last executing test programs: 3.145542459s ago: executing program 0 (id=27): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000001008001b0000000000"], 0x28}}, 0x0) close(0xffffffffffffffff) write$cgroup_int(r1, &(0x7f0000000040), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_int(r0, &(0x7f0000000100)='blkio.reset_stats\x00', 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x1}, 0x48) (async) close(r2) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r3, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x40000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8}, 0x90) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000011000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000001008001b0000000000"], 0x28}}, 0x0) (async) close(0xffffffffffffffff) (async) write$cgroup_int(r1, &(0x7f0000000040), 0x12) (async) 2.914037723s ago: executing program 4 (id=5): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'vlan1\x00', &(0x7f00000000c0)=@ethtool_drvinfo={0x3, "415d248f3c8a685c2afd5a58b0ee2107079ae6198f28c94b68b0be650c160b9d", "2778e5a4b529aebdbc46cc06edfdd68130ae07764418066d631d0238db96aae1", "022c9a51b2ece5bc3a001851f852c14a9f67a40aad296af33e4a144dd6645f21", "249ae6f1c6611c7146363da10dacf385edd5343d6f1f1b2ef8702312fb412515", "0e69782eae6eebb802c1221601db8029863712307af35abe2720877031e55935", "cf02d39ec6aff5e7a8f25c99"}}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="30704b000575415558cdd30aefc1f83f207e7a93fa9d37496a571c263b5e17cce0db34d0e9f80a301e5e73fd7bd533afe6da82dc09a7b5eca24683937aad179468439dd70ec0f629a2265c515fbcf08c1d729dd944e3b1a514b7e8581c00d4216b120a4b89e12b80f157d2091c06369e53733d6c2675f0cc72e1c4383868381553852f38c5d817cf153a47b1efb4c02d51b99e0b93861955d36c6a5bc70300000000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000700000008000300", @ANYRESDEC=r2, @ANYBLOB="0400cc0008000500060000000400cc00"], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000400)=0xfffffffd, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000580)='ip6tnl0\x00', 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x42000008}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x64, r6, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3b4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x64}, 0x1, 0x0, 0x0, 0x4004}, 0x40) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000016c0)=ANY=[@ANYBLOB="1802000000000000000000000080000085000000bc00000018000000ffff00000000000002000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r9 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @remote, @local}}}}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r10, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) syz_emit_ethernet(0xfdef, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) 2.853565002s ago: executing program 0 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) (fail_nth: 6) 2.82518204s ago: executing program 3 (id=31): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000006c0)="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", 0xfe7c}, {&(0x7f0000000000)="87", 0x1}, {&(0x7f0000003300)="9a", 0x1}], 0x3, 0x0, 0xf2ff}}], 0x4000000000002e4, 0x4000000) 2.215120314s ago: executing program 3 (id=34): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0xa888, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="eeffffff0a000200aa"], 0x28}}, 0x0) 2.214986119s ago: executing program 3 (id=35): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x4, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfffe, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.214914378s ago: executing program 3 (id=36): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)="0000050000000000", &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.214716771s ago: executing program 2 (id=37): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x6, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xe}, 0x90) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$sock_timeval(r1, 0x1, 0x1, &(0x7f0000000100)={0x0}, &(0x7f00000000c0)=0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000a80)="eab3206e96ed6c9cd34ca4cdc9de8d5369a239dfa73c62deed4197111713b9751925ea4629c4f025003a17b39191229017139f1de9a5e0465250b5d19e9ebe8e0b5f526a78b6a8400b75c2b483f2b9ae05333fdc3ffa6c5a55b1694ee01df0da7989a89726a83877116af3a2851bd808510390ba6ae01392cbce9a8ea0d50f20d71c3c1af6e3a42e01de627fefe263cdffc254cc44c4c337f37e5d6b15d59d89b479e608ed6bbff841c870653518caa42e4e1463a34b5c34a20c00ec6a9c2d6e4264c6eb2036a1a78a88eebbe33cb162e646e82bd329a56aa3763afd25a46e97dcee", 0xffffffffffffffcf, 0x8000, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004001) r5 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r5, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r6 = socket(0x10, 0x0, 0x0) r7 = socket(0x18, 0xa, 0x5) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a40000000001010400000000000000000a0000003c0001802c000180140014000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400ff0200000000000000000000000000010c00028005000100000000000800074000000000100005800a000100512e393331000000"], 0xa4}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}}, 0x0) r9 = socket$inet(0x2, 0x2, 0x5fffffff) setsockopt$sock_int(r9, 0x1, 0x7, &(0x7f0000000040)=0x8, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r10) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000cc0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="01000000000000b809000100000008000100030000001c0500000000030001000000050003000200000005000300800000000800ff0c5c650000", @ANYBLOB="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", @ANYRESHEX=r10, @ANYRESHEX=r0, @ANYBLOB="71d3bf6b443f380ac1b02e477510af73cc44512ee1"], 0x40}}, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r3, 0x1, 0x1000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000008000040850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = epoll_create1(0x0) r13 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r13, &(0x7f0000000140)={0x20000003}) r14 = socket$can_raw(0x1d, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1, r6, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r14, &(0x7f00000003c0)={0x2000}) 2.155258767s ago: executing program 0 (id=38): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b60affff800080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000400000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43}}}, 0x10) bind$tipc(r2, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x41}}}, 0x10) recvfrom(r2, &(0x7f00000003c0)=""/99, 0x63, 0x40002001, &(0x7f0000000540)=@ll={0x11, 0x6, 0x0, 0x1, 0x40, 0x6, @remote}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400007f0000008500000082000000850000000500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000030000000800010004"], 0x50}}, 0x0) r6 = socket$inet6(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd0100000097e6256c80200000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$inet6(r6, &(0x7f0000000140)="20a0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000200)={'syz0', "8e53f2c86ef6977c9ac4a8f2fd20279ef5ed5237bbb4c1a28c05afebcf49eaef0614d9d03dbe8f0b4ee3b1b2b6fcf78da7c645b8f0bc0012ef6a081cf02e513ba0a2852d8647d83f17ee4204dbad0cfd3aff8f0282e319d8db23a68b88437b08aca3aaf698781e3142cbf7c9db932f1e094825bf509d14e35342dd4dc408d10eba0aae0be36e48d91079237a9c29732545c0de63f59fa4ba573327529c89a906c68afead9b573e35e60d920d68349431efa8d4558fe23b972d601e3862"}, 0xc1) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.125013739s ago: executing program 3 (id=39): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r0, 0x0) (async) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff030}, {0x6}]}, 0x10) 2.028353544s ago: executing program 4 (id=40): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}, 0xffffff1f}, 0x0) 2.027282211s ago: executing program 2 (id=42): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00'}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r3, &(0x7f000000b680)={0x0, 0xfffffe58, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb00}], 0x2}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x7, 0x2, 0x1, 0x0, 0x274, 0x3ff}, 0x20) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="7804ca2b7bdef249166a19961bb0c3c49194a0b2ef46c3aeee3d32ae100460cc9b6f692604205b9459b6cdf23b9546369ec3721efc90a891a1a71d4f497bd109a995ff093dc78cd9aae8c2ca0d7f35210d323e95ebf1ab6f5b8697d9d5730bbad7956de87a55326a4b296001c05c23b87d35914fe461b6bf4ff4b5876d6bf0126dacdd510ab0fc023eaa3d2352edf56ded5601b77eaa8b8b9a5a99b03bf36c35b620076f8ff29093e2c34ed3e53f3100db943ba254f1aeb8c107595c2eec7324231248", 0xc3, 0xa0f15a6d21a68a81, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local, 0x7f}, 0x1c) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000), 0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000480)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x75, 0x9, 0x8, 0x3, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @empty, 0x10, 0x700, 0x0, 0x2}}) r4 = socket(0x10, 0x803, 0x0) sendto$inet6(r4, &(0x7f0000000240)='p', 0x1, 0x40804, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000007c0)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@private0}}, &(0x7f0000000200)=0xe8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000640), 0xc, &(0x7f0000000a80)={&(0x7f00000008c0)=ANY=[@ANYBLOB="740100002000000129bd7000fedbdf2532000000fc020000000000000000000000000000ff0100000000000000000000000000014e230fff4e2300090200a0fc06000000", @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="080016000100000014000e00ffffffff000000000000000000000000e80011006401010200000000000000000000000020010000000000000000000000000000fe800000000001000000000000000042ac1414bb000000000000000000000000ff040000000000000a000200ac1414bb00008b7f37e0a42b268bb611d8000000000000000000000000000000000000000000000000000164010101000000000000000000000000000000000000000000000000000000003c0000000035000002000a0000ffffffffffffff0000000000000001fc000000000000000000000000000001ac1414aa000000000000000000000000fe8000000000000000000000000000aa33000000063500001e000a00050019002b00000014000e00000000000000000000ffffac"], 0x174}, 0x1, 0x0, 0x0, 0x8091}, 0x20) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000006b80)=0xc) getpid() r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="380000002d000100000000001f00000000000000", @ANYRES32=r8, @ANYBLOB="0b000080976b64086860300014000180325531db20a2d0431d1ef0f29674d908"], 0x38}], 