317 ... [ 678.739836] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.746548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.759978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.766708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.790013] device bridge_slave_1 left promiscuous mode [ 678.795543] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.809020] device bridge_slave_0 left promiscuous mode [ 678.814572] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.830022] device veth1_macvtap left promiscuous mode [ 678.835348] device veth0_macvtap left promiscuous mode [ 678.862432] device veth1_vlan left promiscuous mode [ 678.867510] device veth0_vlan left promiscuous mode [ 679.010548] device hsr_slave_1 left promiscuous mode [ 679.027920] device hsr_slave_0 left promiscuous mode [ 679.049543] team0 (unregistering): Port device team_slave_1 removed [ 679.064442] team0 (unregistering): Port device team_slave_0 removed [ 679.075044] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 679.093666] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 679.169910] bond0 (unregistering): Released all slaves 08:38:02 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:02 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:38:02 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:02 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:02 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8000) [ 680.770164] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 680.772223] syz-executor.1: [ 680.783219] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 680.791573] CPU: 1 PID: 26860 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 680.794538] page allocation failure: order:4 [ 680.799534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.799538] Call Trace: [ 680.799558] dump_stack+0x1b2/0x281 [ 680.799573] warn_alloc.cold+0x96/0x1cc [ 680.799585] ? zone_watermark_ok_safe+0x220/0x220 [ 680.799609] __alloc_pages_nodemask+0x2127/0x2720 [ 680.799618] ? __schedule+0x893/0x1de0 [ 680.799634] ? lock_acquire+0x170/0x3f0 [ 680.816087] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 680.819562] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 680.819580] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 680.819593] ? __mutex_unlock_slowpath+0x75/0x770 [ 680.819607] alloc_pages_current+0x155/0x260 [ 680.827984] (null) [ 680.828402] ion_page_pool_alloc+0x118/0x1b0 [ 680.828412] ion_system_heap_allocate+0x133/0x8c0 [ 680.828422] ? ion_alloc+0x187/0x810 [ 680.828433] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 680.828444] ? ion_system_contig_heap_create+0x130/0x130 [ 680.843614] syz-executor.1 cpuset= [ 680.848293] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 680.848307] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 680.848319] ion_alloc+0x204/0x810 [ 680.848333] ? ion_dma_buf_release+0x40/0x40 [ 680.857617] / [ 680.858650] ? __might_fault+0x177/0x1b0 [ 680.872795] mems_allowed=0-1 [ 680.874393] ion_ioctl+0xea/0x1f0 [ 680.874407] ? ion_query_heaps+0x360/0x360 [ 680.932208] ? ion_query_heaps+0x360/0x360 [ 680.936442] do_vfs_ioctl+0x75a/0xff0 [ 680.940239] ? ioctl_preallocate+0x1a0/0x1a0 [ 680.944638] ? lock_downgrade+0x740/0x740 [ 680.948787] ? __fget+0x225/0x360 [ 680.952232] ? do_vfs_ioctl+0xff0/0xff0 [ 680.956899] ? security_file_ioctl+0x83/0xb0 [ 680.961300] SyS_ioctl+0x7f/0xb0 [ 680.964919] ? do_vfs_ioctl+0xff0/0xff0 [ 680.968887] do_syscall_64+0x1d5/0x640 [ 680.972774] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 680.977976] RIP: 0033:0x4665f9 [ 680.981174] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 680.988964] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 680.996225] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 681.003484] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 681.010744] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 681.018002] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 681.025289] CPU: 0 PID: 26867 Comm: syz-executor.1 Not tainted 4.14.232-syzkaller #0 [ 681.033185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.043142] Call Trace: [ 681.044491] Mem-Info: [ 681.045752] dump_stack+0x1b2/0x281 [ 681.045766] warn_alloc.cold+0x96/0x1cc [ 681.051498] active_anon:14140 inactive_anon:6696 isolated_anon:12 [ 681.051498] active_file:1447 inactive_file:5861 isolated_file:0 [ 681.051498] unevictable:0 dirty:64 writeback:0 unstable:0 [ 681.051498] slab_reclaimable:19338 slab_unreclaimable:106409 [ 681.051498] mapped:48824 shmem:6927 pagetables:727 bounce:0 [ 681.051498] free:181245 free_pcp:355 free_cma:0 [ 681.051772] ? zone_watermark_ok_safe+0x220/0x220 [ 681.060768] Node 0 active_anon:55752kB inactive_anon:26772kB active_file:5088kB inactive_file:11312kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:187388kB dirty:236kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 681.089424] __alloc_pages_nodemask+0x2127/0x2720 [ 681.089443] ? lock_acquire+0x170/0x3f0 [ 681.089457] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 681.089474] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 681.089485] ? __mutex_unlock_slowpath+0x75/0x770 [ 681.089494] ? policy_node+0x41/0x110 [ 681.089504] alloc_pages_current+0x155/0x260 [ 681.089517] ion_page_pool_alloc+0x118/0x1b0 [ 681.089526] ion_system_heap_allocate+0x133/0x8c0 [ 681.089535] ? ion_alloc+0x187/0x810 [ 681.089545] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 681.089553] ? ion_system_contig_heap_create+0x130/0x130 [ 681.089562] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 681.089572] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 681.089587] ion_alloc+0x204/0x810 [ 681.095687] Node 1 active_anon:808kB inactive_anon:12kB active_file:700kB inactive_file:12132kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:7908kB dirty:20kB writeback:0kB shmem:12kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 681.122820] ? ion_dma_buf_release+0x40/0x40 [ 681.122834] ? __might_fault+0x177/0x1b0 [ 681.122844] ion_ioctl+0xea/0x1f0 [ 681.122853] ? ion_query_heaps+0x360/0x360 [ 681.122864] ? ion_query_heaps+0x360/0x360 [ 681.122874] do_vfs_ioctl+0x75a/0xff0 [ 681.122884] ? ioctl_preallocate+0x1a0/0x1a0 [ 681.122893] ? lock_downgrade+0x740/0x740 [ 681.122906] ? __fget+0x225/0x360 [ 681.122915] ? do_vfs_ioctl+0xff0/0xff0 [ 681.122930] ? security_file_ioctl+0x83/0xb0 [ 681.170464] Node 0 [ 681.173326] SyS_ioctl+0x7f/0xb0 [ 681.173336] ? do_vfs_ioctl+0xff0/0xff0 [ 681.186518] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.188604] do_syscall_64+0x1d5/0x640 [ 681.188620] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 681.188628] RIP: 0033:0x4665f9 [ 681.188633] RSP: 002b:00007ff6d3e75188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.188643] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 681.188648] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 681.188653] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 681.188662] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 681.200155] lowmem_reserve[]: [ 681.219155] R13: 00007ffe35df7fff R14: 00007ff6d3e75300 R15: 0000000000022000 [ 681.568331] 0 2717 2718 2718 2718 [ 681.571940] Node 0 DMA32 free:526188kB min:36200kB low:45248kB high:54296kB active_anon:55812kB inactive_anon:26864kB active_file:5128kB inactive_file:11288kB unevictable:0kB writepending:292kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2796kB bounce:0kB free_pcp:1192kB local_pcp:620kB free_cma:0kB [ 681.648709] lowmem_reserve[]: 0 0 0 0 0 [ 681.656105] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 681.710813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.717555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.728291] lowmem_reserve[]: 0 0 0 0 0 [ 681.732331] Node 1 Normal free:482560kB min:53696kB low:67120kB high:80544kB active_anon:712kB inactive_anon:12kB active_file:700kB inactive_file:12132kB unevictable:0kB writepending:20kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:0kB pagetables:72kB bounce:0kB free_pcp:1260kB local_pcp:640kB free_cma:0kB [ 681.776268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.791474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.814188] device bridge_slave_1 left promiscuous mode [ 681.831377] lowmem_reserve[]: 0 0 0 0 0 [ 681.835623] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.851514] Node 0 DMA: 8*4kB (UE) 11*8kB (UME) 14*16kB (UME) 11*32kB (UE) 6*64kB (UME) 3*128kB (UME) 2*256kB (ME) 3*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11704kB [ 681.878328] device bridge_slave_0 left promiscuous mode [ 681.890575] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.906128] Node 0 DMA32: 634*4kB (UME) 161*8kB (ME) 25*16kB (ME) 2*32kB (M) 1856*64kB (UM) 497*128kB (U) 106*256kB (U) 42*512kB (UM) 100*1024kB (UM) 18*2048kB (UM) 3*4096kB (U) = 386880kB [ 681.926736] device veth1_macvtap left promiscuous mode [ 681.938339] device veth0_macvtap left promiscuous mode [ 681.943851] device veth1_vlan left promiscuous mode [ 681.943876] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 681.965871] device veth0_vlan left promiscuous mode [ 681.978407] Node 1 Normal: 114*4kB (UM) 433*8kB (UM) 317*16kB (UM) 110*32kB (U) 2144*64kB (U) 994*128kB (U) 25*256kB (U) 24*512kB (U) 419*1024kB (U) 10*2048kB (U) 4*4096kB (U) = 761568kB [ 682.014496] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.033536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.053182] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 682.073851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 682.092243] 14086 total pagecache pages [ 682.101194] 0 pages in swap cache [ 682.108911] Swap cache stats: add 0, delete 0, find 0/0 [ 682.121125] Free swap = 0kB [ 682.127718] Total swap = 0kB [ 682.134156] 2097051 pages RAM [ 682.141531] 0 pages HighMem/MovableOnly [ 682.151264] 363849 pages reserved [ 682.158140] 0 pages cma reserved [ 682.198807] device hsr_slave_1 left promiscuous mode [ 682.221412] device hsr_slave_0 left promiscuous mode [ 682.252234] team0 (unregistering): Port device team_slave_1 removed [ 682.285602] team0 (unregistering): Port device team_slave_0 removed [ 682.305691] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 682.335891] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 682.409924] bond0 (unregistering): Released all slaves [ 683.238310] Bluetooth: hci0 command 0x0409 tx timeout [ 683.638438] IPVS: ftp: loaded support on port[0] = 21 [ 683.827619] chnl_net:caif_netlink_parms(): no params data found [ 684.104982] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.113412] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.127609] device bridge_slave_0 entered promiscuous mode [ 684.135364] bridge0: port 2(bridge_slave_1) entered blocking state [ 684.145498] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.154298] device bridge_slave_1 entered promiscuous mode [ 684.212752] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 684.250410] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 684.311311] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 684.329637] team0: Port device team_slave_0 added [ 684.348568] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 684.368724] team0: Port device team_slave_1 added [ 684.428943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.435416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.498328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.530054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.536389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.600330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.624134] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 684.635632] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 684.681149] device hsr_slave_0 entered promiscuous mode [ 684.686944] device hsr_slave_1 entered promiscuous mode [ 684.697015] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 684.707237] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 684.853341] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 684.900870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.913979] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 684.924568] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 684.936142] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.944120] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.957694] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 684.965254] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.978810] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 684.985826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.998112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 685.011953] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.018827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.028814] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 685.043771] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bond: link is not ready [ 685.051024] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.063122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.071260] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.084337] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.090772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.102186] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.113341] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bond: link is not ready [ 685.125379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.137081] IPv6: ADDRCONF(NETDEV_UP): veth0_to_team: link is not ready [ 685.149022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.157076] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.171420] IPv6: ADDRCONF(NETDEV_UP): veth1_to_team: link is not ready [ 685.182084] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.189606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.202642] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.213282] IPv6: ADDRCONF(NETDEV_UP): veth0_to_hsr: link is not ready [ 685.224861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.233195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.247171] IPv6: ADDRCONF(NETDEV_UP): veth1_to_hsr: link is not ready [ 685.256380] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.265186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.275774] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 685.283384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.300547] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 685.309487] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 685.323187] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 685.328369] Bluetooth: hci0 command 0x041b tx timeout [ 685.331883] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 685.347996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 685.552127] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 685.577958] IPv6: ADDRCONF(NETDEV_UP): veth1_virt_wifi: link is not ready [ 685.585309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 685.601812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 685.716829] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 685.734737] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 685.743333] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 685.759170] IPv6: ADDRCONF(NETDEV_UP): veth1_vlan: link is not ready [ 685.771792] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 685.780443] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 685.792468] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 685.800247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 685.812662] device veth0_vlan entered promiscuous mode [ 685.824215] device veth1_vlan entered promiscuous mode [ 685.833657] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 685.843685] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 685.854819] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 685.863342] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 685.881248] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 685.896989] IPv6: ADDRCONF(NETDEV_UP): veth1_macvtap: link is not ready [ 685.904336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 685.916241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 685.927030] device veth0_macvtap entered promiscuous mode [ 685.937976] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready [ 685.948280] device veth1_macvtap entered promiscuous mode [ 685.958018] IPv6: ADDRCONF(NETDEV_UP): macsec0: link is not ready [ 685.972549] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 685.982934] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 685.993281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.003633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.013101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.023675] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.033148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.044720] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.054247] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 686.064580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.075284] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 686.082695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 686.090040] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 686.097997] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 686.105605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 686.113912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 686.124328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.134912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.144735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.155312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.164844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.175701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.185271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 686.195555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 686.206458] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 686.213794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 686.221155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 686.230280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:38:09 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8000) 08:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 08:38:09 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x8000) 08:38:09 executing program 1: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:09 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 08:38:09 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 687.398343] Bluetooth: hci0 command 0x040f tx timeout 08:38:11 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 689.478420] Bluetooth: hci0 command 0x0419 tx timeout [ 689.781244] IPVS: ftp: loaded support on port[0] = 21 [ 689.956877] chnl_net:caif_netlink_parms(): no params data found [ 690.044299] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.051467] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.059041] device bridge_slave_0 entered promiscuous mode [ 