last executing test programs: 4.380379695s ago: executing program 2 (id=205): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000009c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000440)=""/37}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r3, 0xfff, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="5a5e08ea2ac466f9de5b778cff964c2866aaf60a6e0d5875514cd9cdde60eaa7a40ec6c531590991eef3d6f7d98011c914873debb6e6155ccfd6658db1d55ccb863c95821dbb3e4509d39b7c4180b371bb618921ac0f8e53d49de5857a8c5c053fe1bb12cb527e9773a05380f5a5bc4e435fcf4339c111e58ea0835840e0a0c4f6d895d232235ddd5bdbeff06a11199892fbb1ceeb6a33787c7f498d44f72cb8c89845b8b20a9f72a4e36b4439942062e1483bc7f31f5ea044f9228818e029021170d5a355b6895159afba83fc59a2f798a963ec45", 0xd5}, {&(0x7f0000000840)="682118136c30a25e5f380b59fe76f0b348172d387deade0332222e2e8eb56563a3356a316d532c6a5a122ac47eb8e45e9daaa9b77c61318d466362d376c6addb91dac9110fa944350859ae93522871e2c89aefc5e9b023b827fc49c96139d634437b674bea7400218a5d89fe528f2488554f43acecbbf788348cf9a7e3394bb65b3efc56724bfcf70a28ed00e3ee98", 0x8f}, {&(0x7f0000000900)="b83e388dd410831170b38c9034a2a15fc823339dc6e91dbef925ccc04adf26e28765d6dcd5469ca975a57f4037b8062a7cfd5a43e48dc85502fa0c988d05da02d9deee56b1b72bc942032cc062c86370385cace95eae3586a8be04342fc9665585d89f3fa67152dc2556155e1f96516d778aa30b979d1a11e1977bffda9f", 0x7e}, {&(0x7f0000000a00)="bafb5a2b210774e9faa55b95948d3660becc1688d49773665614c7bcdbe02c1952e3149f95f6fbb40d420e2d3fd32fa02082a0878250231918e9bcd5de897ef89b04f9", 0x43}, {&(0x7f0000000980)="a4d989fe64c02a67764d", 0xa}], 0x5, &(0x7f0000000b00)=[{0xe0, 0x108, 0x87, "facd7edf5407c31a7c207e8f383222020d1b074ac4e2b3f8f2f2853eb0d8b5f28a24bd1c4206661881635230c865f64d685fe246539a42dd1b02a27f672c7b22719237bbdbb1a004d356f5a325d790fb3e52eb1271586458e7bbae53dcb3fa86ddedb8bccd0639d8e355cfa97d127f665edf1dcf12c4837d48da77cc13e2bd082c869f0cb8a1e7f6978d4da5b8870a47f649cf78d479a4763902b1f04d100063860f1c9ebc668884455913fb4968e30a38fc8294a0e3d411145b9e88c7dacd2156c29f15514fc7b6d2069a0dea44f4c1"}, {0xa8, 0x16, 0x200, "b82c0373c82fda4020784c3e00a19265cca758531316fdd700ee18084194afcad67c7b0a0d3c61ffdc26af6cee89016820ab4aae1aeedefad863edd6dccbb98a7d39d70a4515cc69b9331a42b27f0399ce01514a5f14acd38bc31290ffe612521006ff7b968ba77d3c78b4aaa7e26e5b0638dc660f290326e51a2b7b26d3a82b0ee29ba5e55dffcbf5fa0937f1f6dd4f38b5b3d72f27d8c7"}, {0x48, 0x1, 0x1ff, "d46aac6fb542862c602466f5d660e01c644d9784de6a91accc25a5bf71221a1cb943e8a9543a7c60e053012c85bb8a7f51"}, {0x50, 0x7, 0x9, "1b01512a4a067e02acfec386d57075d63bc9d7509a799af55a0bc53d1f11029a6486871b1eb3b675a350c91d85a9c65640fb185e4a435c8dbff8c960c8fc10a3"}, {0x28, 0x6, 0x3ff, "7e749276c69802909907dbe57dc04040aacf"}], 0x248}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r6) 4.183337916s ago: executing program 2 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000008500000007"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 4.031810988s ago: executing program 2 (id=210): r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x240000a0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'batadv0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x74}}, 0x18c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000980)="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", 0x20e}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) 3.510215542s ago: executing program 1 (id=214): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0020000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"/704], 0x2e0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) listen(r10, 0x0) accept4(r10, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.33988817s ago: executing program 3 (id=216): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r1, r0, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0020000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"/704], 0x2e0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r8}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r9 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x27}, 0x62) listen(r9, 0x0) accept4(r9, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 3.16005913s ago: executing program 3 (id=217): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001740)='memory.events\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x68, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a9fcc9639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x0, 0xe}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x40000001}) syz_emit_ethernet(0x507, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x4d1, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x9, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8bedb8ecd2"}, {0x0, 0x2, "d429145c793e823829b4376332b2c98aee"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpid() sendmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x2a, &(0x7f0000000100)=r8, 0x4) recvmsg$unix(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x11060) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000240), 0x3af4701e) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000340)={{r0}, "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"}) 2.61246349s ago: executing program 3 (id=219): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x0, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 2.576137861s ago: executing program 1 (id=220): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 2.432161993s ago: executing program 1 (id=223): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x52}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) 2.352513618s ago: executing program 3 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x207ffc, 0x92, 0x1}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x10001, 0x0, r0, 0xb, '\x00', r5, 0xffffffffffffffff, 0x400, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f0000000640), 0x0}, 0x20) 2.174264237s ago: executing program 1 (id=226): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000009c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000440)=""/37}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r3, 