0x1}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006e40), &(0x7f0000006e80)=0xc) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.891840641s ago: executing program 3 (id=43): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xebf}, [@call={0x85, 0x0, 0x0, 0x9b}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) socket$kcm(0x21, 0x0, 0x2) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f8000000160000020000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xf8}}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x1}]}, 0x10) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r3, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000240)="cb", 0x1, 0x200081d1, 0x0, 0xfde6) (rerun: 64) close(r3) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) (async, rerun: 64) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000380)=0x1000, 0x2) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0xd503}, [@IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_BROADCAST={0xa}]}, 0x34}}, 0x0) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="c58e00000000000000001a00000008000300", @ANYRES32=r9, @ANYBLOB="0c002e80"], 0x28}}, 0x0) 1.780753271s ago: executing program 4 (id=44): socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, 0x0, &(0x7f00000001c0)=0xfb670aaf2992849f) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0}, 0x50) 1.685556236s ago: executing program 1 (id=45): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="00016000160001000000000000000000ac141400000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001000000000000000000000000000000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1a00000080020"], 0x100}}, 0x0) 1.551982641s ago: executing program 2 (id=46): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0xa888, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="eeffffff0a000200aa"], 0x28}}, 0x0) 1.469477341s ago: executing program 1 (id=47): syz_init_net_socket$ax25(0x3, 0x2, 0xcd) (async) syz_init_net_socket$ax25(0x3, 0x2, 0xcd) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f00000010c0), 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) (async) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) sendto$unix(r3, 0x0, 0x0, 0x4081, 0x0, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000040004800800020001000000180008801400078008000500d6d3"], 0x40}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000800010000000000040004800800020001000000180008801400078008000500d6d3"], 0x40}}, 0x0) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="1a", 0x1, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x100, 0x0, 0x0, 0x2001, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0xfffc0000}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x80000001, 0x3f, 0x5, 0x4, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1}, &(0x7f0000000180), &(0x7f0000000340)=r6}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0x1, 0x58, &(0x7f0000000580)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)=""/197, 0xc5}}, 0x10) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000017c0)={0xffffffffffffffff, 0x20, &(0x7f0000001780)={&(0x7f0000000680)=""/4096, 0x1000, 0x0, &(0x7f0000001680)=""/197, 0xc5}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, &(0x7f0000001800), &(0x7f0000001840)='%pB \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001940)={{}, &(0x7f00000018c0), &(0x7f0000001900)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.302195122s ago: executing program 2 (id=48): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x0, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000959800001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) mmap(&(0x7f00002ce000/0x2000)=nil, 0x2000, 0x0, 0x4010, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="05000806", 0x5e0, 0x0, &(0x7f0000000080), 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000f40)={'vcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000001280)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="98020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fedbdf25060000008400018014000200736974300000000000000000000000000800030002000000140002006261746164765f736c6176655f30000008000100", @ANYRESHEX=r3, @ANYBLOB="1400020076657468310000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468310000000000000000000000080003000200000008000100", @ANYRES8=r0, @ANYBLOB="3400018014000200697036677265300000000000000000000800030001000000140002006c6f00000000000000000000000000000c000180080003000200000058000180080003000000000008000100", @ANYRES32=0x0, @ANYRES16=0x0, @ANYRES32=0x0, @ANYBLOB="08000161", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030003000000140002006772657461703000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="6800018008000100", @ANYRES32=0x0, @ANYBLOB="3ff0cb362a9eb2c4cee999342ab3db4047cfa6909cc4c4592703fcfcb52fc37fb6727332ad5f9f1eb9e492a4aca52891e1aa4eb6c12a89ed30779f25e23b8dffd2591b7d2c0d35f2b7260782ef7835d140f5407c65ea895f685387f326674117cdf34b784a4bb30b0bc22d8f", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES64=r3, @ANYBLOB="14000200697036746e6c300000000000000000000800030001000000140002007465616d30000000000000000000000008000300000000001400020070696d367265673100000000000000007c000180140002007369743000000000000000000000000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="140002007465616d5f736c6176655f3100000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f68737200000000080003000200000008000300020000004c000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=0x0, @ANYBLOB="1400020064756d6d7930000000000000000000000800030001000000080003000200000008000100", @ANYRES32=r5, @ANYRESOCT=r1], 0x298}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c0007000000000000000000140003006e657464657673696d3000000000000004002c00"], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000009000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES32=r7], 0x3c}}, 0x0) 1.050691089s ago: executing program 1 (id=49): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = accept4$ax25(r0, &(0x7f0000000140)={{0x3, @bcast}, [@bcast, @bcast, @null, @remote, @rose, @null, @bcast, @null]}, &(0x7f0000000200)=0x48, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000240)={{r1}, r2, 0x0, @unused=[0x0, 0x0, 0x0, 0x3], @subvolid=0x6}) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x18a3c85) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x3) getpeername$inet(r0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000001940)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f130c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c64680820de0e2b469a0994090118d36dadd7b2941a0000000000007f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245ea8b997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90e4405a029bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b980680b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3ba7a79b7c3d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f008ec8d317902f1de385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb91e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377320500ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf24285bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5f99b355b72d538ba4958ea8e4aa37094195e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f92186086e29c61137abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f0a101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1ffe30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72aff3bc19faa5401120000793ac48c1b539c75ab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003203a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b6d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0e900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa620724008000000000000da41959f51610963b48930658e2d6125a26085b11345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330447d1e9e42a035e6fd532f637b7494fc6dae44a1410bcb31fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010058cd4df10af249ce717f6f912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce21071a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a3575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127abc53d97a800336342173862ea26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e72fde07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9ef10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77a1b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000000009f7c0000000000000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883d862a3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5e000000000000000000000000000000000af4e479c04b448b0e73388f0e6fe5ca37dc33c10f8b8dd0bb298f571a94fdc799cc173408b2555f6298ee02348261ec43e9421f8f23ec48c32eb8be9919fb40dd20f6714559596403f81cce0de947baf3ec72d16a1fa955474c246e2f16e28d46edfe7a83ae193b9173f986aaa44e70e01cff665c5b480ab180777d34e082228832813ac231cbdbc7ab28d78974e944a191003ad6be00000000000000000000000000000000001cfdb212975c03af64dd8cb39efe7d887125c4a973b07fabe8bbe5f9509062a7480be66730a681a80f11e36ca08726bcd41feeeae2195befff2ac2aceca1ac1357a8d321f6c994b3ede97dd96978b43963bc01ed2b75f304a0bd7687bdfdd641c0a923bfb5f2055d4665c2901b1cbb01fdcff61b1301159577cbceca62c8371e55a9a52c3d70a1f36fb814d766a6164bbc2ed7a6e4ed010630260a473254f5d2737377a44ae01897f9301b826bc612c71676650692d91956de2e1a342fd95174f7a32beb002a1f0cfb3f048a579d160e24783b4de7badba4e1acbb36287d1b76ddc70099b717f5f96aa148654c"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map, r3, 0x2f, 0x0, 0x0, @prog_id}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000001380)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001340)={&(0x7f0000002a80)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x23c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_FLOWTABLE_HOOK={0x124, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'rose0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'hsr0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip_vti0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}, {0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELFLOWTABLE={0xd4, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xb8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'nicvf0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x40}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x180, 0x18, 0xa, 0xc853a0370ca379d7, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x100, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'sit0\x00'}, {0x14, 