690.066249] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.072894] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.080393] device bridge_slave_1 entered promiscuous mode [ 690.105070] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 690.114998] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 690.139756] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 690.147193] team0: Port device team_slave_0 added [ 690.153235] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 690.160701] team0: Port device team_slave_1 added [ 690.183169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.189792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.215601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.227245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.233641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.259314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.270476] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 690.278087] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 690.306145] device hsr_slave_0 entered promiscuous mode [ 690.312337] device hsr_slave_1 entered promiscuous mode [ 690.318812] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 690.326098] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 690.403229] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.409752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.419937] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.428596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.460041] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 690.467027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 690.476384] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 690.485641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 690.494766] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.502049] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.513060] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 690.519765] 8021q: adding VLAN 0 to HW filter on device team0 [ 690.528128] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 690.536057] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.542460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 690.558957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 690.566667] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.573082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 690.580787] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 690.588989] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 690.600343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 690.614705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 690.624691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 690.635832] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 690.642613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 690.650716] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 690.659159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 690.670860] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready [ 690.679014] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.685818] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.697075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.750379] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready [ 690.761599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.792135] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready [ 690.799855] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready [ 690.806387] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready [ 690.816061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.824069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.831272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.841768] device veth0_vlan entered promiscuous mode [ 690.851723] device veth1_vlan entered promiscuous mode [ 690.858601] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready [ 690.867032] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready [ 690.880673] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready [ 690.890356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.897643] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.905859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.914775] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 690.923938] device veth0_macvtap entered promiscuous mode [ 690.933403] device veth1_macvtap entered promiscuous mode [ 690.942137] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready [ 690.952506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready [ 690.961415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 690.971794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.981003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 690.990832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.000037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 691.010667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.019832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 691.029660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.038990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 691.049154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.059367] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_0: link is not ready [ 691.066274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 691.074358] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.082930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.092953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 691.103499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.113138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 691.123158] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.132342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 691.142509] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.151687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 691.161476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.170666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 691.180587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.190949] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready [ 691.197827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.204964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.213025] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 08:38:13 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000180)=ANY=[@ANYBLOB="000001000800000806000000d8000000f2a9552bc1b6968de205a5c9683ecbef63c6e84b54fbb7c3138dd837a17ce000547da2041f11dff9bf973db275531827af9ac23ce1062fa349809d90bf34dc6ed4b3f4"]) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8000) 08:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 08:38:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:13 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x93, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:13 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8000) 08:38:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:13 executing program 3: r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$RTC_RD_TIME(r0, 0x80247009, &(0x7f00000002c0)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 0: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x8000) 08:38:13 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x9, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 691.447133] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:13 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:13 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:13 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) [ 691.585601] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 691.798730] Bluetooth: hci5 command 0x0409 tx timeout 08:38:14 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:14 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36, 0x2b], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:14 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:38:14 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) [ 692.326989] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 692.975199] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 692.989682] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 692.991481] syz-executor.3 cpuset= [ 693.002139] syz-executor.0 cpuset= [ 693.004340] / [ 693.009294] / [ 693.009404] mems_allowed=0-1 [ 693.014299] mems_allowed=0-1 [ 693.016176] CPU: 0 PID: 27426 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 693.026853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.036222] Call Trace: [ 693.038814] dump_stack+0x1b2/0x281 [ 693.042434] warn_alloc.cold+0x96/0x1cc [ 693.046398] ? zone_watermark_ok_safe+0x220/0x220 [ 693.051248] __alloc_pages_nodemask+0x2127/0x2720 [ 693.056099] ? io_schedule_timeout+0x140/0x140 [ 693.060677] ? trace_hardirqs_on+0x10/0x10 [ 693.064918] ? lock_acquire+0x170/0x3f0 [ 693.068899] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 693.073750] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 693.079205] ? __mutex_unlock_slowpath+0x75/0x770 [ 693.084061] ? retint_kernel+0x2d/0x2d [ 693.087950] alloc_pages_current+0x155/0x260 [ 693.092359] ion_page_pool_alloc+0x118/0x1b0 [ 693.096767] ion_system_heap_allocate+0x133/0x8c0 [ 693.101610] ? ion_alloc+0x187/0x810 [ 693.105323] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 693.110771] ? ion_system_contig_heap_create+0x130/0x130 [ 693.116222] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 693.121238] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 693.126173] ion_alloc+0x204/0x810 [ 693.129714] ? ion_dma_buf_release+0x40/0x40 [ 693.134117] ? __might_fault+0x177/0x1b0 [ 693.138173] ion_ioctl+0xea/0x1f0 [ 693.141625] ? ion_query_heaps+0x360/0x360 [ 693.145853] ? ion_query_heaps+0x360/0x360 [ 693.150082] do_vfs_ioctl+0x75a/0xff0 [ 693.153897] ? ioctl_preallocate+0x1a0/0x1a0 [ 693.158301] ? lock_downgrade+0x740/0x740 [ 693.162446] ? __fget+0x225/0x360 [ 693.165890] ? do_vfs_ioctl+0xff0/0xff0 [ 693.169857] ? security_file_ioctl+0x83/0xb0 [ 693.174260] SyS_ioctl+0x7f/0xb0 [ 693.177624] ? do_vfs_ioctl+0xff0/0xff0 [ 693.181592] do_syscall_64+0x1d5/0x640 [ 693.185502] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 693.190684] RIP: 0033:0x4665f9 [ 693.193864] RSP: 002b:00007f5504b43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.201563] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 693.208822] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 693.216086] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 693.223357] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 693.230631] R13: 00007fff83a175cf R14: 00007f5504b43300 R15: 0000000000022000 [ 693.237935] CPU: 1 PID: 27439 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 693.245684] warn_alloc_show_mem: 1 callbacks suppressed [ 693.245688] Mem-Info: [ 693.245829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.251279] active_anon:13124 inactive_anon:6723 isolated_anon:0 [ 693.251279] active_file:2316 inactive_file:5203 isolated_file:0 [ 693.251279] unevictable:0 dirty:12 writeback:0 unstable:0 [ 693.251279] slab_reclaimable:13927 slab_unreclaimable:114431 [ 693.251279] mapped:57648 shmem:6932 pagetables:762 bounce:0 [ 693.251279] free:131087 free_pcp:205 free_cma:0 [ 693.253570] Call Trace: [ 693.253591] dump_stack+0x1b2/0x281 [ 693.253607] warn_alloc.cold+0x96/0x1cc [ 693.263146] Node 0 active_anon:52408kB inactive_anon:26892kB active_file:7768kB inactive_file:9300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:222584kB dirty:44kB writeback:0kB shmem:27728kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 693.296630] ? zone_watermark_ok_safe+0x220/0x220 [ 693.296652] __alloc_pages_nodemask+0x2127/0x2720 [ 693.296662] ? io_schedule_timeout+0x140/0x140 [ 693.296677] ? lock_acquire+0x170/0x3f0 [ 693.296691] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 693.296706] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 693.299375] Node 1 active_anon:88kB inactive_anon:0kB active_file:1496kB inactive_file:11512kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:8008kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 693.302897] ? __mutex_unlock_slowpath+0x75/0x770 [ 693.302913] alloc_pages_current+0x155/0x260 [ 693.302927] ion_page_pool_alloc+0x118/0x1b0 [ 693.306935] Node 0 [ 693.335008] ion_system_heap_allocate+0x133/0x8c0 [ 693.335018] ? ion_alloc+0x187/0x810 [ 693.335028] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 693.335036] ? ion_system_contig_heap_create+0x130/0x130 [ 693.335045] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 693.335056] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 693.335067] ion_alloc+0x204/0x810 [ 693.340096] DMA free:11132kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:40kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.344834] ? ion_dma_buf_release+0x40/0x40 [ 693.344848] ? __might_fault+0x177/0x1b0 [ 693.344859] ion_ioctl+0xea/0x1f0 [ 693.349509] lowmem_reserve[]: [ 693.353385] ? ion_query_heaps+0x360/0x360 [ 693.353397] ? ion_query_heaps+0x360/0x360 [ 693.353408] do_vfs_ioctl+0x75a/0xff0 [ 693.358335] 0 [ 693.363696] ? ioctl_preallocate+0x1a0/0x1a0 [ 693.363707] ? lock_downgrade+0x740/0x740 [ 693.363719] ? __fget+0x225/0x360 [ 693.392260] 2717 [ 693.397013] ? do_vfs_ioctl+0xff0/0xff0 [ 693.397026] ? security_file_ioctl+0x83/0xb0 [ 693.397036] SyS_ioctl+0x7f/0xb0 [ 693.401510] 2718 [ 693.405818] ? do_vfs_ioctl+0xff0/0xff0 [ 693.405830] do_syscall_64+0x1d5/0x640 [ 693.405845] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 693.408097] 2718 [ 693.412884] RIP: 0033:0x4665f9 [ 693.412889] RSP: 002b:00007ff8dd878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 693.412898] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 693.412903] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 693.412908] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 693.412913] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 693.412918] R13: 00007ffd38e62c5f R14: 00007ff8dd878300 R15: 0000000000022000 [ 693.588339] 2718 [ 693.590496] Node 0 DMA32 free:424264kB min:36200kB low:45248kB high:54296kB active_anon:52408kB inactive_anon:26892kB active_file:7768kB inactive_file:9260kB unevictable:0kB writepending:44kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7648kB pagetables:3048kB bounce:0kB free_pcp:940kB local_pcp:788kB free_cma:0kB [ 693.620180] lowmem_reserve[]: 0 0 0 0 0 [ 693.624239] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.649938] lowmem_reserve[]: 0 0 0 0 0 [ 693.654000] Node 1 Normal free:53736kB min:53696kB low:67120kB high:80544kB active_anon:88kB inactive_anon:0kB active_file:1496kB inactive_file:11512kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 693.682364] lowmem_reserve[]: 0 0 0 0 0 [ 693.686422] Node 0 DMA: 7*4kB (UE) 12*8kB (UME) 12*16kB (UME) 8*32kB (UE) 3*64kB (UME) 3*128kB (UME) 3*256kB (UME) 2*512kB (ME) 2*1024kB (ME) 1*2048kB (E) 1*4096kB (M) = 11132kB [ 693.702877] Node 0 DMA32: 1656*4kB (UME) 600*8kB (UME) 8180*16kB (UMEH) 6573*32kB (UEH) 2*64kB (U) 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 353920kB [ 693.719335] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 693.730537] Node 1 Normal: 132*4kB (UM) 437*8kB (UM) 311*16kB (UM) 100*32kB (UM) 1*64kB (U) 20*128kB (U) 4*256kB (U) 2*512kB (U) 36*1024kB (U) 0*2048kB 0*4096kB = 53736kB [ 693.746445] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.755640] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.764668] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 693.773848] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 693.783316] 14198 total pagecache pages [ 693.787376] 0 pages in swap cache [ 693.791159] Swap cache stats: add 0, delete 0, find 0/0 [ 693.796605] Free swap = 0kB [ 693.799941] Total swap = 0kB [ 693.803039] 2097051 pages RAM [ 693.806236] 0 pages HighMem/MovableOnly [ 693.810582] 363849 pages reserved [ 693.814114] 0 pages cma reserved [ 693.878399] Bluetooth: hci5 command 0x041b tx timeout 08:38:16 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:16 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0xa0, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}]}, 0xa0}}, 0x8000) 08:38:16 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:16 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:16 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26, 0x36], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:16 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:17 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:17 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:17 executing program 5: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 694.841169] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:17 executing program 1: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:17 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28, 0x26], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 694.992676] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:18 executing program 3: openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x20400, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:18 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:18 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4, 0x28], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:18 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x8000) 08:38:18 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:18 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:18 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 695.884532] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:18 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26, 0x4], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:18 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) [ 695.958773] Bluetooth: hci5 command 0x040f tx timeout [ 696.029794] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 697.031646] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 697.051045] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 697.062344] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 697.092223] CPU: 0 PID: 27523 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 697.100558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.109992] Call Trace: [ 697.112582] dump_stack+0x1b2/0x281 [ 697.116216] warn_alloc.cold+0x96/0x1cc [ 697.120182] ? zone_watermark_ok_safe+0x220/0x220 [ 697.125028] __alloc_pages_nodemask+0x2127/0x2720 [ 697.129989] ? lock_acquire+0x170/0x3f0 [ 697.133960] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 697.138806] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 697.144248] ? __mutex_unlock_slowpath+0x75/0x770 [ 697.149080] ? alloc_pages_current+0xe3/0x260 [ 697.153569] alloc_pages_current+0x155/0x260 [ 697.157969] ion_page_pool_alloc+0x118/0x1b0 [ 697.162369] ion_system_heap_allocate+0x133/0x8c0 [ 697.167202] ? ion_alloc+0x187/0x810 [ 697.170904] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 697.176342] ? ion_system_contig_heap_create+0x130/0x130 [ 697.181804] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 697.186815] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 