0xfff, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="5a5e08ea2ac466f9de5b778cff964c2866aaf60a6e0d5875514cd9cdde60eaa7a40ec6c531590991eef3d6f7d98011c914873debb6e6155ccfd6658db1d55ccb863c95821dbb3e4509d39b7c4180b371bb618921ac0f8e53d49de5857a8c5c053fe1bb12cb527e9773a05380f5a5bc4e435fcf4339c111e58ea0835840e0a0c4f6d895d232235ddd5bdbeff06a11199892fbb1ceeb6a33787c7f498d44f72cb8c89845b8b20a9f72a4e36b4439942062e1483bc7f31f5ea044f9228818e029021170d5a355b6895159afba83fc59a2f798a963ec45", 0xd5}, {&(0x7f0000000840)="682118136c30a25e5f380b59fe76f0b348172d387deade0332222e2e8eb56563a3356a316d532c6a5a122ac47eb8e45e9daaa9b77c61318d466362d376c6addb91dac9110fa944350859ae93522871e2c89aefc5e9b023b827fc49c96139d634437b674bea7400218a5d89fe528f2488554f43acecbbf788348cf9a7e3394bb65b3efc56724bfcf70a28ed00e3ee98", 0x8f}, {&(0x7f0000000900)="b83e388dd410831170b38c9034a2a15fc823339dc6e91dbef925ccc04adf26e28765d6dcd5469ca975a57f4037b8062a7cfd5a43e48dc85502fa0c988d05da02d9deee56b1b72bc942032cc062c86370385cace95eae3586a8be04342fc9665585d89f3fa67152dc2556155e1f96516d778aa30b979d1a11e1977bffda9f", 0x7e}, {&(0x7f0000000a00)="bafb5a2b210774e9faa55b95948d3660becc1688d49773665614c7bcdbe02c1952e3149f95f6fbb40d420e2d3fd32fa02082a0878250231918e9bcd5de897ef89b04f9", 0x43}, {&(0x7f0000000980)="a4d989fe64c02a67764d", 0xa}], 0x5, &(0x7f0000000b00)=[{0xe0, 0x108, 0x87, "facd7edf5407c31a7c207e8f383222020d1b074ac4e2b3f8f2f2853eb0d8b5f28a24bd1c4206661881635230c865f64d685fe246539a42dd1b02a27f672c7b22719237bbdbb1a004d356f5a325d790fb3e52eb1271586458e7bbae53dcb3fa86ddedb8bccd0639d8e355cfa97d127f665edf1dcf12c4837d48da77cc13e2bd082c869f0cb8a1e7f6978d4da5b8870a47f649cf78d479a4763902b1f04d100063860f1c9ebc668884455913fb4968e30a38fc8294a0e3d411145b9e88c7dacd2156c29f15514fc7b6d2069a0dea44f4c1"}, {0xa8, 0x16, 0x200, "b82c0373c82fda4020784c3e00a19265cca758531316fdd700ee18084194afcad67c7b0a0d3c61ffdc26af6cee89016820ab4aae1aeedefad863edd6dccbb98a7d39d70a4515cc69b9331a42b27f0399ce01514a5f14acd38bc31290ffe612521006ff7b968ba77d3c78b4aaa7e26e5b0638dc660f290326e51a2b7b26d3a82b0ee29ba5e55dffcbf5fa0937f1f6dd4f38b5b3d72f27d8c7"}, {0x48, 0x1, 0x1ff, "d46aac6fb542862c602466f5d660e01c644d9784de6a91accc25a5bf71221a1cb943e8a9543a7c60e053012c85bb8a7f51"}, {0x50, 0x7, 0x9, "1b01512a4a067e02acfec386d57075d63bc9d7509a799af55a0bc53d1f11029a6486871b1eb3b675a350c91d85a9c65640fb185e4a435c8dbff8c960c8fc10a3"}, {0x28, 0x6, 0x3ff, "7e749276c69802909907dbe57dc04040aacf"}], 0x248}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r6) 1.997482486s ago: executing program 3 (id=228): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x1ad, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x177, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {0x0, 0x3, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296"}, {}, {0x0, 0x1a, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e72"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x11060) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000340)={{}, "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"}) 