0x1, 'netpci0\x00'}, {0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syzkaller0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'team_slave_0\x00'}, {0x14, 0x1, 'pimreg\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x218, 0xc, 0xa, 0xd02, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c0, 0x3, 0x0, 0x1, [{0x1bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_DATA={0xe8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe1, 0x1, "4fb7d14daf6b9dc1f3a081a9d38af08b5127fa9190cf00b5536785a13f024135f542f3101cce6e85a2453454094945740567b320abecd5b498788fb4d0e4ba060ee847834b97d4381bcfddfb3629ee4a5b4471f6cbcd9513dcb48d7da15083599bdf084683463e094c0c559d6d1e2e5d05a57c6cdd6ee81e3ed4bac84cdb0f783e4591d56ad54315dfcbba7519f748e3ab4b48d14c99246dc612a654fea24a30822fc2d6155c40aa5782f569c660ae8aad90b401704c1b3065569646d55d08bd30034a7c1a6fd8fbace7e6953c681882de7b26a22a433fa242b29c6386"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_USERDATA={0xac, 0x6, 0x1, 0x0, "7aa39598f6daa9d2abf24ab6fa8562d09633022c8acab8920629433d9e860ad52c264f413e6265ec8c583ef75caa3c7c4e86348537029fd827ee08e32dfe3c7f4189a0c675d50470c5da1dbac3e9c0b64f8ad47366f72ce2a71fb4e038bb917bd3a3ff3e5fca41dae5fcb92e947a701ad62e9e0cd3ef059658984c3570249e534a11fda4e55451983f165de519587f36a23f9571a7bc99248a99d239409e9eaad036fef5839860e9"}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x744}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040), 0x20) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x32) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000802c000180080001006c6f6700200002801200617000000008000640ea6c767a0900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/125], 0x84}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=ANY=[@ANYBLOB="1c000000520001000000000000000000020000000800020073d85d5f038b42741e05670d586eda28ab3f04245fff6108fb8a9730437d78ca561b91795c1cafddf38afde27da11805e02ea17ee1e8ef03b2cff3c603ea87ef87f1709d0d630f7aed8e6b60ee92357b817753e7e86b76083b9bcfaf404d80a6e494d03b165b1965cbe38beabafeeb88bde7033571838fc005d4eca70fb755a8ef83888a7f59dd8a0ddef5f8be9941a00e0742febdbf", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.050467353s ago: executing program 0 (id=50): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sys_exit\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) poll(&(0x7f0000001e80)=[{}, {0xffffffffffffffff, 0x0, 0x41}], 0x20000000000000c8, 0x0) 1.049338459s ago: executing program 4 (id=51): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000240), &(0x7f00000002c0)}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd8f, 0x0, 0x0}, 0x7) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)='}', 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)='\f', 0x1}], 0x1}, 0x1) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000000000)=""/114, &(0x7f0000000080)=0x72) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$inet_sctp(r3, &(0x7f0000000dc0)={&(0x7f00000003c0)=@in={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000400)="fadaaadeed1d0badac9025cbf63a5be6ba7c9a9c48", 0x15}, {&(0x7f0000000580)="85d3d5e63902b59b62bfef530ade7930f3c9176b409e84a043970521eba1693952a52387711dc8e35200beb33a1a59e501d230706c2fdc615f22e28a39f6feed3b50a81d7278f73539e7766c23afc3da2c785e09c764b080d73448a9584d2dffadf9b3b4e4acf064a3e0e54f", 0x6c}, {&(0x7f0000000b00)="4c64536bba8bd92fd1f07c27b9b51a4718ef3c41f1d5293ce063fc272ccf297c1062d7e76e00ce33ea8fda5c9bbe716033defd621cebb097adf137cc9bb695a3d5e9d62f46dccfa1abe13a4ca3f14c5cb244e2b9f86ad02dd78b48313ec5b4069174a767e87f0f7b861d26e6ad5a7b8019a6bc90ae7cccb2cce7c16e00dc2d79c01bb5268410a6e3a6a1d6dd4953daf7d1874b09ec33afd981fbfebaecb72b45c91afcd538da0fd093bda9f4bff0d36820e3e49c477fee972fa8526acf9fef9cfa46e518ceb754b35e927a0b57f77b906b", 0xd1}, {&(0x7f0000000980)="9642354abeae3087b970303746e24ba6834984816cd598562bb28e799d9505cf140d5647208dd4e43028bd24426bf60a7fd4477104518aea151651840429476f111859d32908eef2a4a7323cf1caa3b4d54570ddd9e48f7c2df71d23fa811fff1c7752f04bf7c4ad41dc79ecce2092c29204337c089faad07a7b063b0b8afd8a9f2fe8dc659004e2da01a270d3ce204584026e1a8c090e7ae30060765194e13d2db2d302050a45435ff88f3349d25194f74553c2ac1f4947", 0xb8}, {&(0x7f0000000880)="b17e67549a33acc60bc94ae3022a2c9c29710f5103", 0x15}, {&(0x7f0000000c00)="212bd96f2c4e76cc1505f83a66d7aad3e748d5c3dac0632f1915e3172bf99398dffd2c756997372547200178432f5c9f69ad393c59f87402293dfc5745afd1", 0x3f}, {&(0x7f0000000c40)="3a48ccd06d", 0x5}, {&(0x7f0000000c80)="19b731e086fe20e42bc5ec60092cbf6c67ac7110b292f78ab792f5cfd291f676e88e7e7c9d9d2ac305103d252f703786d65ab7db41f5ba334ceb792c9aa620774272c0274e3da617c15bfc9fdcbbf85072e028c78027d3c880406e068e0a799ac8d347a63ef4981fe884fab8ce4d529f5ef6b715785eb9cde2b8be98f448bb601010121aad3e4e7d89303a4a0d7d70d9297b503efce5bd91e066e101d058c21246356d7fa8dd00b4e3ece4fdca22eb9a55979b77034e71ed049786f4", 0xbc}, {&(0x7f0000000d40)="6d54c8496db1b916ad730aadf2037d5d89ac6023e6e7255a046fbb70353ce448bfd273c6a7c64665c6be9b7545c5b1e562d628fc54d640450a831686add36bd3b1880543795eaa1e1703f53584fb", 0x4e}], 0x9, 0x0, 0x0, 0x80}, 0x200008c0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x0}) close(r5) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 976.599532ms ago: executing program 2 (id=52): r0 = socket(0x0, 0x5, 0x0) listen(r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$packet(r1, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 799.52451ms ago: executing program 1 (id=53): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000010001ff700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000140012800b000100626174616476"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 631.403151ms ago: executing program 2 (id=54): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x104) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x8, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000fdc600850000008200000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xc6, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r3, @ANYRES32=r6, @ANYRESDEC=r0, @ANYBLOB="e843aa36b1d279d8de5d568dba5b4d1f39dd6808", @ANYRES64=r6, @ANYRESOCT=r3, @ANYRES64=r1, @ANYRES8=r7], 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYRESOCT, @ANYBLOB="426900556132fd8c1121048996c402", @ANYBLOB="010000000000000000003b00000008000300c9b60a00b313f35866cd1b4f1fa1f8d0b56583618811a0d139a4266f497e5ff2dcae5acfd785b1e2231245c039e03b6160b02b242ed73f59b05c1227988c8e1160d03d42d275c5e7129f335e71347238706b15f73d0be0dd7cab145b0f1e899e3aa8e28db6a0c5da7228695c2dea6be001fc88052df2a8c81243d17279a7dba5484d5fe9d3dbb4bb9ba54a9d59985fc44a479b03954197566a6c1956fd08cb61218c076ca44297292d141e3cacf8cc0e00"/206, @ANYRES32, @ANYBLOB="2701330080000000ffffffffffff080211000000505050505050"], 0x144}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24}, 0x90) r8 = socket(0xa, 0x4, 0xff) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x4, 0x0, @mcast1}, 0x0, {[0x7]}}, 0x5c) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$IP_SET_OP_GET_BYNAME(r10, 0x1, 0x22, 0x0, &(0x7f0000000f80)) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000721fc07099b41391a9427dfd84c48e6d7a604d07807beead621a68d45a59bd334a22d86b55701d8fb706f1c18659e116c5fd41261b94dac944e3c2d10eecc5e6c2f54e383edd6a040fadc1e88405c57938632f9ca97034fb9d6d07c60dcc6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x80000000, 0x0, 0x0, 0x40f00, 0xa}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000500)=ANY=[@ANYRES32=r10, @ANYBLOB="d84801330c4be941a1f0a345ba270d99ace4205c061e94f26ef43f33463ce44ed84ca6f37b72fb89843c34f45bbb46a075cc2451b217cbf58df3ce38d9b6a5de474ccab448bb1d34687a3e5be36a386e69de3aabee511357756e8882456036a9218aa12235f066a074eeea5bf3db458692cee4f5a1792451d974ee28a10dbdf0a5c322c73e93a1a606a5f9b11ceb543ea385bccd400bdaf3ab2079e3cdc9b4fa0a68eefc3cfd534f69ffcf488ce1cd20d5a6f98bee0bbfffc1b25ec2a3bc26ddbe2ff5c66c0a352230ac", @ANYRESHEX], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r11}, 0xc) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffe18, 0x0, 0x0, 0x80000000}, 0xffffffffffffffe2) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000280)) socket(0x10, 0x3, 0x4) socket$inet6(0xa, 0xa, 0xfffffffc) 607.867704ms ago: executing program 0 (id=55): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x5, 0x80004, 0x2a, &(0x7f0000000100)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async, rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x800}]}, 0x2c}}, 0x0) (rerun: 64) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{}, {0x6}]}) r5 = socket$inet(0x2, 0x2, 0x1) connect$inet(r5, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) (async, rerun: 64) sendmmsg$inet(r5, &(0x7f0000000540)=[{{0x0, 0x7ffff000, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) (async, rerun: 64) getsockopt$nfc_llcp(r0, 0x6, 0xb, 0x0, 0x2000e863) (rerun: 64) 530.552109ms ago: executing program 4 (id=56): r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x43) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x98f}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x2c}}, 0x0) (fail_nth: 1) 524.610489ms ago: executing program 1 (id=57): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x111, 0x2, 0x0, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 12.034173ms ago: executing program 0 (id=58): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0xa888, &(0x7f0000000180)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="eeffffff0a000200aa"], 0x28}}, 0x0) 11.629302ms ago: executing program 1 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\L\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="080026006c0900000a0006000802110000000000040067000400cc0004000801060066003e88000004001e010a0034"], 0x5c}}, 0x0) 0s ago: executing program 4 (id=60): r0 = socket$packet(0x11, 0x2, 0x300) socket$inet6_sctp(0xa, 0x0, 0x84) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@initdev, @multicast2}, &(0x7f00000001c0)=0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in=@local}}, 0xe8) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r5, 0x80487436, &(0x7f0000005280)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x6, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r3, @ANYRES16=r3, @ANYRESDEC=r6], 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="3400000012001fff00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280040001007633238065746800000000040002800944dfcee8a1a58a963582a8321f4bf387be09cb2d4ac540aa3698bbbf62dfde097ec9979c394d3f9684b94b0dec8658d1533bea5ddf2a9f46bc31413fd4d0000000000000000000"], 