697.191649] ion_alloc+0x204/0x810 [ 697.195182] ? ion_dma_buf_release+0x40/0x40 [ 697.199585] ? __might_fault+0x177/0x1b0 [ 697.203655] ion_ioctl+0xea/0x1f0 [ 697.207113] ? ion_query_heaps+0x360/0x360 [ 697.211340] ? ion_query_heaps+0x360/0x360 [ 697.215564] do_vfs_ioctl+0x75a/0xff0 [ 697.219357] ? ioctl_preallocate+0x1a0/0x1a0 [ 697.223765] ? lock_downgrade+0x740/0x740 [ 697.227909] ? __fget+0x225/0x360 [ 697.231352] ? do_vfs_ioctl+0xff0/0xff0 [ 697.235331] ? security_file_ioctl+0x83/0xb0 [ 697.239747] SyS_ioctl+0x7f/0xb0 [ 697.243121] ? do_vfs_ioctl+0xff0/0xff0 [ 697.247098] do_syscall_64+0x1d5/0x640 [ 697.250984] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 697.256159] RIP: 0033:0x4665f9 [ 697.259855] RSP: 002b:00007ff8dd878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.267555] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 697.274823] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 697.282101] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 697.289366] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 697.296630] R13: 00007ffd38e62c5f R14: 00007ff8dd878300 R15: 0000000000022000 [ 697.313977] syz-executor.3 cpuset=/ mems_allowed=0-1 [ 697.337612] CPU: 0 PID: 27515 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 697.345635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 697.355001] Call Trace: [ 697.357602] dump_stack+0x1b2/0x281 [ 697.361228] warn_alloc.cold+0x96/0x1cc [ 697.365195] ? zone_watermark_ok_safe+0x220/0x220 [ 697.370424] __alloc_pages_nodemask+0x2127/0x2720 [ 697.375263] ? __schedule+0x893/0x1de0 [ 697.379150] ? lock_acquire+0x170/0x3f0 [ 697.383124] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 697.388145] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 697.393618] ? __mutex_unlock_slowpath+0x75/0x770 [ 697.398459] alloc_pages_current+0x155/0x260 [ 697.402867] ion_page_pool_alloc+0x118/0x1b0 [ 697.407286] ion_system_heap_allocate+0x133/0x8c0 [ 697.412120] ? ion_alloc+0x187/0x810 [ 697.415824] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 697.421264] ? ion_system_contig_heap_create+0x130/0x130 [ 697.426714] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 697.431722] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 697.436557] ion_alloc+0x204/0x810 [ 697.440093] ? ion_dma_buf_release+0x40/0x40 [ 697.444494] ? __might_fault+0x177/0x1b0 [ 697.448551] ion_ioctl+0xea/0x1f0 [ 697.452881] ? ion_query_heaps+0x360/0x360 [ 697.457108] ? ion_query_heaps+0x360/0x360 [ 697.461334] do_vfs_ioctl+0x75a/0xff0 [ 697.465127] ? ioctl_preallocate+0x1a0/0x1a0 [ 697.469541] ? lock_downgrade+0x740/0x740 [ 697.473682] ? __fget+0x225/0x360 [ 697.477121] ? do_vfs_ioctl+0xff0/0xff0 [ 697.481173] ? security_file_ioctl+0x83/0xb0 [ 697.485577] SyS_ioctl+0x7f/0xb0 [ 697.488949] ? do_vfs_ioctl+0xff0/0xff0 [ 697.492946] do_syscall_64+0x1d5/0x640 [ 697.496842] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 697.502034] RIP: 0033:0x4665f9 [ 697.505210] RSP: 002b:00007f5504b43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 697.512921] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 697.520194] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000004 [ 697.527464] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 697.534733] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 697.541993] R13: 00007fff83a175cf R14: 00007f5504b43300 R15: 0000000000022000 [ 697.555714] warn_alloc_show_mem: 1 callbacks suppressed [ 697.555718] Mem-Info: [ 697.572704] active_anon:13132 inactive_anon:6722 isolated_anon:12 [ 697.572704] active_file:1304 inactive_file:1654 isolated_file:0 [ 697.572704] unevictable:0 dirty:31 writeback:0 unstable:0 [ 697.572704] slab_reclaimable:13956 slab_unreclaimable:116702 [ 697.572704] mapped:54637 shmem:6931 pagetables:740 bounce:0 [ 697.572704] free:133591 free_pcp:214 free_cma:0 [ 697.619472] Node 0 active_anon:52440kB inactive_anon:26888kB active_file:5132kB inactive_file:6536kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:218556kB dirty:44kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 697.649665] Node 1 active_anon:88kB inactive_anon:0kB active_file:84kB inactive_file:80kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:80kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 697.675860] Node 0 DMA free:11108kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.704458] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 697.710218] Node 0 DMA32 free:382444kB min:36200kB low:45248kB high:54296kB active_anon:52440kB inactive_anon:26888kB active_file:5184kB inactive_file:6484kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2960kB bounce:0kB free_pcp:316kB local_pcp:216kB free_cma:0kB [ 697.740586] lowmem_reserve[]: 0 0 0 0 0 [ 697.744648] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 697.771572] lowmem_reserve[]: 0 0 0 0 0 [ 697.775627] Node 1 Normal free:55016kB min:53696kB low:67120kB high:80544kB active_anon:88kB inactive_anon:0kB active_file:84kB inactive_file:16kB unevictable:0kB writepending:180kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:656kB local_pcp:656kB free_cma:0kB [ 697.805428] lowmem_reserve[]: 0 0 0 0 0 [ 697.810077] Node 0 DMA: 7*4kB (UE) 11*8kB (UE) 11*16kB (UE) 8*32kB (UE) 1*64kB (E) 2*128kB (UE) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11108kB [ 697.826510] Node 0 DMA32: 1623*4kB (E) 551*8kB (UME) 3786*16kB (UMEH) 6756*32kB (UMEH) 1*64kB (U) 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 288884kB [ 697.842779] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 697.854343] Node 1 Normal: 136*4kB (UM) 460*8kB (UM) 344*16kB (UM) 114*32kB (UM) 21*64kB (UM) 13*128kB (UM) 9*256kB (UM) 49*512kB (UM) 11*1024kB (UM) 0*2048kB 0*4096kB = 55040kB [ 697.871313] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.880991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.890350] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 697.900352] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 697.910450] 9953 total pagecache pages [ 697.914928] 0 pages in swap cache [ 697.920093] Swap cache stats: add 0, delete 0, find 0/0 [ 697.926251] Free swap = 0kB [ 697.931016] Total swap = 0kB [ 697.934618] 2097051 pages RAM [ 697.940542] 0 pages HighMem/MovableOnly [ 697.945687] 363849 pages reserved [ 697.950466] 0 pages cma reserved 08:38:20 executing program 4: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:20 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31, 0x26], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:20 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:20 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) [ 698.039883] Bluetooth: hci5 command 0x0419 tx timeout 08:38:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:20 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:20 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:20 executing program 1: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) [ 698.148663] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 699.167932] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 699.202559] syz-executor.3: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 699.204785] syz-executor.5 cpuset= [ 699.224978] syz-executor.3 cpuset= [ 699.233830] / [ 699.238306] / mems_allowed=0-1 [ 699.243248] CPU: 0 PID: 27549 Comm: syz-executor.3 Not tainted 4.14.232-syzkaller #0 [ 699.245675] mems_allowed=0-1 [ 699.251140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.251144] Call Trace: [ 699.251165] dump_stack+0x1b2/0x281 [ 699.251178] warn_alloc.cold+0x96/0x1cc [ 699.251190] ? zone_watermark_ok_safe+0x220/0x220 [ 699.251211] __alloc_pages_nodemask+0x2127/0x2720 [ 699.251219] ? __schedule+0x893/0x1de0 [ 699.251234] ? lock_acquire+0x170/0x3f0 [ 699.251248] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 699.251264] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 699.251275] ? __mutex_unlock_slowpath+0x75/0x770 [ 699.251289] alloc_pages_current+0x155/0x260 [ 699.251302] ion_page_pool_alloc+0x118/0x1b0 [ 699.251311] ion_system_heap_allocate+0x133/0x8c0 [ 699.251320] ? ion_alloc+0x187/0x810 [ 699.251329] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 699.251337] ? ion_system_contig_heap_create+0x130/0x130 [ 699.251351] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 699.339866] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 699.344758] ion_alloc+0x204/0x810 [ 699.348321] ? ion_dma_buf_release+0x40/0x40 [ 699.352724] ? __might_fault+0x177/0x1b0 [ 699.356793] ion_ioctl+0xea/0x1f0 [ 699.360284] ? ion_query_heaps+0x360/0x360 [ 699.364541] ? ion_query_heaps+0x360/0x360 [ 699.368777] do_vfs_ioctl+0x75a/0xff0 [ 699.372580] ? ioctl_preallocate+0x1a0/0x1a0 [ 699.376983] ? lock_downgrade+0x740/0x740 [ 699.381138] ? __fget+0x225/0x360 [ 699.384584] ? do_vfs_ioctl+0xff0/0xff0 [ 699.388553] ? security_file_ioctl+0x83/0xb0 [ 699.392972] SyS_ioctl+0x7f/0xb0 [ 699.396346] ? do_vfs_ioctl+0xff0/0xff0 [ 699.400315] do_syscall_64+0x1d5/0x640 [ 699.404202] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 699.409491] RIP: 0033:0x4665f9 [ 699.412687] RSP: 002b:00007f5504b43188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.420385] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 699.427646] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 699.434906] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 699.442167] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 699.449433] R13: 00007fff83a175cf R14: 00007f5504b43300 R15: 0000000000022000 [ 699.456713] CPU: 1 PID: 27554 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 699.458166] warn_alloc_show_mem: 1 callbacks suppressed [ 699.458169] Mem-Info: [ 699.464612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 699.464617] Call Trace: [ 699.464636] dump_stack+0x1b2/0x281 [ 699.464650] warn_alloc.cold+0x96/0x1cc [ 699.464662] ? zone_watermark_ok_safe+0x220/0x220 [ 699.464684] __alloc_pages_nodemask+0x2127/0x2720 [ 699.470075] active_anon:13167 inactive_anon:6722 isolated_anon:0 [ 699.470075] active_file:340 inactive_file:416 isolated_file:0 [ 699.470075] unevictable:0 dirty:6 writeback:0 unstable:0 [ 699.470075] slab_reclaimable:13949 slab_unreclaimable:116241 [ 699.470075] mapped:53407 shmem:6931 pagetables:766 bounce:0 [ 699.470075] free:28496 free_pcp:181 free_cma:0 [ 699.472449] ? lock_acquire+0x170/0x3f0 [ 699.481823] Node 0 active_anon:52304kB inactive_anon:26880kB active_file:1352kB inactive_file:1652kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:213624kB dirty:20kB writeback:0kB shmem:27716kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 699.484370] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 699.487973] Node 1 active_anon:364kB inactive_anon:8kB active_file:8kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:8kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 699.491929] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 699.491942] ? __mutex_unlock_slowpath+0x75/0x770 [ 699.491953] ? retint_kernel+0x2d/0x2d [ 699.496779] Node 0 [ 699.501608] alloc_pages_current+0x155/0x260 [ 699.501623] ion_page_pool_alloc+0x118/0x1b0 [ 699.501649] ion_system_heap_allocate+0x133/0x8c0 [ 699.534930] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:20kB inactive_file:12kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.538852] ? ion_alloc+0x187/0x810 [ 699.538864] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 699.538877] ? ion_system_contig_heap_create+0x130/0x130 [ 699.566919] lowmem_reserve[]: [ 699.571737] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 699.571751] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 699.571764] ion_alloc+0x204/0x810 [ 699.597723] 0 [ 699.603144] ? ion_dma_buf_release+0x40/0x40 [ 699.603157] ? __might_fault+0x177/0x1b0 [ 699.607979] 2717 [ 699.611860] ion_ioctl+0xea/0x1f0 [ 699.611869] ? ion_query_heaps+0x360/0x360 [ 699.611881] ? ion_query_heaps+0x360/0x360 [ 699.611892] do_vfs_ioctl+0x75a/0xff0 [ 699.614106] 2718 [ 699.618498] ? ioctl_preallocate+0x1a0/0x1a0 [ 699.618508] ? lock_downgrade+0x740/0x740 [ 699.618522] ? __fget+0x225/0x360 [ 699.622913] 2718 [ 699.627748] ? do_vfs_ioctl+0xff0/0xff0 [ 699.653456] 2718 [ 699.657147] ? security_file_ioctl+0x83/0xb0 [ 699.667999] SyS_ioctl+0x7f/0xb0 [ 699.671109] Node 0 [ 699.676092] ? do_vfs_ioctl+0xff0/0xff0 [ 699.680972] DMA32 free:49268kB min:36200kB low:45248kB high:54296kB active_anon:52304kB inactive_anon:26880kB active_file:1040kB inactive_file:1804kB unevictable:0kB writepending:20kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2960kB bounce:0kB free_pcp:724kB local_pcp:0kB free_cma:0kB [ 699.684478] do_syscall_64+0x1d5/0x640 [ 699.686255] lowmem_reserve[]: [ 699.690656] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 699.690665] RIP: 0033:0x4665f9 [ 699.690669] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.690678] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 699.690683] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 699.690688] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 699.690696] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 699.694734] 0 [ 699.696776] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 699.700241] 0 0 0 0 [ 699.863432] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.893575] lowmem_reserve[]: 0 0 0 0 0 [ 699.897950] Node 1 Normal free:53688kB min:53696kB low:67120kB high:80544kB active_anon:364kB inactive_anon:8kB active_file:8kB inactive_file:112kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 699.930811] lowmem_reserve[]: 0 0 0 0 0 [ 699.935201] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 1*16kB (E) 5*32kB (UE) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 11076kB [ 699.954760] Node 0 DMA32: 1541*4kB (UE) 995*8kB (ME) 2796*16kB (UMEH) 69*32kB (UMEH) 0*64kB 1*128kB (H) 0*256kB 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 62220kB [ 699.975318] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 699.987445] Node 1 Normal: 49*4kB (M) 33*8kB (UM) 28*16kB (M) 21*32kB (UM) 12*64kB (M) 11*128kB (M) 9*256kB (UM) 6*512kB (UM) 18*1024kB (UM) 9*2048kB (U) 2*4096kB (U) = 54188kB [ 700.008203] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.017502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.030465] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 700.042216] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 700.053454] 8065 total pagecache pages [ 700.057353] 0 pages in swap cache [ 700.062170] Swap cache stats: add 0, delete 0, find 0/0 [ 700.067541] Free swap = 0kB [ 700.073240] Total swap = 0kB [ 700.076265] 2097051 pages RAM [ 700.080780] 0 pages HighMem/MovableOnly [ 700.084764] 363849 pages reserved [ 700.088207] 0 pages cma reserved 08:38:22 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c, 0x31], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:22 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:22 executing program 1: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:22 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 700.407994] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 702.288092] oom_reaper: reaped process 27554 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 702.316883] ion_system_heap invoked oom-killer: gfp_mask=0x14040c0(GFP_KERNEL|__GFP_COMP), nodemask=(null), order=0, oom_score_adj=0 [ 702.335365] ion_system_heap cpuset=/ mems_allowed=0-1 [ 702.340635] CPU: 0 PID: 4246 Comm: ion_system_heap Not tainted 4.14.232-syzkaller #0 [ 702.348511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.357867] Call Trace: [ 702.360461] dump_stack+0x1b2/0x281 [ 702.364091] dump_header+0x178/0x82f [ 702.367814] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 702.372918] ? ___ratelimit+0x2cd/0x530 [ 702.376993] oom_kill_process.cold+0x10/0xa40 [ 702.381483] ? lock_downgrade+0x740/0x740 [ 702.385619] out_of_memory+0x2dc/0x1190 [ 702.388389] syz-executor.5: page allocation failure: order:0 [ 702.389673] ? oom_killer_disable+0x1c0/0x1c0 [ 702.389684] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 702.395477] ? mutex_trylock+0x152/0x1a0 [ 702.402179] (null) [ 702.407739] __alloc_pages_nodemask+0x23e1/0x2720 [ 702.411866] syz-executor.5 cpuset= [ 702.413925] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 702.420913] / [ 702.422268] ? kasan_kmalloc+0xeb/0x160 [ 702.427083] mems_allowed=0-1 [ 702.428797] ? ion_heap_deferred_free+0x22a/0x470 [ 702.428808] ? cache_grow_begin+0x3f/0x700 [ 702.428817] cache_grow_begin+0x91/0x700 [ 702.428829] fallback_alloc+0x207/0x2c0 [ 702.428841] kmem_cache_alloc_node_trace+0xed/0x400 [ 702.428851] alloc_vmap_area+0xf0/0x7c0 [ 702.428865] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 702.428877] ? purge_vmap_area_lazy+0xb0/0xb0 [ 702.472320] ? __get_vm_area_node+0xed/0x340 [ 702.476734] ? kmem_cache_alloc_node_trace+0x383/0x400 [ 702.483055] __get_vm_area_node+0x126/0x340 [ 702.487388] vmap+0xd5/0x290 [ 702.490420] ? ion_heap_clear_pages+0x23/0x70 [ 702.494928] ? vunmap+0x50/0x50 [ 702.498209] ? __vunmap+0x21c/0x300 [ 702.501835] ion_heap_clear_pages+0x23/0x70 [ 702.506161] ion_heap_sglist_zero+0x165/0x220 [ 702.510819] ? ion_heap_clear_pages+0x70/0x70 [ 702.515320] ? finish_task_switch+0x178/0x610 [ 702.519837] ? pagerange_is_ram_callback+0x100/0x100 [ 702.524946] ? ion_heap_deferred_free+0x222/0x470 [ 702.529795] ion_system_heap_free+0x1d0/0x240 [ 702.534294] ion_buffer_destroy+0x132/0x190 [ 702.538615] ion_heap_deferred_free+0x22a/0x470 [ 702.543299] ? __schedule+0x807/0x1de0 [ 702.547192] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 702.551886] ? wait_woken+0x230/0x230 [ 702.555980] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 702.561155] ? ion_heap_shrink_scan+0x1a0/0x1a0 [ 702.565876] kthread+0x30d/0x420 [ 702.569235] ? kthread_create_on_node+0xd0/0xd0 [ 702.573930] ret_from_fork+0x24/0x30 [ 702.577708] CPU: 1 PID: 27554 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 702.585596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 702.585653] Mem-Info: [ 702.594953] Call Trace: [ 702.594976] dump_stack+0x1b2/0x281 [ 702.594989] warn_alloc.cold+0x96/0x1cc [ 702.595001] ? zone_watermark_ok_safe+0x220/0x220 [ 702.595014] ? usleep_range+0x130/0x130 [ 702.597443] active_anon:13153 inactive_anon:6722 isolated_anon:0 [ 702.597443] active_file:35 inactive_file:15 isolated_file:0 [ 702.597443] unevictable:0 dirty:0 writeback:0 unstable:0 [ 702.597443] slab_reclaimable:13949 slab_unreclaimable:116134 [ 702.597443] mapped:52824 shmem:6931 pagetables:740 bounce:0 [ 702.597443] free:14016 free_pcp:60 free_cma:0 [ 702.600006] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 702.600019] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 702.600029] ? run_timer_softirq+0x5a0/0x5a0 [ 702.600046] __alloc_pages_nodemask+0x2127/0x2720 [ 702.603662] Node 0 active_anon:52224kB inactive_anon:26872kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211248kB dirty:0kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 702.607655] ? lock_acquire+0x170/0x3f0 [ 702.612515] Node 1 active_anon:388kB inactive_anon:16kB active_file:104kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 702.616444] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 702.649455] Node 