1.937330415s ago: executing program 1 (id=229): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x192, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x15c, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {}, {}, {0x0, 0x1a, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e72"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x11060) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, &(0x7f0000000340)={{}, "7d98fda4f5d891597fe1af4491a31813729403613108992a15d101a9aa5cebe3ac81f706480994bd8f46dc04afa8c2fb1c0c80d0bd31a3b2132babdb963acafc84379bd5ae776663b5fcb43155265eb40afae1a5089d59b64ef428a5eda427f2ad54cbbcee679a7d857342edaedefd72e7fbaded96a959a04e32eeb4ed934c73b8bd27ce7ce12967d16c0b2fe5c20a0e9dd652538f76e5d87e6f8bb77dce64d8890228f0b244ed947c1ac51ebce9aa3b9f6f68282e7d1d8b1d3bf6700922541cf3feac146628a3df3c1e62f932fd953721d298dcd92093e965057dc0bd40db77546125d1f4acc87509487f08b2687d1c39fea849c16f0696f524775484318b696e9d9716100f2249f89ea653c3765f26ebf676db97c5de2e649c034c82a875ad961587ef86907d0d5ef5eba0c5c317be7cd83b475eb9955eb152fa759ec4dd4cb15fe25bb658935e07f068f5e7d57b6648817ff543b430f6801cbcf1284f579ce818222a08d29002bc9bfa2d321f67c3ea896cd329316bab7bad9ec54babd4aea4c0a51062ca68497aa9bd066b28f50d076a3276b9be727f03bbae733480c77f855f2ae2c64380b3779cc1409bda3dd86ef29573a60801a339b3b0f4b39ac865eb06f5bd8496530436db16db1f2649a12ae4ccef9dce2b007593bf6cb980ecb4d28929ee65c44eff125cea22f70a3a3c447eb3d84e9a0b8c96458d6739eeed99dbe85037ffe2843e0d7758ee908c181b63ebb763ca2460addc66866d5777a9e218911c2cbbd8d7c895d90a805ddc0a6258789c19ca0681c0a42e164496590c4883539d4c69ce00a8e39ae9080b432033361e3918903182df46bfd9b929ce69f8ff452674cdd50eafd730604d944062c930eb7a5333a1fca5d4be44a58a1e031444e28fb5dcbeeefaf157b24d6e0da7f0bb24916241067d7b742685544036247a45a340e1ee2022277cb7ec04999235d2796704337f1ffacea79f42afe4c3cceb2c3aaf83da408586177ca05ed2b10db06199f48b66de37a136248f036f6c99015f52b249d0c736fc6d80c3a42ec38e8a8b24ddb9644a9dcd6f9e1468f15ce3c33f6d6e651d3b2e88a65b644a51e42a8d0943107eb51c6da27a03e76210e4a80c1910ff1e8c6e039dcc3f5fb86bedaecab4b16ef54d4fc23dcd1299c7c138545fc37d4991c5927b8a092337c9ac147646462b9c5ebb6f65f5cc5aee6e3997ac8ed1ce354a27b37b7b7eec139d2f88f554ef7520bd39ac03724cdb7ce2f60aedf9deb7db00e4b0ae5a9abf5e0968a1dc7fec8029ee6e711da04deccc51124b5a594f9d8047bbd564846cdd1b6d2abc9d6cfbc49883961e16a34338a91454f02e1dea9b920c050f22b669a2cd75ce4b86b774980dd9b545ec0134b641eb09a65fb17106aa5756ce27b24bf42bfb2c6579a16c91c96c0842473ab71cf3f725f54214e9b507a3fce4fe146a30deaf422e3452b6d4e0146e1fdf683b575017e51a491694fe0195150821a47d90df07885a86d3f1e6ff9cedb76f78308bab183958a18153de9fd3ba9b4ed59ab83590d2fb7599dd7656972bd11e11cf978b71b89aad512e96629c413fae726c25487ffa52b2107a8932006e876057e104596b15d96b0de60ba1dc951175984b565cd9bf006c46717bd1a60665715289b103f56274e960d28acc92bd6e1a003a36f4d894337f917788b611793eb4aa444696443b93b49cb221396658a4ceeed4a4863e55b7b95f0965efc5ad02b5f674ae475794d25fcb99044eea97a340de58e703aff9b1961bd60269ec5dd34a9