0x34}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) r10 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @mcast2={0xff, 0x3}}}) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000001ac0)={&(0x7f00000018c0), 0xc, 0x0}, 0x400c000) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 74.337508][ T5089] cgroup: Unknown subsys name 'net' [ 74.537041][ T5089] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.192056][ T5089] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.529803][ T5112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.542388][ T5115] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.552226][ T5115] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.561131][ T5115] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.568958][ T5115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.576957][ T5115] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.584233][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.585006][ T5115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.598490][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.599794][ T5115] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.608358][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.616011][ T5115] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.623820][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.627383][ T5115] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 78.634932][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.641250][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.647410][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.662363][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.670610][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.679878][ T5120] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.680397][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.696334][ T5115] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.696826][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.712040][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.712064][ T5115] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.727938][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.735862][ T5115] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.753990][ T5115] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.764456][ T5115] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.772168][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.363727][ T5101] chnl_net:caif_netlink_parms(): no params data found [ 79.481211][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 79.496560][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 79.539712][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 79.646659][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 79.661143][ T5101] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.669122][ T5101] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.676360][ T5101] bridge_slave_0: entered allmulticast mode [ 79.683677][ T5101] bridge_slave_0: entered promiscuous mode [ 79.722295][ T5101] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.729758][ T5101] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.736901][ T5101] bridge_slave_1: entered allmulticast mode [ 79.744742][ T5101] bridge_slave_1: entered promiscuous mode [ 79.811254][ T5101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.869974][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.877165][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.884999][ T5099] bridge_slave_0: entered allmulticast mode [ 79.892738][ T5099] bridge_slave_0: entered promiscuous mode [ 79.903826][ T5101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.925490][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.932847][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.940146][ T5102] bridge_slave_0: entered allmulticast mode [ 79.947153][ T5102] bridge_slave_0: entered promiscuous mode [ 79.986369][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.993725][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.001214][ T5099] bridge_slave_1: entered allmulticast mode [ 80.008740][ T5099] bridge_slave_1: entered promiscuous mode [ 80.027153][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.034377][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.045303][ T5102] bridge_slave_1: entered allmulticast mode [ 80.052314][ T5102] bridge_slave_1: entered promiscuous mode [ 80.070167][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.077278][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.084735][ T5100] bridge_slave_0: entered allmulticast mode [ 80.091900][ T5100] bridge_slave_0: entered promiscuous mode [ 80.104887][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.112110][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.119807][ T5100] bridge_slave_1: entered allmulticast mode [ 80.126694][ T5100] bridge_slave_1: entered promiscuous mode [ 80.149134][ T5101] team0: Port device team_slave_0 added [ 80.194746][ T5101] team0: Port device team_slave_1 added [ 80.215213][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.252157][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.265978][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.289447][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.296388][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.323004][ T5101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.339360][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.374072][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.415893][ T5101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.422995][ T5101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.449475][ T5101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.480217][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.487354][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.496387][ T5098] bridge_slave_0: entered allmulticast mode [ 80.504311][ T5098] bridge_slave_0: entered promiscuous mode [ 80.514576][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.539999][ T5099] team0: Port device team_slave_0 added [ 80.567188][ T5102] team0: Port device team_slave_0 added [ 80.575991][ T5102] team0: Port device team_slave_1 added [ 80.582317][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.589713][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.596859][ T5098] bridge_slave_1: entered allmulticast mode [ 80.604251][ T5098] bridge_slave_1: entered promiscuous mode [ 80.625580][ T5099] team0: Port device team_slave_1 added [ 80.647750][ T5100] team0: Port device team_slave_0 added [ 80.656340][ T5100] team0: Port device team_slave_1 added [ 80.698519][ T4492] Bluetooth: hci4: command tx timeout [ 80.748739][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.761345][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.771365][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.778559][ T4492] Bluetooth: hci2: command tx timeout [ 80.784014][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.810102][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.823353][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.830411][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.856931][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.867856][ T5106] Bluetooth: hci1: command tx timeout [ 80.873726][ T53] Bluetooth: hci3: command tx timeout [ 80.879668][ T4492] Bluetooth: hci0: command tx timeout [ 80.900440][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.907410][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.933873][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.973819][ T5101] hsr_slave_0: entered promiscuous mode [ 80.981168][ T5101] hsr_slave_1: entered promiscuous mode [ 80.989783][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.996750][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.023349][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.036174][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.043709][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.069781][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.104113][ T5098] team0: Port device team_slave_0 added [ 81.113255][ T5098] team0: Port device team_slave_1 added [ 81.134366][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.141386][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.167842][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.259416][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.266393][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.292835][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.314420][ T5099] hsr_slave_0: entered promiscuous mode [ 81.321418][ T5099] hsr_slave_1: entered promiscuous mode [ 81.327816][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.335643][ T5099] Cannot create hsr debugfs directory [ 81.367947][ T5102] hsr_slave_0: entered promiscuous mode [ 81.374608][ T5102] hsr_slave_1: entered promiscuous mode [ 81.380966][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.388591][ T5102] Cannot create hsr debugfs directory [ 81.394864][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.402303][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.428766][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.463832][ T5100] hsr_slave_0: entered promiscuous mode [ 81.470936][ T5100] hsr_slave_1: entered promiscuous mode [ 81.477118][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.485124][ T5100] Cannot create hsr debugfs directory [ 81.545542][ T5098] hsr_slave_0: entered promiscuous mode [ 81.553665][ T5098] hsr_slave_1: entered promiscuous mode [ 81.560236][ T5098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.567851][ T5098] Cannot create hsr debugfs directory [ 82.218219][ T5101] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.232127][ T5101] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.261855][ T5101] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.278316][ T5101] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.420437][ T5102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.447920][ T5102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.496900][ T5102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.518564][ T5102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.610826][ T5101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.626843][ T5099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.655498][ T5099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.697016][ T5099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.755044][ T5099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.779643][ T53] Bluetooth: hci4: command tx timeout [ 82.790981][ T5101] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.816408][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.823983][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.858627][ T53] Bluetooth: hci2: command tx timeout [ 82.890522][ T5098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.905446][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.912711][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.930562][ T5098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.938910][ T53] Bluetooth: hci3: command tx timeout [ 82.944360][ T53] Bluetooth: hci0: command tx timeout [ 82.950055][ T4492] Bluetooth: hci1: command tx timeout [ 82.960248][ T5098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.971996][ T5098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.087831][ T5100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.101028][ T5100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.112041][ T5100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.139497][ T5100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.249232][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.373762][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.440510][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.463556][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.520278][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.527445][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.547680][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.554893][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.590585][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.597878][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.659371][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.666554][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.695553][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.713564][ T5101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.739615][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.807067][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.830714][ T5099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.916605][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.923893][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.975770][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.987200][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.994379][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.073413][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.080664][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.122248][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.129599][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.152065][ T5101] veth0_vlan: entered promiscuous mode [ 84.273842][ T5101] veth1_vlan: entered promiscuous mode [ 84.295168][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.450250][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.509328][ T5101] veth0_macvtap: entered promiscuous mode [ 84.531755][ T5099] veth0_vlan: entered promiscuous mode [ 84.569463][ T5101] veth1_macvtap: entered promiscuous mode [ 84.640744][ T5099] veth1_vlan: entered promiscuous mode [ 84.684768][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.720772][ T5102] veth0_vlan: entered promiscuous mode [ 84.735303][ T5101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.763495][ T5101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.779413][ T5101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.788872][ T5101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.798237][ T5101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.835962][ T5102] veth1_vlan: entered promiscuous mode [ 84.864406][ T4492] Bluetooth: hci4: command tx timeout [ 84.911755][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.931548][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.948562][ T4492] Bluetooth: hci2: command tx timeout [ 84.973169][ T5099] veth0_macvtap: entered promiscuous mode [ 85.018587][ T4492] Bluetooth: hci1: command tx timeout [ 85.019267][ T5106] Bluetooth: hci0: command tx timeout [ 85.024047][ T4492] Bluetooth: hci3: command tx timeout [ 85.053665][ T5102] veth0_macvtap: entered promiscuous mode [ 85.083114][ T5099] veth1_macvtap: entered promiscuous mode [ 85.107213][ T5102] veth1_macvtap: entered promiscuous mode [ 85.179828][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.195510][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.276354][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.288762][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.301663][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.314023][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.328994][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.336772][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.349800][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.360334][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.371165][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.386409][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.409047][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.421571][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.434541][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.444361][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.462359][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.472621][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.483233][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.495831][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.531639][ T5099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.543626][ T5099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.555975][ T5099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.565082][ T5099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.583716][ T5102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.593796][ T5102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.603170][ T5102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.613506][ T5102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.635773][ T5100] veth0_vlan: entered promiscuous mode [ 85.705897][ T5100] veth1_vlan: entered promiscuous mode [ 85.744623][ T5188] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.905436][ T5098] veth0_vlan: entered promiscuous mode [ 85.927850][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.935729][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.024150][ T5098] veth1_vlan: entered promiscuous mode [ 86.055914][ T2426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.064255][ T2426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.120589][ T5100] veth0_macvtap: entered promiscuous mode [ 86.161744][ T5100] veth1_macvtap: entered promiscuous mode [ 86.224620][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.247081][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.257304][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.273245][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.289901][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.313224][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.347048][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.374270][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.395788][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.450853][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.465292][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.480024][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.490680][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.501094][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.517972][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.530801][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.563890][ T5098] veth0_macvtap: entered promiscuous mode [ 86.576073][ T2426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.590311][ T5100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.597725][ T2426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.605106][ T5100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.615973][ T5100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.626695][ T5100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.672863][ T5098] veth1_macvtap: entered promiscuous mode [ 86.776807][ T5203] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.790667][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.802790][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.813290][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.826176][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.836309][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.852957][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.863889][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.881736][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.894690][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.903761][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 86.914305][ T5201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10'. [ 86.923860][ T5201] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10'. [ 86.940217][ T4492] Bluetooth: hci4: command tx timeout [ 87.018471][ T4492] Bluetooth: hci2: command tx timeout [ 87.098062][ T4492] Bluetooth: hci0: command tx timeout [ 87.099885][ T5106] Bluetooth: hci3: command tx timeout [ 87.103612][ T4492] Bluetooth: hci1: command tx timeout [ 87.127186][ T25] cfg80211: failed to load regulatory.db [ 87.139569][ T5203] team0: Port device wlan1 added [ 87.165155][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.195127][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.218093][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.229086][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.239795][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.254249][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.264800][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.275775][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.305449][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.388540][ T5098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.415125][ T5098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.439009][ T5221] FAULT_INJECTION: forcing a failure. [ 87.439009][ T5221] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 87.452668][ T5098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.452709][ T5098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.468408][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.510107][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.568431][ T5221] CPU: 1 PID: 5221 Comm: syz.1.15 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 87.578412][ T5221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 87.588520][ T5221] Call Trace: [ 87.591842][ T5221] [ 87.594808][ T5221] dump_stack_lvl+0x241/0x360 [ 87.599550][ T5221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.604800][ T5221] ? __pfx__printk+0x10/0x10 [ 87.609439][ T5221] ? __lock_acquire+0x1346/0x1fd0 [ 87.614519][ T5221] should_fail_ex+0x3b0/0x4e0 [ 87.619261][ T5221] prepare_alloc_pages+0x1da/0x5d0 [ 87.624441][ T5221] __alloc_pages_noprof+0x166/0x6c0 [ 87.629701][ T5221] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 87.635494][ T5221] alloc_pages_mpol_noprof+0x3e8/0x680 [ 87.641015][ T5221] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 87.647063][ T5221] vma_alloc_folio_noprof+0xf3/0x1f0 [ 87.652408][ T5221] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 87.658371][ T5221] ? do_raw_spin_unlock+0x13c/0x8b0 [ 87.663623][ T5221] folio_prealloc+0x31/0x170 [ 87.668252][ T5221] do_wp_page+0x11cc/0x52f0 [ 87.672819][ T5221] ? __pfx_do_wp_page+0x10/0x10 [ 87.677734][ T5221] ? __pfx_lock_acquire+0x10/0x10 [ 87.682803][ T5221] ? do_raw_spin_lock+0x14f/0x370 [ 87.687899][ T5221] handle_pte_fault+0x117e/0x7090 [ 87.692975][ T5221] ? __pfx_validate_chain+0x10/0x10 [ 87.698228][ T5221] ? mark_lock+0x9a/0x350 [ 87.702613][ T5221] ? __pfx_handle_pte_fault+0x10/0x10 [ 87.708032][ T5221] ? __lock_acquire+0x1346/0x1fd0 [ 87.713157][ T5221] ? __pfx_lock_release+0x10/0x10 [ 87.718236][ T5221] handle_mm_fault+0x10df/0x1ba0 [ 87.723254][ T5221] ? __pfx_handle_mm_fault+0x10/0x10 [ 87.728616][ T5221] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.734984][ T5221] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 87.740317][ T5221] exc_page_fault+0x2b9/0x8c0 [ 87.745057][ T5221] asm_exc_page_fault+0x26/0x30 [ 87.749958][ T5221] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 87.755813][ T5221] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 87.775461][ T5221] RSP: 0018:ffffc900046676f8 EFLAGS: 00050206 [ 87.781618][ T5221] RAX: ffffffff84ac6c01 RBX: 0000000000001000 RCX: 000000000000043f [ 87.789626][ T5221] RDX: 0000000000000000 RSI: ffff88807a891bc1 RDI: 000000002000c000 [ 87.797639][ T5221] RBP: ffffc90004667878 R08: ffff88807a891fff R09: 1ffff1100f5123ff [ 87.805736][ T5221] R10: dffffc0000000000 R11: ffffed100f512400 R12: 1ffff920008ccfad [ 87.813742][ T5221] R13: 000000002000b43f R14: ffffc90004667d68 R15: ffff88807a891000 [ 87.821764][ T5221] ? _copy_to_iter+0x1b1/0x1960 [ 87.826682][ T5221] _copy_to_iter+0x26b/0x1960 [ 87.831422][ T5221] ? free_unref_page+0x634/0xea0 [ 87.836416][ T5221] ? __pfx__copy_to_iter+0x10/0x10 [ 87.841600][ T5221] ? __folio_put+0x3b9/0x620 [ 87.846230][ T5221] ? __pfx___folio_put+0x10/0x10 [ 87.851200][ T5221] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.857579][ T5221] ? page_copy_sane+0x46/0x260 [ 87.862385][ T5221] copy_page_to_iter+0xb1/0x160 [ 87.867255][ T5221] pipe_read+0x59c/0x13e0 [ 87.871616][ T5221] ? __pfx_pipe_read+0x10/0x10 [ 87.876387][ T5221] ? __pfx_aa_file_perm+0x10/0x10 [ 87.881419][ T5221] ? __pfx_autoremove_wake_function+0x10/0x10 [ 87.887509][ T5221] do_iter_readv_writev+0x5a4/0x800 [ 87.892732][ T5221] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 87.898477][ T5221] ? bpf_lsm_file_permission+0x9/0x10 [ 87.903872][ T5221] ? security_file_permission+0x7f/0xa0 [ 87.909435][ T5221] ? rw_verify_area+0x520/0x6b0 [ 87.914302][ T5221] vfs_readv+0x2b6/0xa90 [ 87.918592][ T5221] ? __pfx_vfs_readv+0x10/0x10 [ 87.923391][ T5221] ? vfs_write+0x7c4/0xc90 [ 87.927843][ T5221] ? __fget_files+0x29/0x470 [ 87.932509][ T5221] do_readv+0x1b1/0x350 [ 87.936694][ T5221] ? __pfx_do_readv+0x10/0x10 [ 87.941394][ T5221] ? do_syscall_64+0x100/0x230 [ 87.946171][ T5221] ? do_syscall_64+0xb6/0x230 [ 87.950883][ T5221] do_syscall_64+0xf3/0x230 [ 87.955432][ T5221] ? clear_bhb_loop+0x35/0x90 [ 87.960169][ T5221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.966097][ T5221] RIP: 0033:0x7f850fd75bd9 [ 87.970523][ T5221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.990144][ T5221] RSP: 002b:00007f8510a63048 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 87.998586][ T5221] RAX: ffffffffffffffda RBX: 00007f850ff03f60 RCX: 00007f850fd75bd9 [ 88.006584][ T5221] RDX: 0000000000000001 RSI: 0000000020000540 RDI: 0000000000000003 [ 88.014567][ T5221] RBP: 00007f8510a630a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.022560][ T5221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 88.030556][ T5221] R13: 000000000000000b R14: 00007f850ff03f60 R15: 00007fff6b699708 [ 88.038566][ T5221] [ 88.109438][ T5230] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551615) [ 88.144123][ T2413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.175897][ T2413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.368657][ T2413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.408287][ T2413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.608576][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.644336][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.679789][ T5250] FAULT_INJECTION: forcing a failure. [ 88.679789][ T5250] name failslab, interval 1, probability 0, space 0, times 1 [ 88.724103][ T5250] CPU: 0 PID: 5250 Comm: syz.1.23 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 88.734085][ T5250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 88.744182][ T5250] Call Trace: [ 88.747497][ T5250] [ 88.750461][ T5250] dump_stack_lvl+0x241/0x360 [ 88.755180][ T5250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.760432][ T5250] ? __pfx__printk+0x10/0x10 [ 88.765070][ T5250] should_fail_ex+0x3b0/0x4e0 [ 88.769798][ T5250] ? copy_splice_read+0x18d/0xb60 [ 88.774862][ T5250] should_failslab+0x9/0x20 [ 88.779409][ T5250] __kmalloc_noprof+0xd8/0x400 [ 88.784242][ T5250] copy_splice_read+0x18d/0xb60 [ 88.789138][ T5250] ? __pfx_copy_splice_read+0x10/0x10 [ 88.794560][ T5250] ? file_end_write+0xe0/0x250 [ 88.799367][ T5250] ? direct_splice_actor+0x12b/0x220 [ 88.804699][ T5250] splice_direct_to_actor+0x502/0xc90 [ 88.810130][ T5250] ? __pfx_direct_splice_actor+0x10/0x10 [ 88.815800][ T5250] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 88.821728][ T5250] ? __fget_files+0x29/0x470 [ 88.826364][ T5250] ? __pfx_lock_release+0x10/0x10 [ 88.831443][ T5250] do_splice_direct+0x28c/0x3e0 [ 88.836337][ T5250] ? __pfx_do_splice_direct+0x10/0x10 [ 88.841745][ T5250] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 88.847680][ T5250] ? security_file_permission+0x7f/0xa0 [ 88.853286][ T5250] ? rw_verify_area+0x1d2/0x6b0 [ 88.858178][ T5250] do_sendfile+0x56d/0xe20 [ 88.862644][ T5250] ? __pfx_do_sendfile+0x10/0x10 [ 88.867645][ T5250] __se_sys_sendfile64+0x17c/0x1e0 [ 88.872806][ T5250] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 88.878487][ T5250] ? do_syscall_64+0x100/0x230 [ 88.883295][ T5250] ? do_syscall_64+0xb6/0x230 [ 88.888014][ T5250] do_syscall_64+0xf3/0x230 [ 88.892556][ T5250] ? clear_bhb_loop+0x35/0x90 [ 88.897278][ T5250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.903209][ T5250] RIP: 0033:0x7f850fd75bd9 [ 88.907655][ T5250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.927298][ T5250] RSP: 002b:00007f8510a63048 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 88.935760][ T5250] RAX: ffffffffffffffda RBX: 00007f850ff03f60 RCX: 00007f850fd75bd9 [ 88.943770][ T5250] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000000010 [ 88.951775][ T5250] RBP: 00007f8510a630a0 R08: 0000000000000000 R09: 0000000000000000 [ 88.959801][ T5250] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000002 [ 88.967811][ T5250] R13: 000000000000000b R14: 00007f850ff03f60 R15: 00007fff6b699708 [ 88.975838][ T5250] [ 89.133124][ T5248] team0: Port device wlan1 added [ 89.384924][ T5275] Illegal XDP return value 2042593280 on prog (id 9) dev N/A, expect packet loss! [ 89.392010][ T5278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 89.429532][ T5278] FAULT_INJECTION: forcing a failure. [ 89.429532][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 89.487265][ T5278] CPU: 0 PID: 5278 Comm: syz.0.30 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 89.497236][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 89.507321][ T5278] Call Trace: [ 89.510640][ T5278] [ 89.513604][ T5278] dump_stack_lvl+0x241/0x360 [ 89.518327][ T5278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 89.523566][ T5278] ? __pfx__printk+0x10/0x10 [ 89.528214][ T5278] should_fail_ex+0x3b0/0x4e0 [ 89.532946][ T5278] ? rtnl_newlink+0xf2/0x20a0 [ 89.537669][ T5278] should_failslab+0x9/0x20 [ 89.542214][ T5278] kmalloc_trace_noprof+0x6c/0x2c0 [ 89.547462][ T5278] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.552517][ T5278] rtnl_newlink+0xf2/0x20a0 [ 89.557059][ T5278] ? __pfx_lock_acquire+0x10/0x10 [ 89.562127][ T5278] ? __mutex_lock+0x99b/0xd70 [ 89.566855][ T5278] ? __pfx_lock_release+0x10/0x10 [ 89.571919][ T5278] ? do_raw_spin_lock+0x14f/0x370 [ 89.576992][ T5278] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.582065][ T5278] ? do_raw_spin_unlock+0x13c/0x8b0 [ 89.587344][ T5278] ? __mutex_lock+0x9a5/0xd70 [ 89.592073][ T5278] ? __mutex_lock+0x527/0xd70 [ 89.596807][ T5278] ? rtnetlink_rcv_msg+0x842/0x1180 [ 89.602051][ T5278] ? __pfx___mutex_lock+0x10/0x10 [ 89.607190][ T5278] ? __pfx_rtnl_newlink+0x10/0x10 [ 89.612269][ T5278] rtnetlink_rcv_msg+0x89b/0x1180 [ 89.617344][ T5278] ? rtnetlink_rcv_msg+0x208/0x1180 [ 89.622590][ T5278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.628097][ T5278] ? __local_bh_enable_ip+0x168/0x200 [ 89.633518][ T5278] ? lockdep_hardirqs_on+0x99/0x150 [ 89.638778][ T5278] ? __local_bh_enable_ip+0x168/0x200 [ 89.644195][ T5278] ? dev_hard_start_xmit+0x773/0x7e0 [ 89.649526][ T5278] ? __dev_queue_xmit+0x2da/0x3e90 [ 89.654685][ T5278] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 89.660454][ T5278] ? __dev_queue_xmit+0x2da/0x3e90 [ 89.665617][ T5278] ? __dev_queue_xmit+0x1763/0x3e90 [ 89.670867][ T5278] ? kasan_save_track+0x51/0x80 [ 89.675764][ T5278] ? do_syscall_64+0xf3/0x230 [ 89.680480][ T5278] ? __dev_queue_xmit+0x2da/0x3e90 [ 89.685640][ T5278] ? __pfx___dev_queue_xmit+0x10/0x10 [ 89.691093][ T5278] ? ref_tracker_free+0x643/0x7e0 [ 89.696181][ T5278] netlink_rcv_skb+0x1e3/0x430 [ 89.700991][ T5278] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.706495][ T5278] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 89.711851][ T5278] ? netlink_deliver_tap+0x2e/0x1b0 [ 89.717099][ T5278] netlink_unicast+0x7f0/0x990 [ 89.721919][ T5278] ? __pfx_netlink_unicast+0x10/0x10 [ 89.727240][ T5278] ? __virt_addr_valid+0x183/0x520 [ 89.732412][ T5278] ? __check_object_size+0x49c/0x900 [ 89.737745][ T5278] ? bpf_lsm_netlink_send+0x9/0x10 [ 89.742909][ T5278] netlink_sendmsg+0x8e4/0xcb0 [ 89.747731][ T5278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.753060][ T5278] ? __import_iovec+0x536/0x820 [ 89.757957][ T5278] ? aa_sock_msg_perm+0x91/0x160 [ 89.762946][ T5278] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 89.768267][ T5278] ? security_socket_sendmsg+0x87/0xb0 [ 89.773776][ T5278] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.779093][ T5278] __sock_sendmsg+0x221/0x270 [ 89.783832][ T5278] ____sys_sendmsg+0x525/0x7d0 [ 89.788656][ T5278] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.794008][ T5278] __sys_sendmsg+0x2b0/0x3a0 [ 89.798653][ T5278] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.803808][ T5278] ? vfs_write+0x7c4/0xc90 [ 89.808318][ T5278] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.814687][ T5278] ? do_syscall_64+0x100/0x230 [ 89.819495][ T5278] ? do_syscall_64+0xb6/0x230 [ 89.824216][ T5278] do_syscall_64+0xf3/0x230 [ 89.828762][ T5278] ? clear_bhb_loop+0x35/0x90 [ 89.833483][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.839418][ T5278] RIP: 0033:0x7fc99db75bd9 [ 89.843870][ T5278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.863516][ T5278] RSP: 002b:00007fc99d5ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.871977][ T5278] RAX: ffffffffffffffda RBX: 00007fc99dd03f60 RCX: 00007fc99db75bd9 [ 89.879989][ T5278] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000005 [ 89.888000][ T5278] RBP: 00007fc99d5ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 89.896011][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.904020][ T5278] R13: 000000000000000b R14: 00007fc99dd03f60 R15: 00007ffe37876a08 [ 89.912048][ T5278] [ 90.406588][ T5313] Zero length message leads to an empty skb [ 90.536353][ T5302] netlink: 52 bytes leftover after parsing attributes in process `syz.0.38'. [ 90.555440][ T5315] syz.3.43: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 90.620544][ T5315] CPU: 1 PID: 5315 Comm: syz.3.43 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 90.630519][ T5315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.640613][ T5315] Call Trace: [ 90.643923][ T5315] [ 90.646883][ T5315] dump_stack_lvl+0x241/0x360 [ 90.651608][ T5315] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.656844][ T5315] ? __pfx__printk+0x10/0x10 [ 90.661476][ T5315] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 90.667935][ T5315] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 90.674487][ T5315] warn_alloc+0x278/0x410 [ 90.678876][ T5315] ? __pfx_warn_alloc+0x10/0x10 [ 90.683781][ T5315] ? packet_set_ring+0x6da/0x2450 [ 90.688852][ T5315] ? __get_vm_area_node+0x23d/0x270 [ 90.694107][ T5315] __vmalloc_node_range_noprof+0x69f/0x1460 [ 90.700051][ T5315] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 90.705848][ T5315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.712225][ T5315] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 90.718254][ T5315] ? packet_set_ring+0x62b/0x2450 [ 90.723324][ T5315] ? rcu_is_watching+0x15/0xb0 [ 90.728133][ T5315] ? packet_set_ring+0x6da/0x2450 [ 90.733201][ T5315] vzalloc_noprof+0x79/0x90 [ 90.737748][ T5315] ? packet_set_ring+0x6da/0x2450 [ 90.742818][ T5315] packet_set_ring+0x6da/0x2450 [ 90.744816][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 90.747719][ T5315] ? __pfx_packet_set_ring+0x10/0x10 [ 90.747786][ T5315] ? __might_fault+0xaa/0x120 [ 90.747822][ T5315] ? __might_fault+0xc6/0x120 [ 90.747870][ T5315] packet_setsockopt+0x1140/0x1970 [ 90.761975][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.47'. [ 90.766471][ T5315] ? __pfx___might_resched+0x10/0x10 [ 90.790283][ T5315] ? __pfx_packet_setsockopt+0x10/0x10 [ 90.795803][ T5315] ? aa_sk_perm+0x967/0xab0 [ 90.800364][ T5315] ? __pfx_aa_sk_perm+0x10/0x10 [ 90.805275][ T5315] ? __pfx_lock_acquire+0x10/0x10 [ 90.810337][ T5315] ? aa_sock_opt_perm+0x79/0x120 [ 90.815324][ T5315] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 90.820903][ T5315] ? security_socket_setsockopt+0x87/0xb0 [ 90.826664][ T5315] ? __pfx_packet_setsockopt+0x10/0x10 [ 90.832172][ T5315] do_sock_setsockopt+0x3af/0x720 [ 90.837255][ T5315] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.842843][ T5315] ? __fget_files+0x29/0x470 [ 90.847475][ T5315] ? __fget_files+0x3f6/0x470 [ 90.852212][ T5315] __sys_setsockopt+0x1ae/0x250 [ 90.857119][ T5315] __x64_sys_setsockopt+0xb5/0xd0 [ 90.862193][ T5315] do_syscall_64+0xf3/0x230 [ 90.866733][ T5315] ? clear_bhb_loop+0x35/0x90 [ 90.871452][ T5315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.877380][ T5315] RIP: 0033:0x7f6c15d75bd9 [ 90.881827][ T5315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.901479][ T5315] RSP: 002b:00007f6c16bb7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.909942][ T5315] RAX: ffffffffffffffda RBX: 00007f6c15f03f60 RCX: 00007f6c15d75bd9 [ 90.917956][ T5315] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000008 [ 90.925967][ T5315] RBP: 00007f6c15de4e60 R08: 000000000000001c R09: 0000000000000000 [ 90.933989][ T5315] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 90.942017][ T5315] R13: 000000000000000b R14: 00007f6c15f03f60 R15: 00007ffd85a62508 [ 90.950052][ T5315] [ 90.986923][ T5315] Mem-Info: [ 90.992189][ T5337] netlink: 'syz.2.48': attribute type 44 has an invalid length. [ 91.002063][ T5315] active_anon:3844 inactive_anon:0 isolated_anon:0 [ 91.002063][ T5315] active_file:1159 inactive_file:38134 isolated_file:0 [ 91.002063][ T5315] unevictable:768 dirty:1251 writeback:0 [ 91.002063][ T5315] slab_reclaimable:8747 slab_unreclaimable:93792 [ 91.002063][ T5315] mapped:13071 shmem:1247 pagetables:727 [ 91.002063][ T5315] sec_pagetables:0 bounce:0 [ 91.002063][ T5315] kernel_misc_reclaimable:0 [ 91.002063][ T5315] free:1412836 free_pcp:812 free_cma:0 [ 91.096007][ T5315] Node 0 active_anon:15076kB inactive_anon:0kB active_file:4636kB inactive_file:152460kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52084kB dirty:4996kB writeback:0kB shmem:3452kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9924kB pagetables:2708kB sec_pagetables:0kB all_unreclaimable? no [ 91.166861][ T5315] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.231511][ T5315] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.313689][ T5315] lowmem_reserve[]: 0 2571 2571 0 0 [ 91.325606][ T5315] Node 0 DMA32 free:1688748kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:15308kB inactive_anon:0kB active_file:4712kB inactive_file:152140kB unevictable:1536kB writepending:5084kB present:3129332kB managed:2659868kB mlocked:0kB bounce:0kB free_pcp:904kB local_pcp:664kB free_cma:0kB [ 91.394849][ T5315] lowmem_reserve[]: 0 0 0 0 0 [ 91.420183][ T5315] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:8kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.508284][ T5351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'. [ 91.549924][ T5315] lowmem_reserve[]: 0 0 0 0 0 [ 91.554752][ T5315] Node 1 Normal free:3949840kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:8kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:224kB local_pcp:96kB free_cma:0kB [ 91.678444][ T5315] lowmem_reserve[]: 0 0 0 0 0 [ 91.683273][ T5315] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.725227][ T5363] xt_hashlimit: invalid interval [ 91.751224][ T5365] FAULT_INJECTION: forcing a failure. [ 91.751224][ T5365] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.787637][ T5315] Node 0 DMA32: 0*4kB 282*8kB (UME) 257*16kB (UME) 28*32kB (UME) 9*64kB (UME) 6*128kB (UME) 2*256kB (UM) 11*512kB (UME) 1*1024kB (U) 2*2048kB (UM) 407*4096kB (M) = 1686944kB [ 91.818934][ T5365] CPU: 1 PID: 5365 Comm: syz.4.56 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 91.828903][ T5365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 91.839003][ T5365] Call Trace: [ 91.842320][ T5365] [ 91.845276][ T5365] dump_stack_lvl+0x241/0x360 [ 91.849971][ T5365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.855177][ T5365] ? __pfx__printk+0x10/0x10 [ 91.859776][ T5365] ? __pfx_lock_release+0x10/0x10 [ 91.864814][ T5365] should_fail_ex+0x3b0/0x4e0 [ 91.869513][ T5365] _copy_from_user+0x2f/0xe0 [ 91.874113][ T5365] copy_msghdr_from_user+0xae/0x680 [ 91.879326][ T5365] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 91.885152][ T5365] __sys_sendmsg+0x23d/0x3a0 [ 91.889758][ T5365] ? __pfx___sys_sendmsg+0x10/0x10 [ 91.894879][ T5365] ? vfs_write+0x7c4/0xc90 [ 91.899342][ T5365] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 91.905681][ T5365] ? do_syscall_64+0x100/0x230 [ 91.910461][ T5365] ? do_syscall_64+0xb6/0x230 [ 91.915149][ T5365] do_syscall_64+0xf3/0x230 [ 91.919683][ T5365] ? clear_bhb_loop+0x35/0x90 [ 91.924377][ T5365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.930279][ T5365] RIP: 0033:0x7f7726f75bd9 [ 91.934720][ T5365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.954331][ T5365] RSP: 002b:00007f7727ccd048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.962756][ T5365] RAX: ffffffffffffffda RBX: 00007f7727103f60 RCX: 00007f7726f75bd9 [ 91.970733][ T5365] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000004 [ 91.978710][ T5365] RBP: 00007f7727ccd0a0 R08: 0000000000000000 R09: 0000000000000000 [ 91.986686][ T5365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.994667][ T5365] R13: 000000000000000b R14: 00007f7727103f60 R15: 00007ffe68d36f58 [ 92.002661][ T5365] [ 92.014852][ T5315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 