0 [ 702.654616] ? ion_page_pool_alloc+0x9e/0x1b0 [ 702.660719] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.665326] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 702.670155] lowmem_reserve[]: [ 702.697820] ? alloc_pages_current+0x123/0x260 [ 702.697832] alloc_pages_current+0x155/0x260 [ 702.697847] ion_page_pool_alloc+0x118/0x1b0 [ 702.697858] ion_system_heap_allocate+0x133/0x8c0 [ 702.701834] 0 [ 702.728202] ? ion_alloc+0x187/0x810 [ 702.728214] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 702.728223] ? ion_system_contig_heap_create+0x130/0x130 [ 702.728234] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 702.728246] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 702.728256] ion_alloc+0x204/0x810 [ 702.733173] 2717 [ 702.735409] ? ion_dma_buf_release+0x40/0x40 [ 702.739913] 2718 [ 702.765378] ? __might_fault+0x177/0x1b0 [ 702.765391] ion_ioctl+0xea/0x1f0 [ 702.765401] ? ion_query_heaps+0x360/0x360 [ 702.765412] ? ion_query_heaps+0x360/0x360 [ 702.772903] 2718 [ 702.775977] do_vfs_ioctl+0x75a/0xff0 [ 702.780590] 2718 [ 702.784971] ? ioctl_preallocate+0x1a0/0x1a0 [ 702.794378] ? lock_downgrade+0x740/0x740 [ 702.796149] Node 0 [ 702.799853] ? __fget+0x225/0x360 [ 702.799863] ? do_vfs_ioctl+0xff0/0xff0 [ 702.799874] ? security_file_ioctl+0x83/0xb0 [ 702.799884] SyS_ioctl+0x7f/0xb0 [ 702.805413] DMA32 free:18244kB min:36200kB low:45248kB high:54296kB active_anon:52224kB inactive_anon:26872kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2856kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 702.811107] ? do_vfs_ioctl+0xff0/0xff0 [ 702.811120] do_syscall_64+0x1d5/0x640 [ 702.811134] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 702.811146] RIP: 0033:0x4665f9 [ 702.817205] lowmem_reserve[]: 0 [ 702.822044] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 702.822053] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 702.822058] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 702.822062] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 702.822067] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 702.822071] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 702.837911] warn_alloc_show_mem: 1 callbacks suppressed [ 702.837915] Mem-Info: [ 702.845768] 0 [ 702.847414] active_anon:13153 inactive_anon:6722 isolated_anon:0 [ 702.847414] active_file:35 inactive_file:15 isolated_file:0 [ 702.847414] unevictable:0 dirty:0 writeback:0 unstable:0 [ 702.847414] slab_reclaimable:13949 slab_unreclaimable:116134 [ 702.847414] mapped:52824 shmem:6931 pagetables:740 bounce:0 [ 702.847414] free:14066 free_pcp:0 free_cma:0 [ 702.850363] 0 [ 702.852446] Node 0 active_anon:52224kB inactive_anon:26872kB active_file:36kB inactive_file:24kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211248kB dirty:0kB writeback:0kB shmem:27708kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 702.856222] 0 [ 702.859264] Node 1 active_anon:388kB inactive_anon:16kB active_file:104kB inactive_file:36kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:16kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 702.870710] 0 [ 702.872629] Node 0 [ 702.884245] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.891409] Node 0 [ 702.915823] lowmem_reserve[]: [ 702.925768] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 702.927333] 0 [ 702.943138] lowmem_reserve[]: [ 702.955199] 2717 [ 702.965401] 0 [ 702.975186] 2718 [ 702.989079] 0 [ 703.025181] 2718 [ 703.065953] 0 [ 703.079207] 2718 [ 703.079217] Node 0 DMA32 free:18364kB min:36200kB low:45248kB high:54296kB active_anon:52224kB inactive_anon:26872kB active_file:36kB inactive_file:24kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2856kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 703.079240] lowmem_reserve[]: 0 0 0 0 0 [ 703.079259] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.079279] lowmem_reserve[]: 0 0 0 0 0 [ 703.079299] Node 1 Normal free:26964kB min:53696kB low:67120kB high:80544kB active_anon:388kB inactive_anon:16kB active_file:20kB inactive_file:16kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 703.079319] lowmem_reserve[]: 0 [ 703.095764] 0 [ 703.108902] 0 0 0 0 [ 703.108919] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 1*16kB (E) 2*32kB (UE) 4*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (M) = 10976kB [ 703.109001] Node 0 DMA32: 1516*4kB (ME) [ 703.125709] 0 [ 703.139401] 778*8kB (UME) 213*16kB (ME) 46*32kB (UM) 0*64kB 1*128kB (U) 0*256kB 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18320kB [ 703.139455] Node 0 Normal: 0*4kB 0*8kB [ 703.156012] 0*16kB [ 703.158068] Node 1 [ 703.187258] 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 703.187292] Node 1 Normal: 33*4kB (M) 28*8kB (M) 28*16kB (M) 24*32kB (M) 15*64kB (M) 7*128kB (M) 6*256kB (UM) 5*512kB (UM) 3*1024kB (M) 0*2048kB 4*4096kB (U) = 26980kB [ 703.187381] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.187387] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 703.187393] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 703.187399] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 703.187403] 6955 total pagecache pages [ 703.187414] 0 pages in swap cache [ 703.187419] Swap cache stats: add 0, delete 0, find 0/0 [ 703.187423] Free swap = 0kB [ 703.187426] Total swap = 0kB [ 703.187433] 2097051 pages RAM [ 703.187436] 0 pages HighMem/MovableOnly [ 703.187440] 363849 pages reserved [ 703.187443] 0 pages cma reserved [ 703.418343] Normal free:155964kB min:53696kB low:67120kB high:80544kB active_anon:368kB inactive_anon:16kB active_file:16kB inactive_file:4020kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:104kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB 08:38:25 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:25 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf, 0x1c], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:25 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:25 executing program 1: sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:25 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 703.692241] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 704.590926] lowmem_reserve[]: 0 0 0 0 0 [ 704.594953] Node 0 DMA: 96*4kB (UE) 3*8kB (UE) 4*16kB (UE) 2*32kB (UE) 16*64kB (UE) 1*128kB (E) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11160kB [ 704.616202] Node 0 DMA32: 7281*4kB (UME) 8450*8kB (UME) 7945*16kB (UME) 4480*32kB (UM) 8*64kB (U) 2*128kB (U) 3*256kB (U) 0*512kB 2*1024kB (U) 0*2048kB 0*4096kB = 370788kB [ 704.637457] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 704.652948] Node 1 Normal: 2901*4kB (UM) 2981*8kB (UM) 2896*16kB (UM) 2776*32kB (UM) 37*64kB (UM) 26*128kB (U) 28*256kB (UM) 26*512kB (UM) 60*1024kB (U) 1*2048kB (U) 0*4096kB = 260284kB [ 704.674689] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.685631] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 704.699702] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 704.714520] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 704.726682] 10115 total pagecache pages [ 704.734601] 0 pages in swap cache 08:38:26 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35, 0xf], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:26 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:26 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:26 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:26 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:26 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) [ 704.738070] Swap cache stats: add 0, delete 0, find 0/0 [ 704.745189] Free swap = 0kB [ 704.752142] Total swap = 0kB [ 704.755164] 2097051 pages RAM [ 704.759897] 0 pages HighMem/MovableOnly [ 704.763871] 363849 pages reserved [ 704.767308] 0 pages cma reserved [ 704.775491] Out of memory: Kill process 27548 (syz-executor.3) score 1004 or sacrifice child 08:38:27 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:27 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 704.854061] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22, 0x35], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:27 executing program 4: ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:27 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 704.987867] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:27 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:27 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1, 0x22], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:27 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:27 executing program 1: socketpair(0x0, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:27 executing program 4: r0 = openat$ion(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) [ 705.205850] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:27 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:27 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a, 0x1], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) [ 705.378848] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:28 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:28 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:28 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:28 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa, 0x3a], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:28 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:28 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:28 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:28 executing program 1: socketpair(0x1e, 0x0, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:28 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) [ 706.204725] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e, 0xa], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 4: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) [ 707.252438] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f, 0x1e], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:29 executing program 3: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:29 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:29 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) [ 707.407756] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [0x1f], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x78, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}, {0xa}, {0xa}]}]}, 0x78}}, 0x8000) 08:38:29 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) [ 707.588871] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING 08:38:29 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x0, 0x0, [], 0x0, 0x200}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:29 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, 0x0) 08:38:29 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)) 08:38:29 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) [ 707.746374] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 708.768510] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 708.782454] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 708.783578] syz-executor.5: [ 708.791791] CPU: 1 PID: 27782 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 708.802677] page allocation failure: order:4 [ 708.807120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 708.807125] Call Trace: [ 708.807144] dump_stack+0x1b2/0x281 [ 708.807158] warn_alloc.cold+0x96/0x1cc [ 708.814289] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 708.821375] ? zone_watermark_ok_safe+0x220/0x220 [ 708.821400] __alloc_pages_nodemask+0x2127/0x2720 [ 708.821417] ? lock_acquire+0x170/0x3f0 [ 708.821433] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 708.821451] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 708.830229] (null) [ 708.831703] ? __mutex_unlock_slowpath+0x75/0x770 [ 708.831719] alloc_pages_current+0x155/0x260 [ 708.831732] ion_page_pool_alloc+0x118/0x1b0 [ 708.839311] syz-executor.5 cpuset= [ 708.844326] ion_system_heap_allocate+0x133/0x8c0 [ 708.844337] ? ion_alloc+0x187/0x810 [ 708.844352] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 708.852596] / [ 708.853311] ? ion_system_contig_heap_create+0x130/0x130 [ 708.859412] mems_allowed=0-1 [ 708.864109] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 708.864124] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 708.864136] ion_alloc+0x204/0x810 [ 708.922764] ? ion_dma_buf_release+0x40/0x40 [ 708.927217] ? __might_fault+0x177/0x1b0 [ 708.931710] ion_ioctl+0xea/0x1f0 [ 708.935175] ? ion_query_heaps+0x360/0x360 [ 708.939423] ? ion_query_heaps+0x360/0x360 [ 708.943865] do_vfs_ioctl+0x75a/0xff0 [ 708.947676] ? ioctl_preallocate+0x1a0/0x1a0 [ 708.952088] ? lock_downgrade+0x740/0x740 [ 708.956249] ? __fget+0x225/0x360 [ 708.959906] ? do_vfs_ioctl+0xff0/0xff0 [ 708.964037] ? security_file_ioctl+0x83/0xb0 [ 708.968602] SyS_ioctl+0x7f/0xb0 [ 708.972003] ? do_vfs_ioctl+0xff0/0xff0 [ 708.976096] do_syscall_64+0x1d5/0x640 [ 708.980170] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 708.985370] RIP: 0033:0x4665f9 [ 708.988562] RSP: 002b:00007ff8dd878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 708.996275] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 709.003742] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 709.011013] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 709.018374] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 709.025816] R13: 00007ffd38e62c5f R14: 00007ff8dd878300 R15: 0000000000022000 [ 709.033134] CPU: 0 PID: 27773 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 709.033372] Mem-Info: [ 709.041254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 709.041259] Call Trace: [ 709.041280] dump_stack+0x1b2/0x281 [ 709.041294] warn_alloc.cold+0x96/0x1cc [ 709.041306] ? zone_watermark_ok_safe+0x220/0x220 [ 709.041328] __alloc_pages_nodemask+0x2127/0x2720 [ 709.043742] active_anon:14278 inactive_anon:6722 isolated_anon:12 [ 709.043742] active_file:1304 inactive_file:2319 isolated_file:0 [ 709.043742] unevictable:0 dirty:84 writeback:0 unstable:0 [ 709.043742] slab_reclaimable:13951 slab_unreclaimable:118717 [ 709.043742] mapped:55310 shmem:6931 pagetables:740 bounce:0 [ 709.043742] free:132344 free_pcp:85 free_cma:0 [ 709.053181] ? retint_kernel+0x2d/0x2d [ 709.053197] ? lock_acquire+0x170/0x3f0 [ 709.053213] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 709.053231] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 709.055848] Node 0 active_anon:56972kB inactive_anon:26888kB active_file:3752kB inactive_file:6628kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:217736kB dirty:256kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 14336kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 709.059466] ? __mutex_unlock_slowpath+0x75/0x770 [ 709.059487] alloc_pages_current+0x155/0x260 [ 709.059501] ion_page_pool_alloc+0x118/0x1b0 [ 709.063486] Node 1 active_anon:140kB inactive_anon:0kB active_file:1464kB inactive_file:2648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3504kB dirty:80kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 709.068321] ion_system_heap_allocate+0x133/0x8c0 [ 709.068331] ? ion_alloc+0x187/0x810 [ 709.068341] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 709.068350] ? ion_system_contig_heap_create+0x130/0x130 [ 709.068360] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 709.068373] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 709.073413] Node 0 [ 709.107443] ion_alloc+0x204/0x810 [ 709.107458] ? ion_dma_buf_release+0x40/0x40 [ 709.107469] ? __might_fault+0x177/0x1b0 [ 709.107485] ion_ioctl+0xea/0x1f0 [ 709.107494] ? ion_query_heaps+0x360/0x360 [ 709.107505] ? ion_query_heaps+0x360/0x360 [ 709.107514] do_vfs_ioctl+0x75a/0xff0 [ 709.107525] ? ioctl_preallocate+0x1a0/0x1a0 [ 709.107539] ? lock_downgrade+0x740/0x740 [ 709.111598] DMA free:11136kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 709.115535] ? __fget+0x225/0x360 [ 709.120404] lowmem_reserve[]: [ 709.126000] ? do_vfs_ioctl+0xff0/0xff0 [ 709.154493] 0 [ 709.159486] ? security_file_ioctl+0x83/0xb0 [ 709.159498] SyS_ioctl+0x7f/0xb0 [ 709.159507] ? do_vfs_ioctl+0xff0/0xff0 [ 709.159518] do_syscall_64+0x1d5/0x640 [ 709.159533] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 709.159542] RIP: 0033:0x4665f9 [ 709.159547] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 709.159557] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 709.159562] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 709.159568] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 709.159573] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 709.159577] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 709.378722] 2717 2718 2718 2718 [ 709.382447] Node 0 DMA32 free:326288kB min:36200kB low:45248kB high:54296kB active_anon:56972kB inactive_anon:26888kB active_file:3756kB inactive_file:6676kB unevictable:0kB writepending:264kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2960kB bounce:0kB free_pcp:336kB local_pcp:136kB free_cma:0kB [ 709.413407] lowmem_reserve[]: 0 0 0 0 0 [ 709.417727] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 709.444277] lowmem_reserve[]: 0 0 0 0 0 [ 709.448517] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:140kB inactive_anon:0kB active_file:1504kB inactive_file:2572kB unevictable:0kB writepending:80kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:36kB local_pcp:0kB free_cma:0kB [ 709.478372] lowmem_reserve[]: 0 0 0 0 0 [ 709.482793] Node 0 DMA: 5*4kB (UE) 18*8kB (UE) 10*16kB (UE) 10*32kB (UE) 10*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11140kB [ 709.499543] Node 0 DMA32: 1348*4kB (UME) 463*8kB (UME) 631*16kB (UME) 6778*32kB (UME) 8*64kB (U) 1*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 236728kB [ 709.515053] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 709.526556] Node 1 Normal: 97*4kB (UM) 420*8kB (UM) 309*16kB (UM) 104*32kB (UM) 3*64kB (UM) 0*128kB 2*256kB (UM) 44*512kB (UM) 14*1024kB (U) 2*2048kB (U) 0*4096kB = 53684kB [ 709.543442] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 709.553229] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 709.563033] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 709.572919] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 709.582562] 10561 total pagecache pages [ 709.586792] 0 pages in swap cache [ 709.591449] Swap cache stats: add 0, delete 0, find 0/0 [ 709.597044] Free swap = 0kB [ 709.602143] Total swap = 0kB [ 709.605545] 2097051 pages RAM [ 709.609775] 0 pages HighMem/MovableOnly [ 709.613857] 363849 pages reserved [ 709.617703] 0 pages cma reserved [ 710.024691] oom_reaper: reaped process 27773 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 710.090435] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 710.125871] syz-fuzzer cpuset=/ mems_allowed=0-1 [ 710.130951] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 710.138408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.148199] Call Trace: [ 710.150802] dump_stack+0x1b2/0x281 [ 710.154448] dump_header+0x178/0x82f [ 710.158627] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 710.164279] ? ___ratelimit+0x2cd/0x530 [ 710.168358] oom_kill_process.cold+0x10/0xa40 [ 