cd8d0486b3251dfbf45ac72b78d2b6ac4f1a4208d8a5ac7bc7beee987c3f6b3a6b3ade0c2720f19618c6558bb55f4a6f7e4dbb522c8f2cbabaf898967734da957c80d944e73225ce526a430cf6424b3dcf9f430d9dbc8e22da63097031e5769bd73ae2027ecb5beb4074bdc73d35a59c56d33e1dc55e228b7953f1518b9aee1287654875963a35ecc2079a7be6e71242c9740bdc559c4a320be5401ef2b584e43abe51e1d12145f30c3bb0c963882ef7a76c17ab009d8ba2f8b6fe888022263e65a28a42e6f41c15160add3ddc4f4b9329758e3c6cd30e8a311d2de72135c171aca50877c4843b09817e565d3765b5d50b6d3b7b0f870514c4bc3f2bc5cb4448dca253916fb530ae6b9574924c1c257b679f43d7228cfbdda83de2f09d6a3ceaefc9ab9747db977b2580dfaee96e5ad1d498022ae0df8c68efa993e0d0141f5dbad25c7bfc928a43cb159e0e0369afff54bf409c0b3edc4c877ef103812ab5e6bf8eceb55cf1edccce2add494e81d6bd3ee515d625521087589e75f4a93b3c2941cbd4bc7f69ff8bdb596d42a20da525fb9565c0fb4ea774fb31f169475ddea55b84258f61dfa45f7fe5d27bc8a7a2de9fbe176f11887ae3ca71a5238685793bf110132334bb729e8c6ee0c29c8b095d00ca3a89f8022513bda92ad4165254c9a37f1c3f9a0393dceafb2ae748488f56371262a477db5892213e88b6c39e7aee601bac91a24e2d024d61856af2a76b47ec4bffdce497ae5826f6f69c362766d9cfc10397806dc6b70fbbd4488ada492a35282d80f2b3718801748d3a7f04bdc22cb91d8b6816dc35f924884d6b1411f4ec3b1d5c07060447b3e1b453eb38036d8c594603b1193ac0974eaa79d637d6f4f0f197a75af97da58bacc34978a9bc41f80ce13d0726f8394dae2a3b53e39aaa670d1e014b9c14aa8463ffd4777ca321b6d4da5cf3210d09df3e3ef7ab928bae449e81b34beff28eb2896614613f338a0971b0863a7d73cb588838e2692c11d00f2f3de8715746ebe28db06c6d8aad90b2493fd0b42dfef71b582501cb38a52e3daf4b61cbd4459fb22b1a2daccd3cba14890443c5bdde64ddd207fc4ee286224a77c6bd3f2de125c93bfa058d28e5d0fa769ed6d0f0acb452f424c2eb81ba804f4e0d707a8ee807c42da2f58e4c4bf5cf3daff2152dccf2f667d1b49034d9c92f68241d027d2b90f228404e08af5cfea73fcc7d0147b46fdd2883f06000b37b0cd0307880bcf6d30e7a3f37e41322b6ceac98df72e27493266b5bacb7d38b80d9fa27d21c838fd7e2e18efa4f7341457cc3790a93d5efefb01261f34e177bf7e10760d59bdf6d8478d041c01261794b3d1353eeb539bcc0a99fd2a49637fc726f1f57e5e85af4cc69de8ce21d9545639be3ebad5260e312455fc0527a02b09926180a3b1f6b92fa291cb17c5f99ee00a2533ebd317033b58594a6d2c54f9bcc682be825dc40a1a8d673059e71b82e77326daafb68b1cc7d84ba0e96909675f69b24f086e906146a6d7dd84b25304b6e0f5b8d97740e6bc302ff14eb3e0d92731831e217cd6dcffe318f1ea5531b1349d4cbf9c65b3f8f78f2878342f563f7494a971ca104bf9fdb66c3c4ba27d6da733c0067c0d65763f69ed2c2ca022d3d57eefc3d8b92f47a8617a395dab17595a849e7759fe8e8c988fc6b2eea1e51682d709a1f7010981d93c164764d3b51850851270b21fec6aff4c3134a2807e9666a4cc4baaee822df387d6ce94b5e5279e47f505c5f0ce084427a8409d0c5b83fbc70b9e53749770b6776452437df1d34777df0650d5c1c65723868146d0eeb48229f34167a9d33fef64eeba9080208c9953e28b22293401c0a211f556eca83983da670461c52af9dbefb35266c213e27283fcb05b4b4d7fd3fb2827f9373ca5e890d4acd497bb99e2dee1d1cc1b86ac7b70c2c75a7d59bd29dd0497b5d97d93d6dc19b7938f44c5548a4fc9d106beb34f1cfd97dfda1b173e2df9b96a03be25729c14970e25fbe5f382431d841065e230c958eee42b95ff760edf968360f9b3eb5106e04880d1489cbb14cb927997b500f6d4d0710c7c507eacc4564e65deecc81d8819f8bdee599be7f025b2e3b2aa03516d5a43d915cc605a3c919a11ed