92.026711][ T5315] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 8*32kB (UM) 2*64kB (U) 1*128kB (U) 3*256kB (UM) 2*512kB (UM) 1*1024kB (U) 3*2048kB (U) 962*4096kB (M) = 3949968kB [ 92.057826][ T5315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.083963][ T5315] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.093592][ T5315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.148775][ T5315] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.162429][ T2413] ================================================================== [ 92.170532][ T2413] BUG: KASAN: slab-use-after-free in l2tp_session_delete+0x28/0x9e0 [ 92.178535][ T2413] Write of size 8 at addr ffff888063084808 by task kworker/u8:7/2413 [ 92.186624][ T2413] [ 92.188965][ T2413] CPU: 0 PID: 2413 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 92.194110][ T5315] 40577 total pagecache pages [ 92.199202][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 92.199222][ T2413] Workqueue: l2tp l2tp_tunnel_del_work [ 92.199250][ T2413] Call Trace: [ 92.199259][ T2413] [ 92.199269][ T2413] dump_stack_lvl+0x241/0x360 [ 92.199297][ T2413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 92.235591][ T2413] ? __pfx__printk+0x10/0x10 [ 92.240212][ T2413] ? _printk+0xd5/0x120 [ 92.244400][ T2413] ? __virt_addr_valid+0x183/0x520 [ 92.245434][ T5315] 0 pages in swap cache [ 92.249533][ T2413] ? __virt_addr_valid+0x183/0x520 [ 92.249571][ T2413] print_report+0x169/0x550 [ 92.249602][ T2413] ? __virt_addr_valid+0x183/0x520 [ 92.268486][ T2413] ? __virt_addr_valid+0x183/0x520 [ 92.273609][ T2413] ? __virt_addr_valid+0x44e/0x520 [ 92.278731][ T2413] ? __phys_addr+0xba/0x170 [ 92.283247][ T2413] ? l2tp_session_delete+0x28/0x9e0 [ 92.288452][ T2413] kasan_report+0x143/0x180 [ 92.292967][ T2413] ? l2tp_session_delete+0x28/0x9e0 [ 92.298192][ T2413] kasan_check_range+0x282/0x290 [ 92.303144][ T2413] l2tp_session_delete+0x28/0x9e0 [ 92.308185][ T2413] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 92.313579][ T2413] l2tp_tunnel_del_work+0x1cb/0x330 [ 92.318790][ T2413] ? process_scheduled_works+0x945/0x1830 [ 92.324513][ T2413] process_scheduled_works+0xa2c/0x1830 [ 92.330084][ T2413] ? __pfx_process_scheduled_works+0x10/0x10 [ 92.336073][ T2413] ? assign_work+0x364/0x3d0 [ 92.340664][ T2413] worker_thread+0x86d/0xd50 [ 92.345262][ T2413] ? __kthread_parkme+0x169/0x1d0 [ 92.350290][ T2413] ? __pfx_worker_thread+0x10/0x10 [ 92.355404][ T2413] kthread+0x2f0/0x390 [ 92.359480][ T2413] ? __pfx_worker_thread+0x10/0x10 [ 92.364598][ T2413] ? __pfx_kthread+0x10/0x10 [ 92.369193][ T2413] ret_from_fork+0x4b/0x80 [ 92.373616][ T2413] ? __pfx_kthread+0x10/0x10 [ 92.378212][ T2413] ret_from_fork_asm+0x1a/0x30 [ 92.382991][ T2413] [ 92.386011][ T2413] [ 92.388329][ T2413] Allocated by task 5364: [ 92.392664][ T2413] kasan_save_track+0x3f/0x80 [ 92.397344][ T2413] __kasan_kmalloc+0x98/0xb0 [ 92.401949][ T2413] __kmalloc_noprof+0x1f9/0x400 [ 92.406809][ T2413] l2tp_session_create+0x3b/0xc20 [ 92.411839][ T2413] pppol2tp_connect+0xca3/0x17a0 [ 92.416788][ T2413] __sys_connect+0x2df/0x310 [ 92.421389][ T2413] __x64_sys_connect+0x7a/0x90 [ 92.426157][ T2413] do_syscall_64+0xf3/0x230 [ 92.430663][ T2413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.436558][ T2413] [ 92.438880][ T2413] Freed by task 16: [ 92.442679][ T2413] kasan_save_track+0x3f/0x80 [ 92.447357][ T2413] kasan_save_free_info+0x40/0x50 [ 92.452390][ T2413] poison_slab_object+0xe0/0x150 [ 92.457330][ T2413] __kasan_slab_free+0x37/0x60 [ 92.462097][ T2413] kfree+0x149/0x360 [ 92.466006][ T2413] __sk_destruct+0x58/0x5f0 [ 92.470521][ T2413] rcu_core+0xafd/0x1830 [ 92.474765][ T2413] handle_softirqs+0x2c4/0x970 [ 92.479526][ T2413] run_ksoftirqd+0xca/0x130 [ 92.484041][ T2413] smpboot_thread_fn+0x544/0xa30 [ 92.488979][ T2413] kthread+0x2f0/0x390 [ 92.493052][ T2413] ret_from_fork+0x4b/0x80 [ 92.497472][ T2413] ret_from_fork_asm+0x1a/0x30 [ 92.502244][ T2413] [ 92.504565][ T2413] Last potentially related work creation: [ 92.510277][ T2413] kasan_save_stack+0x3f/0x60 [ 92.514957][ T2413] __kasan_record_aux_stack+0xac/0xc0 [ 92.520339][ T2413] call_rcu+0x167/0xa70 [ 92.524498][ T2413] pppol2tp_release+0x24b/0x350 [ 92.529350][ T2413] sock_close+0xbc/0x240 [ 92.533588][ T2413] __fput+0x24a/0x8a0 [ 92.537566][ T2413] task_work_run+0x24f/0x310 [ 92.542161][ T2413] syscall_exit_to_user_mode+0x168/0x360 [ 92.547795][ T2413] do_syscall_64+0x100/0x230 [ 92.552384][ T2413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.558285][ T2413] [ 92.560615][ T2413] The buggy address belongs to the object at ffff888063084800 [ 92.560615][ T2413] which belongs to the cache kmalloc-1k of size 1024 [ 92.574669][ T2413] The buggy address is located 8 bytes inside of [ 92.574669][ T2413] freed 1024-byte region [ffff888063084800, ffff888063084c00) [ 92.588377][ T2413] [ 92.590721][ T2413] The buggy address belongs to the physical page: [ 92.597141][ T2413] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x63080 [ 92.605903][ T2413] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 92.614425][ T2413] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 92.621968][ T2413] page_type: 0xffffefff(slab) [ 92.626645][ T2413] raw: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 92.635319][ T2413] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 92.643908][ T2413] head: 00fff00000000040 ffff888015041dc0 dead000000000100 dead000000000122 [ 92.652599][ T2413] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 92.661276][ T2413] head: 00fff00000000003 ffffea00018c2001 ffffffffffffffff 0000000000000000 [ 92.669949][ T2413] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 92.678618][ T2413] page dumped because: kasan: bad access detected [ 92.685037][ T2413] page_owner tracks the page as allocated [ 92.690799][ T2413] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5102, tgid 5102 (syz-executor), ts 82381382036, free_ts 23996519046 [ 92.710095][ T2413] post_alloc_hook+0x1f3/0x230 [ 92.714887][ T2413] get_page_from_freelist+0x2e4c/0x2f10 [ 92.720453][ T2413] __alloc_pages_noprof+0x256/0x6c0 [ 92.725662][ T2413] alloc_slab_page+0x5f/0x120 [ 92.730343][ T2413] allocate_slab+0x5a/0x2f0 [ 92.734854][ T2413] ___slab_alloc+0xcd1/0x14b0 [ 92.739555][ T2413] __slab_alloc+0x58/0xa0 [ 92.743885][ T2413] kmalloc_trace_noprof+0x1d5/0x2c0 [ 92.749097][ T2413] batadv_hard_if_event+0xe71/0x1620 [ 92.754389][ T2413] notifier_call_chain+0x19f/0x3e0 [ 92.759502][ T2413] register_netdevice+0x167f/0x1b00 [ 92.764707][ T2413] nsim_create+0x647/0x890 [ 92.769128][ T2413] __nsim_dev_port_add+0x6c0/0xae0 [ 92.774246][ T2413] nsim_dev_port_add_all+0x33/0xf0 [ 92.779363][ T2413] nsim_drv_probe+0x85f/0xb80 [ 92.784060][ T2413] really_probe+0x2b8/0xad0 [ 92.788568][ T2413] page last free pid 1 tgid 1 stack trace: [ 92.794388][ T2413] free_unref_page+0xd22/0xea0 [ 92.799159][ T2413] free_contig_range+0x9e/0x160 [ 92.804020][ T2413] destroy_args+0x8a/0x890 [ 92.808449][ T2413] debug_vm_pgtable+0x4be/0x550 [ 92.813319][ T2413] do_one_initcall+0x248/0x880 [ 92.818098][ T2413] do_initcall_level+0x157/0x210 [ 92.823134][ T2413] do_initcalls+0x3f/0x80 [ 92.827496][ T2413] kernel_init_freeable+0x435/0x5d0 [ 92.832704][ T2413] kernel_init+0x1d/0x2b0 [ 92.837041][ T2413] ret_from_fork+0x4b/0x80 [ 92.841467][ T2413] ret_from_fork_asm+0x1a/0x30 [ 92.846241][ T2413] [ 92.848560][ T2413] Memory state around the buggy address: [ 92.854186][ T2413] ffff888063084700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.862247][ T2413] ffff888063084780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 92.870310][ T2413] >ffff888063084800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.878370][ T2413] ^ [ 92.882691][ T2413] ffff888063084880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.890753][ T2413] ffff888063084900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 92.898810][ T2413] ================================================================== [ 92.963295][ T5315] Free swap = 124996kB [ 92.973386][ T5315] Total swap = 124996kB [ 92.978282][ T5315] 2097051 pages RAM [ 92.982126][ T5315] 0 pages HighMem/MovableOnly [ 92.986819][ T5315] 400874 pages reserved [ 92.991689][ T5315] 0 pages cma reserved [ 93.050965][ T2413] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 93.058231][ T2413] CPU: 1 PID: 2413 Comm: kworker/u8:7 Not tainted 6.10.0-rc6-syzkaller-01259-g3abbd7ed8b76 #0 [ 93.068502][ T2413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 93.078584][ T2413] Workqueue: l2tp l2tp_tunnel_del_work [ 93.084104][ T2413] Call Trace: [ 93.087409][ T2413] [ 93.090365][ T2413] dump_stack_lvl+0x241/0x360 [ 93.095087][ T2413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 93.100319][ T2413] ? __pfx__printk+0x10/0x10 [ 93.104945][ T2413] ? preempt_schedule+0xe1/0xf0 [ 93.109834][ T2413] ? vscnprintf+0x5d/0x90 [ 93.114204][ T2413] panic+0x349/0x860 [ 93.118141][ T2413] ? check_panic_on_warn+0x21/0xb0 [ 93.123294][ T2413] ? __pfx_panic+0x10/0x10 [ 93.127755][ T2413] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 93.133771][ T2413] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 93.140137][ T2413] ? print_report+0x502/0x550 [ 93.144859][ T2413] check_panic_on_warn+0x86/0xb0 [ 93.149836][ T2413] ? l2tp_session_delete+0x28/0x9e0 [ 93.155068][ T2413] end_report+0x77/0x160 [ 93.159354][ T2413] kasan_report+0x154/0x180 [ 93.163898][ T2413] ? l2tp_session_delete+0x28/0x9e0 [ 93.169264][ T2413] kasan_check_range+0x282/0x290 [ 93.174329][ T2413] l2tp_session_delete+0x28/0x9e0 [ 93.179381][ T2413] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 93.184781][ T2413] l2tp_tunnel_del_work+0x1cb/0x330 [ 93.190016][ T2413] ? process_scheduled_works+0x945/0x1830 [ 93.195768][ T2413] process_scheduled_works+0xa2c/0x1830 [ 93.201360][ T2413] ? __pfx_process_scheduled_works+0x10/0x10 [ 93.207372][ T2413] ? assign_work+0x364/0x3d0 [ 93.211992][ T2413] worker_thread+0x86d/0xd50 [ 93.216617][ T2413] ? __kthread_parkme+0x169/0x1d0 [ 93.221676][ T2413] ? __pfx_worker_thread+0x10/0x10 [ 93.226821][ T2413] kthread+0x2f0/0x390 [ 93.230927][ T2413] ? __pfx_worker_thread+0x10/0x10 [ 93.236078][ T2413] ? __pfx_kthread+0x10/0x10 [ 93.240708][ T2413] ret_from_fork+0x4b/0x80 [ 93.245164][ T2413] ? __pfx_kthread+0x10/0x10 [ 93.249789][ T2413] ret_from_fork_asm+0x1a/0x30 [ 93.254616][ T2413] [ 93.258068][ T2413] Kernel Offset: disabled [ 93.262400][ T2413] Rebooting in 86400 seconds..