710.173045] out_of_memory+0xe3e/0x1190 [ 710.177082] ? oom_killer_disable+0x1c0/0x1c0 [ 710.181675] ? mutex_trylock+0x152/0x1a0 [ 710.185873] __alloc_pages_nodemask+0x23e1/0x2720 [ 710.190867] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 710.195739] alloc_pages_current+0x155/0x260 [ 710.200155] filemap_fault+0x11a1/0x1ad0 [ 710.204232] ext4_filemap_fault+0x84/0xb0 [ 710.208519] __do_fault+0xfa/0x380 [ 710.212063] __handle_mm_fault+0x2497/0x4620 [ 710.216480] ? vm_insert_page+0x7c0/0x7c0 [ 710.220642] ? mark_held_locks+0xa6/0xf0 [ 710.224710] handle_mm_fault+0x455/0x9c0 [ 710.228950] __do_page_fault+0x549/0xad0 [ 710.233217] ? spurious_fault+0x640/0x640 [ 710.237369] ? do_page_fault+0x60/0x500 [ 710.241416] ? page_fault+0x2f/0x50 [ 710.245226] page_fault+0x45/0x50 [ 710.248688] RIP: 1980:0x947811 [ 710.251875] RSP: 03cc:000000c00063de40 EFLAGS: 00000003 [ 710.252803] Mem-Info: [ 710.260784] active_anon:13745 inactive_anon:6722 isolated_anon:0 [ 710.260784] active_file:45 inactive_file:29 isolated_file:0 [ 710.260784] unevictable:0 dirty:0 writeback:0 unstable:0 [ 710.260784] slab_reclaimable:13936 slab_unreclaimable:118174 [ 710.260784] mapped:52869 shmem:6931 pagetables:739 bounce:0 [ 710.260784] free:13771 free_pcp:60 free_cma:0 [ 710.264733] syz-executor.5: [ 710.298213] Node 0 active_anon:54840kB inactive_anon:26888kB active_file:180kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211476kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 710.298233] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 710.298261] Node 0 DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.298279] lowmem_reserve[]: 0 2717 2718 2718 [ 710.319793] page allocation failure: order:0 [ 710.329439] 2718 [ 710.329448] Node 0 DMA32 free:17624kB min:36200kB low:45248kB high:54296kB active_anon:54840kB inactive_anon:26888kB active_file:60kB inactive_file:304kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7616kB pagetables:2956kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 710.329507] lowmem_reserve[]: 0 0 0 0 0 [ 710.329526] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.329547] lowmem_reserve[]: [ 710.378287] , mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask= [ 710.383365] 0 [ 710.388019] (null) [ 710.391953] 0 0 0 0 [ 710.391970] Node 1 Normal free:26500kB min:53696kB low:67120kB high:80544kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 710.391990] lowmem_reserve[]: 0 0 0 0 0 [ 710.392010] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 8*16kB (UE) 10*32kB (UE) 10*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB [ 710.410514] syz-executor.5 cpuset= [ 710.425508] (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 710.425536] Node 0 DMA32: 1630*4kB (UME) 895*8kB (UME) 207*16kB (UME) 23*32kB (M) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 17728kB [ 710.425594] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB [ 710.446363] / [ 710.456075] 0*256kB [ 710.477792] mems_allowed=0-1 [ 710.502040] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 710.502061] Node 1 Normal: 12*4kB (M) 13*8kB (UM) 10*16kB (UM) 7*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (UM) 9*512kB (UM) 16*1024kB (UM) 2*2048kB (U) 0*4096kB = 26840kB [ 710.502142] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.502153] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 710.522979] CPU: 1 PID: 27773 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 710.528781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 710.542431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 710.542436] Call Trace: [ 710.542458] dump_stack+0x1b2/0x281 [ 710.542473] warn_alloc.cold+0x96/0x1cc [ 710.542484] ? zone_watermark_ok_safe+0x220/0x220 [ 710.542494] ? usleep_range+0x130/0x130 [ 710.542505] ? try_to_free_pages+0x23f/0x6e0 [ 710.549153] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 710.550840] ? _find_next_bit+0xdb/0x100 [ 710.553154] 6992 total pagecache pages [ 710.556582] ? run_timer_softirq+0x5a0/0x5a0 [ 710.561769] 0 pages in swap cache [ 710.577371] __alloc_pages_nodemask+0x2127/0x2720 [ 710.577390] ? lock_acquire+0x170/0x3f0 [ 710.577404] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 710.577414] ? ion_page_pool_alloc+0x9e/0x1b0 [ 710.577430] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 710.586336] Swap cache stats: add 0, delete 0, find 0/0 [ 710.595195] ? audit_kill_trees+0x230/0x230 [ 710.595210] alloc_pages_current+0x155/0x260 [ 710.595223] ion_page_pool_alloc+0x118/0x1b0 [ 710.595233] ion_system_heap_allocate+0x133/0x8c0 [ 710.595243] ? ion_alloc+0x187/0x810 [ 710.603627] Free swap = 0kB [ 710.611972] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 710.611982] ? ion_system_contig_heap_create+0x130/0x130 [ 710.611992] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 710.612004] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 710.612014] ion_alloc+0x204/0x810 [ 710.621616] Total swap = 0kB [ 710.624153] ? ion_dma_buf_release+0x40/0x40 [ 710.627758] 2097051 pages RAM [ 710.631831] ? __might_fault+0x177/0x1b0 [ 710.631844] ion_ioctl+0xea/0x1f0 [ 710.631853] ? ion_query_heaps+0x360/0x360 [ 710.631864] ? ion_query_heaps+0x360/0x360 [ 710.631874] do_vfs_ioctl+0x75a/0xff0 [ 710.631885] ? ioctl_preallocate+0x1a0/0x1a0 [ 710.631894] ? lock_downgrade+0x740/0x740 [ 710.631911] ? __fget+0x225/0x360 [ 710.636854] 0 pages HighMem/MovableOnly [ 710.640917] ? do_vfs_ioctl+0xff0/0xff0 [ 710.640930] ? security_file_ioctl+0x83/0xb0 [ 710.640940] SyS_ioctl+0x7f/0xb0 [ 710.640948] ? do_vfs_ioctl+0xff0/0xff0 [ 710.640959] do_syscall_64+0x1d5/0x640 [ 710.640975] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 710.640985] RIP: 0033:0x4665f9 [ 710.645394] 363849 pages reserved [ 710.654348] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 710.654359] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 710.654364] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 710.654368] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 710.654373] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 710.654378] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 710.670815] warn_alloc_show_mem: 1 callbacks suppressed [ 710.670818] Mem-Info: [ 710.672044] 0 pages cma reserved [ 710.676305] active_anon:13745 inactive_anon:6722 isolated_anon:0 [ 710.676305] active_file:19 inactive_file:29 isolated_file:0 [ 710.676305] unevictable:0 dirty:0 writeback:0 unstable:0 [ 710.676305] slab_reclaimable:13936 slab_unreclaimable:118174 [ 710.676305] mapped:52869 shmem:6931 pagetables:739 bounce:0 [ 710.676305] free:13771 free_pcp:60 free_cma:0 [ 710.680677] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 710.680736] Killed process 7974 (syz-executor.2) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 710.700721] Node 0 active_anon:54840kB inactive_anon:26888kB active_file:76kB inactive_file:116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211476kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 710.712275] oom_reaper: reaped process 7974 (syz-executor.2), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 710.736058] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 710.763424] syz-fuzzer invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask= [ 710.781044] Node 0 [ 710.798885] (null) [ 710.818445] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 710.818449] lowmem_reserve[]: 0 2717 2718 2718 [ 710.881001] , order=0, oom_score_adj=0 [ 710.900433] 2718 [ 710.979336] syz-fuzzer cpuset= [ 711.070140] / mems_allowed=0-1 [ 711.074060] CPU: 0 PID: 7967 Comm: syz-fuzzer Not tainted 4.14.232-syzkaller #0 [ 711.074345] Node 0 [ 711.081518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 711.081522] Call Trace: [ 711.081539] dump_stack+0x1b2/0x281 [ 711.081550] dump_header+0x178/0x82f [ 711.081561] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 711.081575] ? ___ratelimit+0x2cd/0x530 [ 711.083861] DMA32 free:17728kB min:36200kB low:45248kB high:54296kB active_anon:54740kB inactive_anon:26888kB active_file:64kB inactive_file:56kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2808kB bounce:0kB free_pcp:508kB local_pcp:0kB free_cma:0kB [ 711.093506] oom_kill_process.cold+0x10/0xa40 [ 711.093525] out_of_memory+0xe3e/0x1190 [ 711.093539] ? oom_killer_disable+0x1c0/0x1c0 [ 711.093551] ? mutex_trylock+0x152/0x1a0 [ 711.096274] lowmem_reserve[]: [ 711.099902] __alloc_pages_nodemask+0x23e1/0x2720 [ 711.099924] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 711.099948] alloc_pages_current+0x155/0x260 [ 711.103798] 0 [ 711.108905] filemap_fault+0x11a1/0x1ad0 [ 711.108924] ext4_filemap_fault+0x84/0xb0 [ 711.108935] __do_fault+0xfa/0x380 [ 711.112916] 0 [ 711.141324] __handle_mm_fault+0x2497/0x4620 [ 711.141335] ? vm_insert_page+0x7c0/0x7c0 [ 711.141352] ? mark_held_locks+0xa6/0xf0 [ 711.141362] handle_mm_fault+0x455/0x9c0 [ 711.145942] 0 [ 711.150012] __do_page_fault+0x549/0xad0 [ 711.150024] ? spurious_fault+0x640/0x640 [ 711.150032] ? do_page_fault+0x60/0x500 [ 711.150043] ? page_fault+0x2f/0x50 [ 711.154744] 0 [ 711.159018] page_fault+0x45/0x50 [ 711.159027] RIP: 1980:0x947811 [ 711.159030] RSP: 03cc:000000c00063de40 EFLAGS: 00000003 [ 711.174811] Mem-Info: [ 711.189667] 0 [ 711.197772] active_anon:13707 inactive_anon:6722 isolated_anon:0 [ 711.197772] active_file:15 inactive_file:16 isolated_file:0 [ 711.197772] unevictable:0 dirty:0 writeback:0 unstable:0 [ 711.197772] slab_reclaimable:13931 slab_unreclaimable:118164 [ 711.197772] mapped:44140 shmem:6931 pagetables:694 bounce:0 [ 711.197772] free:16928 free_pcp:205 free_cma:0 [ 711.222490] Node 0 active_anon:54688kB inactive_anon:26888kB active_file:60kB inactive_file:60kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:176560kB dirty:0kB writeback:0kB shmem:27724kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 12288kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 711.237276] Node 0 [ 711.250419] Node 1 active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 711.294626] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.316671] Node 0 [ 711.354427] lowmem_reserve[]: 0 0 0 0 0 [ 711.405614] DMA free:10960kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.409928] Node 1 [ 711.463599] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 711.476042] Node 0 DMA32 free:30744kB min:36200kB low:45248kB high:54296kB active_anon:54688kB inactive_anon:26888kB active_file:124kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7584kB pagetables:2776kB bounce:0kB free_pcp:700kB local_pcp:700kB free_cma:0kB [ 711.525441] lowmem_reserve[]: 0 0 0 0 0 [ 711.535273] Normal free:26840kB min:53696kB low:67120kB high:80544kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:0kB free_cma:0kB [ 711.562805] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.633281] lowmem_reserve[]: 0 0 0 0 0 [ 711.637740] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 8*16kB (UE) 10*32kB (UE) 10*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 711.638217] lowmem_reserve[]: [ 711.667088] Node 0 [ 711.671039] 0 0 0 0 0 [ 711.675876] Node 1 Normal free:26940kB min:53696kB low:67120kB high:80544kB active_anon:140kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 711.677327] DMA32: 1058*4kB (UMEH) 901*8kB (UMEH) 215*16kB (UMEH) 110*32kB (UMH) 191*64kB (UH) 19*128kB (U) 9*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 37408kB [ 711.736377] lowmem_reserve[]: 0 0 0 0 0 [ 711.738418] Node 0 [ 711.740867] Node 0 DMA: 2*4kB (UE) 1*8kB (E) 8*16kB (UE) 10*32kB (UE) 10*64kB (UE) 3*128kB (UE) 1*256kB (E) 2*512kB (UE) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10960kB [ 711.740943] Node 0 DMA32: 1306*4kB (UMEH) 901*8kB (UMEH) 214*16kB (UMEH) 110*32kB (UMH) 191*64kB (UH) 19*128kB (U) 9*256kB (UH) 4*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 38384kB [ 711.741024] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 711.741075] Node 1 [ 711.746436] Normal: [ 711.785782] Normal: [ 711.793743] 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 711.813211] 12*4kB (M) 12*8kB (M) 10*16kB (UM) 7*32kB (M) 3*64kB (M) 3*128kB (UM) 3*256kB (UM) 9*512kB (UM) 16*1024kB (UM) 2*2048kB (U) 0*4096kB = 26960kB [ 711.817689] Node 1 Normal: 12*4kB (M) 12*8kB (M) 10*16kB (UM) 7*32kB (M) 3*64kB (M) 3*128kB (UM) 3*256kB (UM) 9*512kB (UM) 16*1024kB (UM) 2*2048kB (U) 0*4096kB = 26960kB [ 711.851903] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.862549] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.864616] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.883465] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.886995] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.904158] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 711.908714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.927050] 6994 total pagecache pages [ 711.931253] 0 pages in swap cache [ 711.931714] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 711.934725] Swap cache stats: add 0, delete 0, find 0/0 [ 711.958460] 6994 total pagecache pages [ 711.962652] Free swap = 0kB [ 711.967982] Total swap = 0kB [ 711.970521] 0 pages in swap cache [ 711.974984] Swap cache stats: add 0, delete 0, find 0/0 [ 711.975235] 2097051 pages RAM [ 711.993731] Free swap = 0kB [ 711.994557] 0 pages HighMem/MovableOnly [ 711.996773] Total swap = 0kB [ 712.003358] 363849 pages reserved [ 712.005949] 2097051 pages RAM [ 712.007306] 0 pages cma reserved [ 712.012565] 0 pages HighMem/MovableOnly [ 712.017974] 363849 pages reserved [ 712.078530] 0 pages cma reserved [ 712.103831] Out of memory (oom_kill_allocating_task): Kill process 7967 (syz-fuzzer) score 0 or sacrifice child [ 712.218385] Killed process 7978 (syz-executor.1) total-vm:84924kB, anon-rss:64kB, file-rss:0kB, shmem-rss:0kB [ 712.800385] IPVS: stopping master sync thread 23833 ... [ 712.807279] IPVS: stopping backup sync thread 1610 ... [ 712.817675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.825613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.834597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 712.841510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.850194] device bridge_slave_1 left promiscuous mode [ 712.856113] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.866696] device bridge_slave_0 left promiscuous mode [ 712.872333] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.882140] device veth1_macvtap left promiscuous mode [ 712.887755] device veth0_macvtap left promiscuous mode [ 712.893544] device veth1_vlan left promiscuous mode [ 712.900164] device veth0_vlan left promiscuous mode [ 713.008456] device hsr_slave_1 left promiscuous mode [ 713.017000] device hsr_slave_0 left promiscuous mode [ 713.034040] team0 (unregistering): Port device team_slave_1 removed [ 713.046297] team0 (unregistering): Port device team_slave_0 removed [ 713.057305] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 713.074797] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 713.112654] bond0 (unregistering): Released all slaves 08:38:35 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:35 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:35 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0xa0840, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:35 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x470, 0x338, 0x338, 0xe8, 0x3d8, 0x1a8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x3d8, 0x6, 0x0, {[{{@ip={@local, @local, 0xffffffff, 0xff000000, 'veth0_to_batadv\x00', 'veth0_to_batadv\x00', {0xff}, {0xff}, 0xf3, 0x0, 0x24}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote}}}, {{@ip={@broadcast, @remote, 0x0, 0x0, 'erspan0\x00', 'sit0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'virt_wifi0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4d0) 08:38:35 executing program 1: socketpair(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, 0x0, 0x8000) 08:38:35 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff, 0x465fda12623540f}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x0, 0x465fda12623540f}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) 08:38:36 executing program 3: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000000c0)={0x7fffffff}) [ 714.499462] IPVS: stopping master sync thread 23971 ... [ 714.507367] IPVS: stopping backup sync thread 1839 ... [ 714.556262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 714.591449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.629222] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.662842] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.707956] device bridge_slave_1 left promiscuous mode [ 714.729138] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.753829] device bridge_slave_0 left promiscuous mode [ 714.776839] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.809022] device veth1_macvtap left promiscuous mode [ 714.829889] device veth0_macvtap left promiscuous mode [ 714.847889] device veth1_vlan left promiscuous mode [ 714.868325] device veth0_vlan left promiscuous mode [ 715.151175] device hsr_slave_1 left promiscuous mode [ 715.187640] device hsr_slave_0 left promiscuous mode [ 715.246339] team0 (unregistering): Port device team_slave_1 removed [ 715.287741] team0 (unregistering): Port device team_slave_0 removed [ 715.327408] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 715.372497] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 715.470766] bond0 (unregistering): Released all slaves [ 715.491529] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 715.491743] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 715.527933] syz-executor.5 cpuset= [ 715.532646] syz-executor.4 cpuset= [ 715.534466] / mems_allowed=0-1 [ 715.543489] / mems_allowed=0-1 [ 715.544586] CPU: 0 PID: 27839 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 715.555746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.570001] Call Trace: [ 715.572667] dump_stack+0x1b2/0x281 [ 715.576364] warn_alloc.cold+0x96/0x1cc [ 715.580878] ? zone_watermark_ok_safe+0x220/0x220 [ 715.585841] __alloc_pages_nodemask+0x2127/0x2720 [ 715.590697] ? _raw_spin_unlock_irq+0x24/0x80 [ 715.595207] ? lock_acquire+0x170/0x3f0 [ 715.599490] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 715.604438] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 715.609998] ? __mutex_unlock_slowpath+0x75/0x770 [ 715.614860] alloc_pages_current+0x155/0x260 [ 715.619371] ion_page_pool_alloc+0x118/0x1b0 [ 715.624020] ion_system_heap_allocate+0x133/0x8c0 [ 715.629226] ? ion_alloc+0x187/0x810 [ 715.633194] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 715.638928] ? ion_system_contig_heap_create+0x130/0x130 [ 715.644616] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 715.649902] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 715.654757] ion_alloc+0x204/0x810 [ 715.658307] ? ion_dma_buf_release+0x40/0x40 [ 715.662810] ? __might_fault+0x177/0x1b0 [ 715.667014] ion_ioctl+0xea/0x1f0 [ 715.670480] ? ion_query_heaps+0x360/0x360 [ 715.674874] ? ion_query_heaps+0x360/0x360 [ 715.679350] do_vfs_ioctl+0x75a/0xff0 [ 715.683162] ? ioctl_preallocate+0x1a0/0x1a0 [ 715.687578] ? lock_downgrade+0x740/0x740 [ 715.691906] ? __fget+0x225/0x360 [ 715.695369] ? do_vfs_ioctl+0xff0/0xff0 [ 715.699349] ? security_file_ioctl+0x83/0xb0 [ 715.703951] SyS_ioctl+0x7f/0xb0 [ 715.707531] ? do_vfs_ioctl+0xff0/0xff0 [ 715.711517] do_syscall_64+0x1d5/0x640 [ 715.715547] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 715.720881] RIP: 0033:0x4665f9 [ 715.724155] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.732013] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 715.739607] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 715.746892] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 715.754172] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 715.761531] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 715.772772] CPU: 1 PID: 27836 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 715.780880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 715.790550] Call Trace: [ 715.793247] dump_stack+0x1b2/0x281 [ 715.796895] warn_alloc.cold+0x96/0x1cc [ 715.802076] ? zone_watermark_ok_safe+0x220/0x220 [ 715.808053] __alloc_pages_nodemask+0x2127/0x2720 [ 715.813227] ? _raw_spin_unlock_irq+0x24/0x80 [ 715.817752] ? lock_acquire+0x170/0x3f0 [ 715.821923] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 715.827046] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 715.833316] ? __mutex_unlock_slowpath+0x75/0x770 [ 715.839742] alloc_pages_current+0x155/0x260 [ 715.844261] ion_page_pool_alloc+0x118/0x1b0 [ 715.849029] ion_system_heap_allocate+0x133/0x8c0 [ 715.853983] ? ion_alloc+0x187/0x810 [ 715.858047] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 715.863951] ? ion_system_contig_heap_create+0x130/0x130 [ 715.869425] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 715.874479] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 715.879546] ion_alloc+0x204/0x810 [ 715.883253] ? ion_dma_buf_release+0x40/0x40 [ 715.888016] ? __might_fault+0x177/0x1b0 [ 715.892509] ion_ioctl+0xea/0x1f0 [ 715.896009] ? ion_query_heaps+0x360/0x360 [ 715.900453] ? ion_query_heaps+0x360/0x360 [ 715.904867] do_vfs_ioctl+0x75a/0xff0 [ 715.908789] ? ioctl_preallocate+0x1a0/0x1a0 [ 715.913283] ? lock_downgrade+0x740/0x740 [ 715.917677] ? __fget+0x225/0x360 [ 715.921383] ? do_vfs_ioctl+0xff0/0xff0 [ 715.925694] ? security_file_ioctl+0x83/0xb0 [ 715.930136] SyS_ioctl+0x7f/0xb0 [ 715.934081] ? do_vfs_ioctl+0xff0/0xff0 [ 715.938539] do_syscall_64+0x1d5/0x640 [ 715.942478] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 715.947870] RIP: 0033:0x4665f9 [ 715.951578] RSP: 002b:00007fd94f735188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 715.959891] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 715.967709] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 715.975958] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 715.983375] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 715.991164] R13: 00007ffc5bf10fcf R14: 00007fd94f735300 R15: 0000000000022000 [ 716.016472] Mem-Info: [ 716.026933] syz-executor.0: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 716.047194] active_anon:13143 inactive_anon:6719 isolated_anon:0 [ 716.047194] active_file:2611 inactive_file:4138 isolated_file:12 [ 716.047194] unevictable:0 dirty:8 writeback:0 unstable:0 [ 716.047194] slab_reclaimable:13962 slab_unreclaimable:117143 [ 716.047194] mapped:57601 shmem:6924 pagetables:779 bounce:0 [ 716.047194] free:114357 free_pcp:0 free_cma:0 [ 716.082301] syz-executor.0 cpuset=/ mems_allowed=0-1 [ 716.087591] CPU: 0 PID: 27838 Comm: syz-executor.0 Not tainted 4.14.232-syzkaller #0 [ 716.095741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 716.105414] Call Trace: [ 716.108226] dump_stack+0x1b2/0x281 [ 716.111993] warn_alloc.cold+0x96/0x1cc [ 716.115987] ? zone_watermark_ok_safe+0x220/0x220 [ 716.118766] Node 0 active_anon:52528kB inactive_anon:26876kB active_file:10408kB inactive_file:16532kB unevictable:0kB isolated(anon):0kB isolated(file):48kB mapped:230476kB dirty:52kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 716.121025] __alloc_pages_nodemask+0x2127/0x2720 [ 716.121038] ? io_schedule_timeout+0x140/0x140 [ 716.121056] ? lock_acquire+0x170/0x3f0 [ 716.163418] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 716.168291] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 716.174009] ? __mutex_unlock_slowpath+0x75/0x770 [ 716.178860] alloc_pages_current+0x155/0x260 [ 716.183275] ion_page_pool_alloc+0x118/0x1b0 [ 716.187685] ion_system_heap_allocate+0x133/0x8c0 [ 716.187797] Node 1 active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 716.192645] ? ion_alloc+0x187/0x810 [ 716.192656] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 716.192666] ? ion_system_contig_heap_create+0x130/0x130 [ 716.192676] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 716.192688] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 716.192700] ion_alloc+0x204/0x810 [ 716.192714] ? ion_dma_buf_release+0x40/0x40 [ 716.253337] ? __might_fault+0x177/0x1b0 [ 716.257407] ion_ioctl+0xea/0x1f0 [ 716.260862] ? ion_query_heaps+0x360/0x360 [ 716.261561] Node 0 [ 716.265107] ? ion_query_heaps+0x360/0x360 [ 716.265119] do_vfs_ioctl+0x75a/0xff0 [ 716.265131] ? ioctl_preallocate+0x1a0/0x1a0 [ 716.265143] ? lock_downgrade+0x740/0x740 [ 716.275135] DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.276083] ? __fget+0x225/0x360 [ 716.286092] lowmem_reserve[]: [ 716.310190] ? do_vfs_ioctl+0xff0/0xff0 [ 716.310203] ? security_file_ioctl+0x83/0xb0 [ 716.310214] SyS_ioctl+0x7f/0xb0 [ 716.310222] ? do_vfs_ioctl+0xff0/0xff0 [ 716.310233] do_syscall_64+0x1d5/0x640 [ 716.310247] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 716.310255] RIP: 0033:0x4665f9 [ 716.310259] RSP: 002b:00007ff8dd878188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 716.310269] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 716.310279] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 716.346131] 0 [ 716.352829] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 716.352835] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 716.352840] R13: 00007ffd38e62c5f R14: 00007ff8dd878300 R15: 0000000000022000 [ 716.409483] 2717 2718 2718 2718 [ 716.422654] Node 0 DMA32 free:177208kB min:36200kB low:45248kB high:54296kB active_anon:52528kB inactive_anon:26876kB active_file:10408kB inactive_file:16772kB unevictable:0kB writepending:52kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3144kB bounce:0kB free_pcp:232kB local_pcp:232kB free_cma:0kB [ 716.488418] lowmem_reserve[]: 0 0 0 0 0 [ 716.505038] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.610302] lowmem_reserve[]: 0 0 0 0 0 [ 716.614362] Node 1 Normal free:53684kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:20kB unevictable:0kB writepending:4kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 716.718289] lowmem_reserve[]: 0 0 0 0 0 [ 716.722335] Node 0 DMA: 5*4kB (UE) 18*8kB (UE) 10*16kB (UE) 10*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11076kB [ 716.758588] Node 0 DMA32: 1812*4kB (UMEH) 971*8kB (UMEH) 243*16kB (UMEH) 350*32kB (UMEH) 29*64kB (UMH) 23*128kB (UMH) 9*256kB (UMH) 0*512kB 0*1024kB 0*2048kB 0*4096kB = 37208kB [ 716.805403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 716.827936] Node 1 Normal: 86*4kB (UM) 420*8kB (UM) 313*16kB (UM) 106*32kB (UM) 4*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 2*2048kB (U) 9*4096kB (U) = 53704kB [ 716.852224] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.861964] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 716.895700] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 716.989053] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 716.997653] 6990 total pagecache pages [ 717.015151] syz-executor.4 invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 717.033044] 0 pages in swap cache [ 717.036504] Swap cache stats: add 0, delete 0, find 0/0 [ 717.042167] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 717.047371] CPU: 0 PID: 5523 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 717.055176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.064526] Call Trace: [ 717.067111] dump_stack+0x1b2/0x281 [ 717.070730] dump_header+0x178/0x82f [ 717.074435] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 717.079531] ? ___ratelimit+0x2cd/0x530 [ 717.083671] oom_kill_process.cold+0x10/0xa40 [ 717.088250] out_of_memory+0xe3e/0x1190 [ 717.092238] ? oom_killer_disable+0x1c0/0x1c0 [ 717.096754] ? mutex_trylock+0x152/0x1a0 [ 717.100812] __alloc_pages_nodemask+0x23e1/0x2720 [ 717.105660] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 717.110517] alloc_pages_current+0x155/0x260 [ 717.114937] filemap_fault+0x11a1/0x1ad0 [ 717.119016] ext4_filemap_fault+0x84/0xb0 [ 717.123157] __do_fault+0xfa/0x380 [ 717.126690] __handle_mm_fault+0x2497/0x4620 [ 717.131109] ? vm_insert_page+0x7c0/0x7c0 [ 717.136897] ? hrtimer_nanosleep+0x1ff/0x4b0 [ 717.141301] ? nanosleep_copyout+0x100/0x100 [ 717.145714] ? mark_held_locks+0xa6/0xf0 [ 717.149797] handle_mm_fault+0x455/0x9c0 [ 717.153961] __do_page_fault+0x549/0xad0 [ 717.158024] ? spurious_fault+0x640/0x640 [ 717.162165] ? do_page_fault+0x60/0x500 [ 717.166129] ? page_fault+0x2f/0x50 [ 717.169747] page_fault+0x45/0x50 [ 717.173187] RIP: ae7ec:0x2 [ 717.176013] RSP: 0a8e:00007ffc5bf1128c EFLAGS: 00000032 [ 717.193729] Free swap = 0kB [ 717.224217] Total swap = 0kB [ 717.227273] 2097051 pages RAM [ 717.244655] 0 pages HighMem/MovableOnly [ 717.254923] 363849 pages reserved [ 717.260633] 0 pages cma reserved [ 717.266244] Mem-Info: [ 717.275021] active_anon:13144 inactive_anon:6719 isolated_anon:0 [ 717.275021] active_file:30 inactive_file:13 isolated_file:0 [ 717.275021] unevictable:0 dirty:0 writeback:0 unstable:0 [ 717.275021] slab_reclaimable:13963 slab_unreclaimable:116866 [ 717.275021] mapped:52891 shmem:6924 pagetables:786 bounce:0 [ 717.275021] free:24994 free_pcp:62 free_cma:0 [ 717.319383] Node 0 active_anon:52528kB inactive_anon:26876kB active_file:112kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211564kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 717.357779] Node 1 active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 717.394321] Node 0 DMA free:11076kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.431236] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 717.436469] Node 0 DMA32 free:35800kB min:36200kB low:45248kB high:54296kB active_anon:52528kB inactive_anon:26876kB active_file:112kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3144kB bounce:0kB free_pcp:128kB local_pcp:128kB free_cma:0kB [ 717.476643] lowmem_reserve[]: 0 0 0 0 0 [ 717.482776] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 717.518802] lowmem_reserve[]: 0 0 0 0 0 [ 717.522841] Node 1 Normal free:53100kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:0kB active_file:8kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:120kB local_pcp:120kB free_cma:0kB [ 717.564331] lowmem_reserve[]: 0 0 0 0 0 [ 717.574915] Node 0 DMA: 5*4kB (UE) 18*8kB (UE) 10*16kB (UE) 10*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 11076kB [ 717.601624] Node 0 DMA32: 2076*4kB (MEH) 1079*8kB (MEH) 273*16kB (MEH) 223*32kB (UMEH) 29*64kB (UMH) 21*128kB (UMH) 7*256kB (UMH) 0*512kB 1*1024kB (H) 0*2048kB 0*4096kB = 35800kB [ 717.628639] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 717.647991] Node 1 Normal: 1*4kB (M) 385*8kB (UM) 312*16kB (UM) 105*32kB (UM) 5*64kB (UM) 1*128kB (U) 1*256kB (U) 0*512kB 0*1024kB 2*2048kB (U) 9*4096kB (U) = 53100kB [ 717.673711] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.686762] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 717.706838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 717.715778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 717.735519] 6947 total pagecache pages [ 717.741566] 0 pages in swap cache [ 717.745020] Swap cache stats: add 0, delete 0, find 0/0 [ 717.760941] Free swap = 0kB [ 717.763965] Total swap = 0kB [ 717.766976] 2097051 pages RAM [ 717.776370] 0 pages HighMem/MovableOnly [ 717.784627] 363849 pages reserved [ 717.788076] 0 pages cma reserved [ 717.797794] Out of memory (oom_kill_allocating_task): Kill process 5523 (syz-executor.4) score 0 or sacrifice child [ 717.819026] Killed process 27836 (syz-executor.4) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 717.866576] oom_reaper: reaped process 27836 (syz-executor.4), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 717.891559] rs:main Q:Reg invoked oom-killer: gfp_mask=0x14201ca(GFP_HIGHUSER_MOVABLE|__GFP_COLD), nodemask=(null), order=0, oom_score_adj=0 [ 717.917174] rs:main Q:Reg cpuset=/ mems_allowed=0-1 [ 717.924475] CPU: 0 PID: 26415 Comm: rs:main Q:Reg Not tainted 4.14.232-syzkaller #0 [ 717.932271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 717.941637] Call Trace: [ 717.944225] dump_stack+0x1b2/0x281 [ 717.947847] dump_header+0x178/0x82f [ 717.951565] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 717.956661] ? ___ratelimit+0x2cd/0x530 [ 717.960631] oom_kill_process.cold+0x10/0xa40 [ 717.965127] out_of_memory+0xe3e/0x1190 [ 717.969119] ? oom_killer_disable+0x1c0/0x1c0 [ 717.973611] ? mutex_trylock+0x152/0x1a0 [ 717.977668] __alloc_pages_nodemask+0x23e1/0x2720 [ 717.982515] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 717.987363] alloc_pages_current+0x155/0x260 [ 717.991768] filemap_fault+0x11a1/0x1ad0 [ 717.995847] ext4_filemap_fault+0x84/0xb0 [ 717.999989] __do_fault+0xfa/0x380 [ 718.003523] __handle_mm_fault+0x2497/0x4620 [ 718.007928] ? vm_insert_page+0x7c0/0x7c0 [ 718.012072] ? lock_downgrade+0x740/0x740 [ 718.016212] ? vfs_write+0x35d/0x4d0 [ 718.019931] ? mark_held_locks+0xa6/0xf0 [ 718.023989] handle_mm_fault+0x455/0x9c0 [ 718.028053] __do_page_fault+0x549/0xad0 [ 718.032115] ? spurious_fault+0x640/0x640 [ 718.036255] ? do_page_fault+0x60/0x500 [ 718.040221] ? page_fault+0x2f/0x50 [ 718.043840] page_fault+0x45/0x50 [ 718.047298] RIP: c6946b90:0x561f321e2bec [ 718.051536] RSP: b8002080:00007fd6c6946b80 EFLAGS: 00000001 [ 718.064991] Mem-Info: [ 718.070451] syz-executor.4: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 718.076650] active_anon:13121 inactive_anon:6719 isolated_anon:0 [ 718.076650] active_file:19 inactive_file:19 isolated_file:0 [ 718.076650] unevictable:0 dirty:0 writeback:0 unstable:0 [ 718.076650] slab_reclaimable:13963 slab_unreclaimable:116864 [ 718.076650] mapped:52891 shmem:6924 pagetables:786 bounce:0 [ 718.076650] free:13964 free_pcp:151 free_cma:0 [ 718.130890] Node 0 active_anon:52436kB inactive_anon:26876kB active_file:44kB inactive_file:44kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211564kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.139430] syz-executor.4 cpuset= [ 718.171774] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.198279] / mems_allowed=0-1 [ 718.214208] Node 0 DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.228700] CPU: 1 PID: 27836 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 718.249286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 718.253270] lowmem_reserve[]: [ 718.258633] Call Trace: [ 718.258655] dump_stack+0x1b2/0x281 [ 718.258669] warn_alloc.cold+0x96/0x1cc [ 718.258681] ? zone_watermark_ok_safe+0x220/0x220 [ 718.258690] ? usleep_range+0x130/0x130 [ 718.258700] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 718.258712] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 718.258722] ? run_timer_softirq+0x5a0/0x5a0 [ 718.258742] __alloc_pages_nodemask+0x2127/0x2720 [ 718.267860] 0 [ 718.268048] ? lock_acquire+0x170/0x3f0 [ 718.277904] 2717 [ 718.280777] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 718.280788] ? ion_page_pool_alloc+0x9e/0x1b0 [ 718.280804] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 718.280814] ? check_preemption_disabled+0x35/0x240 [ 718.280832] alloc_pages_current+0x155/0x260 [ 718.280845] ion_page_pool_alloc+0x118/0x1b0 [ 718.280855] ion_system_heap_allocate+0x133/0x8c0 [ 718.280865] ? ion_alloc+0x187/0x810 [ 718.280876] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 718.280885] ? ion_system_contig_heap_create+0x130/0x130 [ 718.280895] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 718.280906] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 718.280916] ion_alloc+0x204/0x810 [ 718.280929] ? ion_dma_buf_release+0x40/0x40 [ 718.297039] 2718 [ 718.300270] ? __might_fault+0x177/0x1b0 [ 718.300284] ion_ioctl+0xea/0x1f0 [ 718.300294] ? ion_query_heaps+0x360/0x360 [ 718.300305] ? ion_query_heaps+0x360/0x360 [ 718.300316] do_vfs_ioctl+0x75a/0xff0 [ 718.300327] ? ioctl_preallocate+0x1a0/0x1a0 [ 718.302951] 2718 [ 718.306066] ? lock_downgrade+0x740/0x740 [ 718.306080] ? __fget+0x225/0x360 [ 718.308115] 2718 [ 718.312939] ? do_vfs_ioctl+0xff0/0xff0 [ 718.312950] ? security_file_ioctl+0x83/0xb0 [ 718.312959] SyS_ioctl+0x7f/0xb0 [ 718.312968] ? do_vfs_ioctl+0xff0/0xff0 [ 718.312979] do_syscall_64+0x1d5/0x640 [ 718.312993] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 718.313002] RIP: 0033:0x4665f9 [ 718.313007] RSP: 002b:00007fd94f735188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 718.313017] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 718.313022] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 718.313028] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 718.313033] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 718.313041] R13: 00007ffc5bf10fcf R14: 00007fd94f735300 R15: 0000000000022000 [ 718.366342] warn_alloc_show_mem: 2 callbacks suppressed [ 718.366347] Mem-Info: [ 718.375121] Node 0 [ 718.401481] active_anon:13121 inactive_anon:6719 isolated_anon:0 [ 718.401481] active_file:37 inactive_file:0 isolated_file:0 [ 718.401481] unevictable:0 dirty:0 writeback:0 unstable:0 [ 718.401481] slab_reclaimable:13963 slab_unreclaimable:116864 [ 718.401481] mapped:52891 shmem:6924 pagetables:786 bounce:0 [ 718.401481] free:13964 free_pcp:159 free_cma:0 [ 718.412116] DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:52436kB inactive_anon:26876kB active_file:144kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3144kB bounce:0kB free_pcp:396kB local_pcp:220kB free_cma:0kB [ 718.434323] Node 0 active_anon:52436kB inactive_anon:26876kB active_file:144kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211564kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.446971] lowmem_reserve[]: [ 718.472337] Node 1 active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 718.487325] 0 [ 718.515384] Node 0 [ 718.547298] 0 [ 718.583606] DMA free:10976kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.596127] 0 [ 718.626923] lowmem_reserve[]: [ 718.661539] 0 0 [ 718.666631] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.670090] 0 [ 718.703099] lowmem_reserve[]: 0 0 0 0 0 [ 718.713188] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:0kB active_file:4kB inactive_file:0kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 718.720972] 2717 [ 718.751636] lowmem_reserve[]: 0 0 0 0 0 [ 718.757746] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 10*16kB (UE) 10*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 718.783949] Node 0 DMA32: 1405*4kB (UME) 803*8kB (UME) 196*16kB (UME) 31*32kB (UM) 2*64kB (U) 2*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 18092kB [ 718.810560] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 718.822925] 2718 2718 2718 [ 718.825879] Node 0 DMA32 free:18068kB min:36200kB low:45248kB high:54296kB active_anon:52436kB inactive_anon:26876kB active_file:40kB inactive_file:36kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7520kB pagetables:3144kB bounce:0kB free_pcp:396kB local_pcp:176kB free_cma:0kB [ 718.835822] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 4*64kB (UM) 1*128kB (U) 1*256kB (U) 1*512kB (U) 1*1024kB (U) 0*2048kB 6*4096kB (U) = 26812kB [ 718.907869] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 718.938104] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 718.961559] lowmem_reserve[]: 0 0 0 0 0 [ 718.965601] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 718.985152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.027661] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.051487] lowmem_reserve[]: 0 0 0 0 0 [ 719.055511] Node 1 Normal free:26812kB min:53696kB low:67120kB high:80544kB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:32kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:32kB pagetables:0kB bounce:0kB free_pcp:240kB local_pcp:120kB free_cma:0kB [ 719.056998] 6947 total pagecache pages [ 719.124641] 0 pages in swap cache [ 719.128110] Swap cache stats: add 0, delete 0, find 0/0 [ 719.136425] lowmem_reserve[]: 0 0 0 0 0 [ 719.156755] Free swap = 0kB [ 719.163354] Node 0 DMA: 2*4kB (UE) 7*8kB (UE) 10*16kB (UE) 10*32kB (UE) 1*64kB (E) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 1*1024kB (E) 2*2048kB (ME) 1*4096kB (U) = 10976kB [ 719.184853] Total swap = 0kB [ 719.187884] 2097051 pages RAM [ 719.216468] Node 0 [ 719.216474] 0 pages HighMem/MovableOnly [ 719.216482] 363849 pages reserved [ 719.227159] DMA32: 1454*4kB (UME) 987*8kB (UME) 209*16kB (UME) 36*32kB (UM) 4*64kB (U) 4*128kB (U) 2*256kB (U) 0*512kB 1*1024kB (U) 0*2048kB 0*4096kB = 20512kB [ 719.245040] 0 pages cma reserved [ 719.256817] Out of memory (oom_kill_allocating_task): Kill process 26415 (rs:main Q:Reg) score 0 or sacrifice child [ 719.258965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 719.285549] Killed process 26405 (rsyslogd) total-vm:254332kB, anon-rss:940kB, file-rss:0kB, shmem-rss:0kB [ 719.295558] Node 1 Normal: 1*4kB (M) 17*8kB (UM) 2*16kB (UM) 2*32kB (UM) 3*64kB (M) 0*128kB 0*256kB 0*512kB 0*1024kB 1*2048kB (U) 6*4096kB (U) = 27052kB [ 719.315690] oom_reaper: reaped process 26405 (rsyslogd), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 719.322679] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.349564] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.358168] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 719.377577] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 719.388373] 6947 total pagecache pages [ 719.392271] 0 pages in swap cache [ 719.395734] Swap cache stats: add 0, delete 0, find 0/0 [ 719.415799] Free swap = 0kB [ 719.425575] kworker/u4:1 invoked oom-killer: gfp_mask=0x15080c0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null), order=3, oom_score_adj=0 [ 719.457053] Total swap = 0kB [ 719.467195] 2097051 pages RAM [ 719.496401] 0 pages HighMem/MovableOnly [ 719.496631] kworker/u4:1 cpuset=/ mems_allowed=0-1 [ 719.518178] 363849 pages reserved [ 719.543522] CPU: 0 PID: 22 Comm: kworker/u4:1 Not tainted 4.14.232-syzkaller #0 [ 719.543862] 0 pages cma reserved [ 719.550989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 719.551019] Workqueue: events_unbound call_usermodehelper_exec_work [ 719.551025] Call Trace: [ 719.551043] dump_stack+0x1b2/0x281 [ 719.576523] dump_header+0x178/0x82f [ 719.580254] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 719.585356] ? ___ratelimit+0x2cd/0x530 [ 719.589331] oom_kill_process.cold+0x10/0xa40 [ 719.593832] ? lock_downgrade+0x740/0x740 [ 719.597973] out_of_memory+0x2dc/0x1190 [ 719.601941] ? oom_killer_disable+0x1c0/0x1c0 [ 719.606426] ? mutex_trylock+0x152/0x1a0 [ 719.610490] __alloc_pages_nodemask+0x23e1/0x2720 [ 719.615335] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 719.620187] ? fs_reclaim_release+0xd0/0x110 [ 719.624597] ? kmem_cache_alloc_node+0x38b/0x410 [ 719.629341] copy_process.part.0+0x265/0x71c0 [ 719.633830] ? trace_hardirqs_on+0x10/0x10 [ 719.638073] ? check_preemption_disabled+0x35/0x240 [ 719.643082] ? static_obj+0x50/0x50 [ 719.646704] ? __switch_to_xtra+0x93/0x12f0 [ 719.651016] ? finish_task_switch+0x178/0x610 [ 719.655514] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 719.660963] ? __cleanup_sighand+0x40/0x40 [ 719.665192] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 719.670198] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 719.675638] _do_fork+0x184/0xc80 [ 719.679080] ? fork_idle+0x270/0x270 [ 719.682786] ? io_schedule_timeout+0x140/0x140 [ 719.687367] ? call_usermodehelper_exec_work+0x2a0/0x2a0 [ 719.692806] kernel_thread+0x2f/0x40 [ 719.696519] call_usermodehelper_exec_work+0x1ac/0x2a0 [ 719.701791] ? call_usermodehelper+0x80/0x80 [ 719.706192] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 719.711638] process_one_work+0x793/0x14a0 [ 719.715870] ? work_busy+0x320/0x320 [ 719.719580] ? worker_thread+0x158/0xff0 [ 719.723636] ? _raw_spin_unlock_irq+0x24/0x80 [ 719.728131] worker_thread+0x5cc/0xff0 [ 719.732017] ? rescuer_thread+0xc80/0xc80 [ 719.736153] kthread+0x30d/0x420 [ 719.741851] ? kthread_create_on_node+0xd0/0xd0 [ 719.746524] ret_from_fork+0x24/0x30 [ 719.759109] Mem-Info: [ 719.762302] active_anon:12871 inactive_anon:6719 isolated_anon:0 [ 719.762302] active_file:12 inactive_file:34 isolated_file:0 [ 719.762302] unevictable:0 dirty:0 writeback:0 unstable:0 [ 719.762302] slab_reclaimable:13958 slab_unreclaimable:116379 [ 719.762302] mapped:52891 shmem:6924 pagetables:786 bounce:0 [ 719.762302] free:23472 free_pcp:126 free_cma:0 [ 719.838617] Node 0 active_anon:51436kB inactive_anon:26876kB active_file:112kB inactive_file:2268kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:212864kB dirty:0kB writeback:0kB shmem:27696kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 719.928720] Node 1 active_anon:48kB inactive_anon:0kB active_file:836kB inactive_file:3568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:3100kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 720.069828] Node 0 DMA free:11296kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.158355] lowmem_reserve[]: 0 2717 2718 2718 2718 [ 720.163546] Node 0 DMA32 free:132084kB min:36200kB low:45248kB high:54296kB active_anon:51516kB inactive_anon:26884kB active_file:1320kB inactive_file:6288kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2868kB bounce:0kB free_pcp:716kB local_pcp:496kB free_cma:0kB [ 720.246035] lowmem_reserve[]: 0 0 0 0 0 [ 720.259084] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 720.306668] lowmem_reserve[]: 0 0 0 0 0 [ 720.310827] Node 1 Normal free:196860kB min:53696kB low:67120kB high:80544kB active_anon:40kB inactive_anon:0kB active_file:2232kB inactive_file:2244kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:0kB bounce:0kB free_pcp:524kB local_pcp:284kB free_cma:0kB [ 720.339382] lowmem_reserve[]: 0 0 0 0 0 [ 720.347272] Node 0 DMA: 1*4kB (E) 2*8kB (UE) 9*16kB (UE) 10*32kB (UE) 20*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 11108kB [ 720.363009] Node 0 DMA32: 640*4kB (UME) 266*8kB (UME) 96*16kB (ME) 35*32kB (UM) 11*64kB (UME) 2*128kB (UM) 86*256kB (U) 29*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 45168kB [ 720.396279] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 720.407270] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 0*16kB 0*32kB 611*64kB (U) 128*128kB (U) 41*256kB (UM) 14*512kB (UM) 3*1024kB (U) 0*2048kB 0*4096kB = 76248kB [ 720.437351] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.456976] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 720.486908] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 720.515291] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 720.533441] 7253 total pagecache pages [ 720.537356] 0 pages in swap cache [ 720.545764] Swap cache stats: add 0, delete 0, find 0/0 [ 720.557140] Free swap = 0kB [ 720.560321] Total swap = 0kB [ 720.563381] 2097051 pages RAM [ 720.566478] 0 pages HighMem/MovableOnly [ 720.570787] 363849 pages reserved [ 720.574275] 0 pages cma reserved [ 720.577754] Out of memory: Kill process 27834 (syz-executor.5) score 1004 or sacrifice child [ 720.588944] Killed process 27839 (syz-executor.5) total-vm:93252kB, anon-rss:148kB, file-rss:34820kB, shmem-rss:0kB [ 720.627548] oom_reaper: reaped process 27839 (syz-executor.5), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 720.645001] systemd-rfkill invoked oom-killer: gfp_mask=0x14000c0(GFP_KERNEL), nodemask=(null), order=0, oom_score_adj=0 [ 720.646289] syz-executor.4: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 720.673933] syz-executor.4 cpuset=/ mems_allowed=0-1 [ 720.682666] systemd-rfkill cpuset=/ mems_allowed=0-1 [ 720.684209] CPU: 0 PID: 27836 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 720.696164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.705598] Call Trace: [ 720.708898] dump_stack+0x1b2/0x281 [ 720.712541] warn_alloc.cold+0x96/0x1cc [ 720.716512] ? zone_watermark_ok_safe+0x220/0x220 [ 720.728070] __alloc_pages_nodemask+0x2127/0x2720 [ 720.732912] ? lock_acquire+0x170/0x3f0 [ 720.736980] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.741825] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 720.748312] ? __mutex_unlock_slowpath+0x75/0x770 [ 720.753148] ? alloc_pages_current+0x73/0x260 [ 720.757649] alloc_pages_current+0x155/0x260 [ 720.762054] ion_page_pool_alloc+0x118/0x1b0 [ 720.766455] ion_system_heap_allocate+0x133/0x8c0 [ 720.771292] ? _raw_spin_unlock+0x29/0x40 [ 720.775441] ? _ion_heap_freelist_drain+0x6e/0x410 [ 720.780374] ? ion_system_contig_heap_create+0x130/0x130 [ 720.785815] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 720.790825] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 720.795665] ion_alloc+0x27a/0x810 [ 720.799203] ? ion_dma_buf_release+0x40/0x40 [ 720.803620] ? __might_fault+0x177/0x1b0 [ 720.807692] ion_ioctl+0xea/0x1f0 [ 720.811142] ? ion_query_heaps+0x360/0x360 [ 720.815405] ? ion_query_heaps+0x360/0x360 [ 720.819633] do_vfs_ioctl+0x75a/0xff0 [ 720.823430] ? ioctl_preallocate+0x1a0/0x1a0 [ 720.827830] ? lock_downgrade+0x740/0x740 [ 720.831974] ? __fget+0x225/0x360 [ 720.835422] ? do_vfs_ioctl+0xff0/0xff0 [ 720.840045] ? security_file_ioctl+0x83/0xb0 [ 720.844484] SyS_ioctl+0x7f/0xb0 [ 720.847843] ? do_vfs_ioctl+0xff0/0xff0 [ 720.851809] do_syscall_64+0x1d5/0x640 [ 720.855707] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 720.860891] RIP: 0033:0x4665f9 [ 720.864075] RSP: 002b:00007fd94f735188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 720.871777] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 720.879056] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 720.886935] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 720.894206] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 720.901474] R13: 00007ffc5bf10fcf R14: 00007fd94f735300 R15: 0000000000022000 [ 720.908760] CPU: 1 PID: 27818 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 720.917806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 720.927159] Call Trace: [ 720.929743] dump_stack+0x1b2/0x281 [ 720.933385] dump_header+0x178/0x82f [ 720.937091] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 720.942270] ? ___ratelimit+0x2cd/0x530 [ 720.946367] oom_kill_process.cold+0x10/0xa40 [ 720.950864] out_of_memory+0xe3e/0x1190 [ 720.954833] ? oom_killer_disable+0x1c0/0x1c0 [ 720.959336] ? mutex_trylock+0x152/0x1a0 [ 720.963412] __alloc_pages_nodemask+0x23e1/0x2720 [ 720.968276] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 720.973124] ? __lock_acquire+0x5fc/0x3f20 [ 720.977357] ? lock_acquire+0x170/0x3f0 [ 720.981333] ? lock_downgrade+0x740/0x740 [ 720.985488] alloc_pages_current+0x155/0x260 [ 720.989886] ? do_raw_spin_unlock+0x164/0x220 [ 720.994367] __change_page_attr_set_clr+0x322/0x2280 [ 720.999475] ? slow_virt_to_phys+0x300/0x300 [ 721.003967] ? finish_task_switch+0x14d/0x610 [ 721.008458] ? switch_mm_irqs_off+0x601/0xeb0 [ 721.013125] ? __change_page_attr_set_clr+0x1952/0x2280 [ 721.018597] ? lock_acquire+0x170/0x3f0 [ 721.022567] ? lock_downgrade+0x740/0x740 [ 721.026703] ? lock_acquire+0x170/0x3f0 [ 721.030667] __change_page_attr_set_clr+0x1a45/0x2280 [ 721.035855] ? slow_virt_to_phys+0x300/0x300 [ 721.040257] ? __mutex_unlock_slowpath+0x75/0x770 [ 721.045103] ? wait_for_completion_io+0x10/0x10 [ 721.049765] ? vm_unmap_aliases+0x3a5/0x460 [ 721.054078] change_page_attr_set_clr+0x2a2/0xa30 [ 721.058911] ? __change_page_attr_set_clr+0x2280/0x2280 [ 721.064261] ? mark_held_locks+0xa6/0xf0 [ 721.068308] ? bpf_convert_filter+0x16e3/0x1b50 [ 721.072963] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 721.078061] set_memory_ro+0x68/0x80 [ 721.081761] ? _set_memory_wb+0x80/0x80 [ 721.085815] ? __bpf_prog_run64+0xb0/0xb0 [ 721.089946] bpf_prog_select_runtime+0x143/0x4e0 [ 721.094696] bpf_migrate_filter+0x242/0x2d0 [ 721.099018] ? __sk_attach_prog+0x360/0x360 [ 721.103360] bpf_prepare_filter+0x14c/0x320 [ 721.107684] __get_filter+0x196/0x240 [ 721.111473] sk_attach_filter+0x1b/0x140 [ 721.115522] sock_setsockopt+0x119a/0x1a50 [ 721.119754] ? sk_wait_data+0x3d0/0x3d0 [ 721.123716] ? __do_page_fault+0x571/0xad0 [ 721.127953] ? __fdget+0x167/0x1f0 [ 721.131480] ? security_socket_setsockopt+0x83/0xb0 [ 721.136500] SyS_setsockopt+0x1a4/0x1e0 [ 721.140461] ? SyS_recv+0x40/0x40 [ 721.143914] ? up_read+0x17/0x30 [ 721.147265] ? __do_page_fault+0x159/0xad0 [ 721.151487] ? do_syscall_64+0x4c/0x640 [ 721.155445] ? SyS_recv+0x40/0x40 [ 721.158887] do_syscall_64+0x1d5/0x640 [ 721.162766] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 721.167955] RIP: 0033:0x7f09b33dceba [ 721.171661] RSP: 002b:00007ffd765a4998 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 721.179355] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f09b33dceba [ 721.186609] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 721.193866] RBP: 00007ffd765a49c0 R08: 0000000000000010 R09: 0000000000000015 [ 721.201124] R10: 00007ffd765a49b0 R11: 0000000000000202 R12: 0000000000000006 [ 721.208395] R13: 00007ffd765a49f8 R14: 0000000000000000 R15: 0000561ffa634780 [ 721.215800] syz-executor.5: page allocation failure: order:0, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 721.233963] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 721.239184] CPU: 0 PID: 27839 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 721.244417] Mem-Info: [ 721.247061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 721.249572] active_anon:12914 inactive_anon:6721 isolated_anon:0 [ 721.249572] active_file:12 inactive_file:22 isolated_file:0 [ 721.249572] unevictable:0 dirty:0 writeback:0 unstable:0 [ 721.249572] slab_reclaimable:13978 slab_unreclaimable:116981 [ 721.249572] mapped:52925 shmem:6928 pagetables:734 bounce:0 [ 721.249572] free:13892 free_pcp:67 free_cma:0 [ 721.258844] Call Trace: [ 721.258864] dump_stack+0x1b2/0x281 [ 721.258897] warn_alloc.cold+0x96/0x1cc [ 721.291911] Mem-Info: [ 721.294441] ? zone_watermark_ok_safe+0x220/0x220 [ 721.298040] active_anon:12914 inactive_anon:6721 isolated_anon:0 [ 721.298040] active_file:12 inactive_file:22 isolated_file:0 [ 721.298040] unevictable:0 dirty:0 writeback:0 unstable:0 [ 721.298040] slab_reclaimable:13978 slab_unreclaimable:116981 [ 721.298040] mapped:52925 shmem:6928 pagetables:734 bounce:0 [ 721.298040] free:13892 free_pcp:67 free_cma:0 [ 721.301987] ? usleep_range+0x130/0x130 [ 721.301998] ? try_to_free_pages+0x23f/0x6e0 [ 721.302009] ? _find_next_bit+0xdb/0x100 [ 721.302023] ? run_timer_softirq+0x5a0/0x5a0 [ 721.304438] Node 0 active_anon:51532kB inactive_anon:26884kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211700kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.309523] __alloc_pages_nodemask+0x2127/0x2720 [ 721.309553] ? lock_acquire+0x170/0x3f0 [ 721.342654] Node 0 active_anon:51532kB inactive_anon:26884kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211700kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.346571] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 721.350992] Node 1 active_anon:124kB inactive_anon:0kB active_file:16kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.354991] ? ion_page_pool_alloc+0x9e/0x1b0 [ 721.359423] Node 1 active_anon:124kB inactive_anon:0kB active_file:16kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 721.387050] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 721.387070] alloc_pages_current+0x155/0x260 [ 721.387084] ion_page_pool_alloc+0x118/0x1b0 [ 721.391936] Node 0 [ 721.395884] ion_system_heap_allocate+0x133/0x8c0 [ 721.423701] Node 0 [ 721.428483] ? ion_alloc+0x187/0x810 [ 721.428501] ? rcu_lockdep_current_cpu_online+0xed/0x140 [ 721.454807] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.459077] ? ion_system_contig_heap_create+0x130/0x130 [ 721.459089] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 721.459103] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 721.485195] DMA free:10968kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.490654] ion_alloc+0x204/0x810 [ 721.490670] ? ion_dma_buf_release+0x40/0x40 [ 721.495055] lowmem_reserve[]: [ 721.499448] ? __might_fault+0x177/0x1b0 [ 721.499461] ion_ioctl+0xea/0x1f0 [ 721.499470] ? ion_query_heaps+0x360/0x360 [ 721.501693] lowmem_reserve[]: [ 721.506526] ? ion_query_heaps+0x360/0x360 [ 721.508769] 0 [ 721.512435] do_vfs_ioctl+0x75a/0xff0 [ 721.517868] 2717 [ 721.543382] ? ioctl_preallocate+0x1a0/0x1a0 [ 721.543393] ? lock_downgrade+0x740/0x740 [ 721.543406] ? __fget+0x225/0x360 [ 721.543415] ? do_vfs_ioctl+0xff0/0xff0 [ 721.543429] ? security_file_ioctl+0x83/0xb0 [ 721.548906] 0 [ 721.553867] SyS_ioctl+0x7f/0xb0 [ 721.558729] 2717 [ 721.584196] ? do_vfs_ioctl+0xff0/0xff0 [ 721.584209] do_syscall_64+0x1d5/0x640 [ 721.584223] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 721.584234] RIP: 0033:0x4665f9 [ 721.587775] 2718 [ 721.592139] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 721.592149] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 721.592154] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 721.592158] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 721.592163] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 721.592168] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 721.719450] 2718 2718 2718 [ 721.730475] Node 0 DMA32 free:138828kB min:36200kB low:45248kB high:54296kB active_anon:51532kB inactive_anon:26884kB active_file:132kB inactive_file:1832kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2916kB bounce:0kB free_pcp:344kB local_pcp:136kB free_cma:0kB [ 721.761032] lowmem_reserve[]: 0 0 0 0 0 [ 721.765232] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.790886] lowmem_reserve[]: 0 0 0 0 0 [ 721.794891] Node 1 Normal free:111380kB min:53696kB low:67120kB high:80544kB active_anon:124kB inactive_anon:0kB active_file:16kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:20kB bounce:0kB free_pcp:240kB local_pcp:0kB free_cma:0kB [ 721.824011] lowmem_reserve[]: 0 0 0 0 0 [ 721.828918] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 4*16kB (UE) 10*32kB (UE) 19*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 721.845269] Node 0 DMA32: 910*4kB (UE) 1508*8kB (UME) 198*16kB (UME) 34*32kB (UM) 1214*64kB (U) 440*128kB (U) 74*256kB (U) 27*512kB (U) 0*1024kB 0*2048kB 0*4096kB = 186744kB [ 721.861749] 2718 2718 [ 721.864757] Node 0 DMA32 free:189980kB min:36200kB low:45248kB high:54296kB active_anon:51532kB inactive_anon:26884kB active_file:232kB inactive_file:2732kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2916kB bounce:0kB free_pcp:836kB local_pcp:216kB free_cma:0kB [ 721.895160] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 721.906297] Node 1 Normal: 3*4kB (UE) 3*8kB (ME) 7*16kB (UME) 12*32kB (UME) 1398*64kB (UM) 195*128kB (UM) 73*256kB (UM) 15*512kB (UM) 0*1024kB 0*2048kB 0*4096kB = 141332kB [ 721.923170] lowmem_reserve[]: 0 0 0 0 0 [ 721.927885] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 721.954947] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.963897] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 721.972598] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 721.981487] lowmem_reserve[]: 0 0 0 0 0 [ 721.986064] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 721.995525] Node 1 Normal free:111636kB min:53696kB low:67120kB high:80544kB active_anon:124kB inactive_anon:0kB active_file:16kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:20kB bounce:0kB free_pcp:244kB local_pcp:0kB free_cma:0kB [ 722.025584] 8109 total pagecache pages [ 722.030552] 0 pages in swap cache [ 722.034677] Swap cache stats: add 0, delete 0, find 0/0 [ 722.041297] Free swap = 0kB [ 722.045045] Total swap = 0kB [ 722.049715] 2097051 pages RAM [ 722.053482] 0 pages HighMem/MovableOnly [ 722.061750] lowmem_reserve[]: 0 0 0 0 0 [ 722.066204] 363849 pages reserved [ 722.070653] Node 0 DMA: 2*4kB (UE) 2*8kB (UE) 4*16kB (UE) 10*32kB (UE) 19*64kB (UE) 1*128kB (E) 2*256kB (UE) 1*512kB (E) 2*1024kB (UE) 3*2048kB (UME) 0*4096kB = 10968kB [ 722.086087] 0 pages cma reserved [ 722.089513] Node 0 DMA32: 1176*4kB (UME) 2045*8kB (UME) 5677*16kB (UME) 1840*32kB (UM) 112*64kB (U) 2*128kB (U) 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 178200kB [ 722.114220] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 722.125802] Node 1 Normal: 16*4kB (UME) 20*8kB (UME) 239*16kB (UME) 122*32kB (UME) 121*64kB (UM) 8*128kB (UM) 70*256kB (UM) 16*512kB (UM) 0*1024kB 1*2048kB (U) 0*4096kB = 44880kB [ 722.218959] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.231731] syz-executor.5: page allocation failure: order:4, mode:0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null) [ 722.248453] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.257040] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 722.268518] syz-executor.5 cpuset=/ mems_allowed=0-1 [ 722.273656] CPU: 0 PID: 27839 Comm: syz-executor.5 Not tainted 4.14.232-syzkaller #0 [ 722.281532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.290888] Call Trace: [ 722.293481] dump_stack+0x1b2/0x281 [ 722.297133] warn_alloc.cold+0x96/0x1cc [ 722.301111] ? zone_watermark_ok_safe+0x220/0x220 [ 722.305970] __alloc_pages_nodemask+0x2127/0x2720 [ 722.308285] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 722.310837] ? lock_acquire+0x170/0x3f0 [ 722.323372] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 722.328223] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 722.333677] ? __mutex_unlock_slowpath+0x75/0x770 [ 722.338287] 8570 total pagecache pages [ 722.338536] ? retint_kernel+0x2d/0x2d [ 722.342410] 0 pages in swap cache [ 722.346283] alloc_pages_current+0x155/0x260 [ 722.354231] ion_page_pool_alloc+0x118/0x1b0 [ 722.358661] ion_system_heap_allocate+0x133/0x8c0 [ 722.363506] ? _raw_spin_unlock+0x29/0x40 [ 722.367659] ? _ion_heap_freelist_drain+0x6e/0x410 [ 722.372604] ? ion_system_contig_heap_create+0x130/0x130 [ 722.378058] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 722.378297] Swap cache stats: add 0, delete 0, find 0/0 [ 722.383075] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 722.393256] ion_alloc+0x27a/0x810 [ 722.396797] ? ion_dma_buf_release+0x40/0x40 [ 722.401206] ? __might_fault+0x177/0x1b0 [ 722.406053] ion_ioctl+0xea/0x1f0 [ 722.408296] Free swap = 0kB [ 722.409507] ? ion_query_heaps+0x360/0x360 [ 722.412533] Total swap = 0kB [ 722.416774] ? ion_query_heaps+0x360/0x360 [ 722.424004] do_vfs_ioctl+0x75a/0xff0 [ 722.427811] ? ioctl_preallocate+0x1a0/0x1a0 [ 722.432412] ? lock_downgrade+0x740/0x740 [ 722.435048] 2097051 pages RAM [ 722.436559] ? __fget+0x225/0x360 [ 722.443111] ? do_vfs_ioctl+0xff0/0xff0 [ 722.447088] ? security_file_ioctl+0x83/0xb0 [ 722.451507] SyS_ioctl+0x7f/0xb0 [ 722.454869] ? do_vfs_ioctl+0xff0/0xff0 [ 722.458300] 0 pages HighMem/MovableOnly [ 722.459034] do_syscall_64+0x1d5/0x640 [ 722.463004] 363849 pages reserved [ 722.466887] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 722.475482] RIP: 0033:0x4665f9 [ 722.478666] RSP: 002b:00007fd2848b5188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 722.486371] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 722.488286] 0 pages cma reserved [ 722.493666] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 722.497019] Out of memory (oom_kill_allocating_task): Kill process 27818 (systemd-rfkill) score 0 or sacrifice child [ 722.504267] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 722.504273] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 722.504278] R13: 00007ffe8bd19f1f R14: 00007fd2848b5300 R15: 0000000000022000 [ 722.620522] warn_alloc_show_mem: 1 callbacks suppressed [ 722.620526] Mem-Info: [ 722.620804] Killed process 27818 (systemd-rfkill) total-vm:37800kB, anon-rss:408kB, file-rss:0kB, shmem-rss:0kB [ 722.625926] active_anon:12939 inactive_anon:6721 isolated_anon:12 [ 722.625926] active_file:6 inactive_file:35 isolated_file:0 [ 722.625926] unevictable:0 dirty:0 writeback:0 unstable:0 [ 722.625926] slab_reclaimable:13978 slab_unreclaimable:117944 [ 722.625926] mapped:52981 shmem:6928 pagetables:734 bounce:0 [ 722.625926] free:13825 free_pcp:42 free_cma:0 [ 722.625944] Node 0 active_anon:51632kB inactive_anon:26884kB active_file:4kB inactive_file:84kB unevictable:0kB isolated(anon):48kB isolated(file):0kB mapped:211924kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 722.625964] Node 1 active_anon:124kB inactive_anon:0kB active_file:20kB inactive_file:56kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 722.625968] Node 0 DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.648942] oom_reaper: reaped process 27818 (systemd-rfkill), now anon-rss:0kB, file-rss:0kB, shmem-rss:0kB [ 722.684468] lowmem_reserve[]: [ 722.758350] systemd-rfkill: page allocation failure: order:0, mode:0x14000c0(GFP_KERNEL), nodemask=(null) [ 722.769036] 0 2717 2718 2718 2718 [ 722.780801] syz-executor.4 invoked oom-killer: gfp_mask=0x142c0c2(GFP_HIGHUSER|__GFP_COMP|__GFP_ZERO), nodemask=(null), order=0, oom_score_adj=1000 [ 722.785303] Node 0 DMA32 free:18048kB min:36200kB low:45248kB high:54296kB active_anon:51532kB inactive_anon:26884kB active_file:704kB inactive_file:456kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7424kB pagetables:2916kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.796584] systemd-rfkill cpuset= [ 722.826385] syz-executor.4 cpuset= [ 722.829488] lowmem_reserve[]: [ 722.829996] / [ 722.833454] 0 0 0 0 0 [ 722.833472] Node 0 [ 722.836764] mems_allowed=0-1 [ 722.843848] Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 722.846448] CPU: 1 PID: 27836 Comm: syz-executor.4 Not tainted 4.14.232-syzkaller #0 [ 722.878360] / [ 722.879210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 722.879215] Call Trace: [ 722.879241] dump_stack+0x1b2/0x281 [ 722.881050] mems_allowed=0-1 [ 722.890406] dump_header+0x178/0x82f [ 722.890419] ? _raw_spin_unlock_irqrestore+0x66/0xe0 [ 722.890428] ? ___ratelimit+0x2cd/0x530 [ 722.890439] oom_kill_process.cold+0x10/0xa40 [ 722.890458] out_of_memory+0xe3e/0x1190 [ 722.890479] ? oom_killer_disable+0x1c0/0x1c0 [ 722.890488] ? mutex_trylock+0x152/0x1a0 [ 722.890501] __alloc_pages_nodemask+0x23e1/0x2720 [ 722.890517] ? lock_acquire+0x170/0x3f0 [ 722.890531] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 722.890541] ? ion_page_pool_alloc+0x9e/0x1b0 [ 722.890555] ? __ww_mutex_wakeup_for_backoff+0x210/0x210 [ 722.890564] ? check_preemption_disabled+0x35/0x240 [ 722.911594] lowmem_reserve[]: [ 722.912917] alloc_pages_current+0x155/0x260 [ 722.917376] 0 0 [ 722.921357] ion_page_pool_alloc+0x118/0x1b0 [ 722.921367] ion_system_heap_allocate+0x133/0x8c0 [ 722.921379] ? _raw_spin_unlock+0x29/0x40 [ 722.921387] ? _ion_heap_freelist_drain+0x6e/0x410 [ 722.921395] ? ion_system_contig_heap_create+0x130/0x130 [ 722.921406] ? rcu_read_lock_sched_held+0x16c/0x1d0 [ 722.921416] ? kmem_cache_alloc_trace+0x36c/0x3d0 [ 722.921427] ion_alloc+0x27a/0x810 [ 722.921440] ? ion_dma_buf_release+0x40/0x40 [ 722.921452] ? __might_fault+0x177/0x1b0 [ 722.952236] 0 [ 722.953495] ion_ioctl+0xea/0x1f0 [ 722.972371] 0 [ 722.977151] ? ion_query_heaps+0x360/0x360 [ 723.003052] 0 [ 723.005605] ? ion_query_heaps+0x360/0x360 [ 723.025250] do_vfs_ioctl+0x75a/0xff0 [ 723.027027] Node 1 [ 723.031250] ? ioctl_preallocate+0x1a0/0x1a0 [ 723.031260] ? lock_downgrade+0x740/0x740 [ 723.031272] ? __fget+0x225/0x360 [ 723.031281] ? do_vfs_ioctl+0xff0/0xff0 [ 723.031292] ? security_file_ioctl+0x83/0xb0 [ 723.031302] SyS_ioctl+0x7f/0xb0 [ 723.031310] ? do_vfs_ioctl+0xff0/0xff0 [ 723.031321] do_syscall_64+0x1d5/0x640 [ 723.031336] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 723.031346] RIP: 0033:0x4665f9 [ 723.065616] Normal free:26800kB min:53696kB low:67120kB high:80544kB active_anon:124kB inactive_anon:0kB active_file:20kB inactive_file:56kB unevictable:0kB writepending:0kB present:4194304kB managed:4128256kB mlocked:0kB kernel_stack:64kB pagetables:20kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 723.066276] RSP: 002b:00007fd94f735188 EFLAGS: 00000246 [ 723.071490] lowmem_reserve[]: [ 723.075312] ORIG_RAX: 0000000000000010 [ 723.105481] 0 [ 723.105623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 723.125523] 0 [ 723.127056] RDX: 00000000200000c0 RSI: 00000000c0184900 RDI: 0000000000000003 [ 723.127063] 0 [ 723.128842] RBP: 00000000004bfce1 R08: 0000000000000000 R09: 0000000000000000 [ 723.128847] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60 [ 723.128852] R13: 00007ffc5bf10fcf R14: 00007fd94f735300 R15: 0000000000022000 [ 723.133602] CPU: 1 PID: 27818 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 723.137463] 0 [ 723.137970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.137977] Call Trace: [ 723.153834] 0 [ 723.159769] dump_stack+0x1b2/0x281 [ 723.159783] warn_alloc.cold+0x96/0x1cc [ 723.159794] ? zone_watermark_ok_safe+0x220/0x220 [ 723.159803] ? usleep_range+0x130/0x130 [ 723.159810] ? _raw_spin_unlock_irqrestore+0x79/0xe0 [ 723.159823] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 723.178837] ? run_timer_softirq+0x5a0/0x5a0 [ 723.178854] __alloc_pages_nodemask+0x2127/0x2720 [ 723.178876] ? gfp_pfmemalloc_allowed+0x150/0x150 [ 723.181437] Node 0 [ 723.183223] ? __lock_acquire+0x5fc/0x3f20 [ 723.186827] DMA: [ 723.190803] ? lock_acquire+0x170/0x3f0 [ 723.190811] ? lock_downgrade+0x740/0x740 [ 723.190822] alloc_pages_current+0x155/0x260 [ 723.190829] ? do_raw_spin_unlock+0x164/0x220 [ 723.190839] __change_page_attr_set_clr+0x322/0x2280 [ 723.190859] ? slow_virt_to_phys+0x300/0x300 [ 723.190869] ? finish_task_switch+0x14d/0x610 [ 723.190880] ? switch_mm_irqs_off+0x601/0xeb0 [ 723.204034] 1*4kB [ 723.204738] ? __change_page_attr_set_clr+0x1952/0x2280 [ 723.209771] (E) [ 723.214120] ? lock_acquire+0x170/0x3f0 [ 723.228032] 5*8kB [ 723.230205] ? lock_downgrade+0x740/0x740 [ 723.230214] ? lock_acquire+0x170/0x3f0 [ 723.230226] __change_page_attr_set_clr+0x1a45/0x2280 [ 723.230245] ? slow_virt_to_phys+0x300/0x300 [ 723.230257] ? __mutex_unlock_slowpath+0x75/0x770 [ 723.232300] (UE) [ 723.236280] ? wait_for_completion_io+0x10/0x10 [ 723.248983] 6*16kB [ 723.249265] ? vm_unmap_aliases+0x3a5/0x460 [ 723.254339] (UE) [ 723.258734] change_page_attr_set_clr+0x2a2/0xa30 [ 723.258747] ? __change_page_attr_set_clr+0x2280/0x2280 [ 723.258755] ? mark_held_locks+0xa6/0xf0 [ 723.258765] ? bpf_convert_filter+0x16e3/0x1b50 [ 723.258773] ? trace_hardirqs_on_caller+0x3a8/0x580 [ 723.258796] set_memory_ro+0x68/0x80 [ 723.258804] ? _set_memory_wb+0x80/0x80 [ 723.258815] ? __bpf_prog_run64+0xb0/0xb0 [ 723.258824] bpf_prog_select_runtime+0x143/0x4e0 [ 723.258842] bpf_migrate_filter+0x242/0x2d0 [ 723.271879] 10*32kB [ 723.275279] ? __sk_attach_prog+0x360/0x360 [ 723.277233] (UE) [ 723.281226] bpf_prepare_filter+0x14c/0x320 [ 723.281237] __get_filter+0x196/0x240 [ 723.281247] sk_attach_filter+0x1b/0x140 [ 723.281257] sock_setsockopt+0x119a/0x1a50 [ 723.281267] ? sk_wait_data+0x3d0/0x3d0 [ 723.281279] ? __do_page_fault+0x571/0xad0 [ 723.281287] ? __fdget+0x167/0x1f0 [ 723.281296] ? security_socket_setsockopt+0x83/0xb0 [ 723.281306] SyS_setsockopt+0x1a4/0x1e0 [ 723.281315] ? SyS_recv+0x40/0x40 [ 723.288085] 18*64kB [ 723.291528] ? up_read+0x17/0x30 [ 723.291537] ? __do_page_fault+0x159/0xad0 [ 723.291546] ? do_syscall_64+0x4c/0x640 [ 723.291553] ? SyS_recv+0x40/0x40 [ 723.291561] do_syscall_64+0x1d5/0x640 [ 723.291575] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 723.291583] RIP: 0033:0x7f09b33dceba [ 723.291587] RSP: 002b:00007ffd765a4998 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 723.291596] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f09b33dceba [ 723.291601] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 723.291606] RBP: 00007ffd765a49c0 R08: 0000000000000010 R09: 0000000000000015 [ 723.291611] R10: 00007ffd765a49b0 R11: 0000000000000202 R12: 0000000000000006 [ 723.291619] R13: 00007ffd765a49f8 R14: 0000000000000000 R15: 0000561ffa634780 [ 723.304875] (UE) [ 723.308444] Mem-Info: [ 723.313586] 1*128kB [ 723.314939] active_anon:12847 inactive_anon:6721 isolated_anon:0 [ 723.314939] active_file:12 inactive_file:11 isolated_file:0 [ 723.314939] unevictable:0 dirty:0 writeback:0 unstable:0 [ 723.314939] slab_reclaimable:13982 slab_unreclaimable:117949 [ 723.314939] mapped:52956 shmem:6928 pagetables:740 bounce:0 [ 723.314939] free:13995 free_pcp:1 free_cma:0 [ 723.325843] (E) [ 723.327435] Node 0 active_anon:51264kB inactive_anon:26884kB active_file:16kB inactive_file:12kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:211824kB dirty:0kB writeback:0kB shmem:27712kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 10240kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 723.333501] 2*256kB [ 723.336472] Node 1 active_anon:124kB inactive_anon:0kB active_file:32kB inactive_file:32kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB unstable:0kB all_unreclaimable? yes [ 723.346864] (UE) [ 723.351134] Node 0 [ 723.355500] 1*512kB [ 723.357219] DMA free:10956kB min:204kB low:252kB high:300kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 723.370632] (E) [ 723.375094] lowmem_reserve[]: [ 723.375285] 2*1024kB [ 723.379861] 0 [ 723.387923] (UE) [ 723.391754] 2717 2718 2718 2718 [ 723.391775] Node 0 [ 723.404380] 3*2048kB [ 723.410573] DMA32 free:18212kB min:36200kB low:45248kB high:54296kB active_anon:51264kB inactive_anon:26884kB active_file:16kB inactive_file:12kB unevictable:0kB writepending:0kB present:3129332kB managed:2788128kB mlocked:0kB kernel_stack:7488kB pagetables:2940kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 723.412535] (UME) [ 723.415972] lowmem_reserve[]: 0 [ 723.427024] 0*4096kB [ 723.429936] 0 0 [ 723.435517] = 10956kB [ 723.437391] 0 [ 723.453082] Node 0 [ 723.453943] 0 [ 723.466546] DMA32: [ 723.468526] Node 0 Normal free:0kB min:4kB low:4kB high:4kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:516kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 723.468551] lowmem_reserve[]: [ 723.486250] 1219*4kB [ 723.490452] 0 [ 723.492492] (UME) [ 723.494881] 0 [ 723.497199] 583*8kB [ 723.530339] ------------[ cut here ]------------ [ 723.541805] (UME) [ 723.560038] WARNING: CPU: 1 PID: 27818 at include/linux/filter.h:612 bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.560044] Kernel panic - not syncing: panic_on_warn set ... [ 723.560044] [ 723.560052] CPU: 1 PID: 27818 Comm: systemd-rfkill Not tainted 4.14.232-syzkaller #0 [ 723.560056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 723.560059] Call Trace: [ 723.560076] dump_stack+0x1b2/0x281 [ 723.560086] panic+0x1f9/0x42d [ 723.560092] ? add_taint.cold+0x16/0x16 [ 723.560104] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.560115] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.560121] __warn.cold+0x20/0x44 [ 723.560130] ? ist_end_non_atomic+0x10/0x10 [ 723.560138] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.560146] report_bug+0x208/0x250 [ 723.560156] do_error_trap+0x195/0x2d0 [ 723.560165] ? math_error+0x2d0/0x2d0 [ 723.560175] ? __change_page_attr_set_clr+0x2280/0x2280 [ 723.560183] ? mark_held_locks+0xa6/0xf0 [ 723.560195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 723.560207] invalid_op+0x1b/0x40 [ 723.560216] RIP: 0010:bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.560225] RSP: 0018:ffff8880979afbf8 EFLAGS: 00010297 [ 723.575271] 118*16kB [ 723.588553] RAX: ffff888077b2c500 RBX: ffffffff815e92e0 RCX: 0000000000000000 [ 723.588557] RDX: 0000000000000000 RSI: ffff888077b2cd88 RDI: 0000000000000001 [ 723.588561] RBP: ffffc9000890c000 R08: ffffffff8b9b4e30 R09: 0000000000000000 [ 723.588565] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880688a4300 [ 723.588569] R13: ffffc9000890c000 R14: ffff8880979afca8 R15: ffffc9000890c000 [ 723.588586] ? __bpf_prog_run64+0xb0/0xb0 [ 723.588602] ? bpf_prog_select_runtime+0x3f1/0x4e0 [ 723.588615] bpf_migrate_filter+0x242/0x2d0 [ 723.588624] ? __sk_attach_prog+0x360/0x360 [ 723.588638] bpf_prepare_filter+0x14c/0x320 [ 723.588647] __get_filter+0x196/0x240 [ 723.588657] sk_attach_filter+0x1b/0x140 [ 723.588667] sock_setsockopt+0x119a/0x1a50 [ 723.588677] ? sk_wait_data+0x3d0/0x3d0 [ 723.588689] ? __do_page_fault+0x571/0xad0 [ 723.588700] ? __fdget+0x167/0x1f0 [ 723.601010] (UME) [ 723.620795] ? security_socket_setsockopt+0x83/0xb0 [ 723.620806] SyS_setsockopt+0x1a4/0x1e0 [ 723.620814] ? SyS_recv+0x40/0x40 [ 723.620822] ? up_read+0x17/0x30 [ 723.620831] ? __do_page_fault+0x159/0xad0 [ 723.620838] ? do_syscall_64+0x4c/0x640 [ 723.620844] ? SyS_recv+0x40/0x40 [ 723.620852] do_syscall_64+0x1d5/0x640 [ 723.620864] entry_SYSCALL_64_after_hwframe+0x46/0xbb [ 723.620872] RIP: 0033:0x7f09b33dceba [ 723.620877] RSP: 002b:00007ffd765a4998 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 723.620886] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f09b33dceba [ 723.620890] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 723.620894] RBP: 00007ffd765a49c0 R08: 0000000000000010 R09: 0000000000000015 [ 723.620898] R10: 00007ffd765a49b0 R11: 0000000000000202 R12: 0000000000000006 [ 723.620902] R13: 00007ffd765a49f8 R14: 0000000000000000 R15: 0000561ffa634780 [ 723.623512] Kernel Offset: disabled [ 724.020030] Rebooting in 86400 seconds..