9e353eea73278e28cb86723f98e4944170dbc7fe9c4790d2956cb89e838725f5b15157eded600ecb9a0ee427a3826ce78267535e312cba45a04a88611804f400e8b38b4860eaa7d981c75d8ae0173040ff73411921da87d45b1e30ecb97907ed1c75d4049f6152057d2264c73fedf3d51cb00ec4bf7fec9af6f13b294efe20144273fe2f44241f87744b910d5d7ed15b6507fcb6c96e1eac0c9ea02b3832da6d1d1c026b06056f3b62bd160a7d6bbd0874066754ed0e4e0bb815237392d164ea8c14b4e77a6bbb0794e28f00c9ebb5122d513811a345fc78c8d7c43448fbe9b90b49aa689ee0bc057a06ebe80ff9cbd28620882404275d342dc289131cc5d5b78828f21445137220be2edb94993db16a4822d4b64372b61ac15b4d252e39caabc347e468f69d5111acd1830003563c3d453664c7a00c4c78cbe64019ca2301034e26349e091fafe839272157f6cee91b9e2fa8910e50b8b01da8709e28ec72b33cc67ee06c9671f88ad382832f376ada349454db557523185ca0a8e50d10dba85846a34f2b69532c895be0f6b9cf1fadae965589516e592147165c866449270bde406e00188f981787fc52f291fa45bde0a119b2c75153ee0e5ee63e04b4a863f005da142984c9e8ed96f7f440ad571165fcd77b42f7c5793071e626b6a26948e80a6befa4338ac1cd53278e054fb99c082846414779fcd344a700a45313b8f144223420322a224327b006a6982d2bb8e85281e1f971a97197cd0d7218fa3665569929b4ffc443feb77c7018b8a7d180acba1cb5da021aa1905995da4e6835290662bf7ec05dfaa514b3d765ccaed6ac069f938ee1e2357c499363b3f107bb8850dc191cb99c79843690e80883bc2ee28f03c51b27fc6907644371060b552c1c2c8c81423b6340bd2740c84b687af75e10aba5d47ce6aef37612bdf9fbadd007603adfb574f948dbe9a5a13c9e948a277e205990da9f63f436b8e80c6b98e86232b5a6b9131956d1107325252cf88ac514fec99a93151fc0da29c046f360c19a84632c1ca0627f39c4c27f44a588fece50e4c1345ec2df96606d7f5fc0e0bdd7b90a944d47b6b45e915bb27d10111b2df7ac76222e8135da594a249877fd18b7cd9c39fb4cb5783d5426cdd75ecd0c64b68eabcdf9fb3c0cd67cb0b914a160ddc95622bb95960894a87b42a5d31a3abb4a8f87c4a51e9228689dc6f42ba2665ed5f8b3d9a15403f3aa2427fdf0a37203ab24935d8e6fb63adf83b616424d68f12a746cbbb9790e15d8e743745d479372529054214e87dc0ca3675a926f6a7d4584444aaff42ccfe71a9869b3c7e5c96e3709cbed062ca966845944c9291048c6edfd00c5264c97eec8b83c1843d6731cf68790fb2e3632b271b958323607a0e20cb74ef504e641a81cba207915120e7031d9ed7d8afa83c7502148e48dcd93dd0fbee5d9c3f7da6793b25f1059059d9d78d3bc5b9e9ba5c2bc7799b732b9750b32d2c09fa7f86a2371503f6445cf0e7eb4a4187cf3122ea9af3b4d8379c716f46e217e4f0084bc0960fd0ab608cd3e680510986a34926a4d3ca82095b88b0b7fdd7eafbaeec762bad86f445f22565a4eb157daad4a4ac59ac0b8973ff72608c99dd4d99221d26e6eb6509c6ebd14cd14ac462946bed31a9e6f6ec192dc927199d4110e157f492df0bf7bcc2640451683e418d22c9229a8187a7e4b5abb826d1a4b502685897fb0dff76c62c78657f2d8cab21828c28f53fc3139bf476d70f29fa978c9cc5e6ff359f33905c1ad2d66b08eb18ccbdcb2d9b8bad9b41b27e51a6faa108f6176d3d56c6df15ee77818f411fd684e"}) 1.232495346s ago: executing program 4 (id=232): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000009c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000440)=""/37}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r3, 0xfff, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="5a5e08ea2ac466f9de5b778cff964c2866aaf60a6e0d5875514cd9cdde60eaa7a40ec6c531590991eef3d6f7d98011c914873debb6e6155ccfd6658db1d55ccb863c95821dbb3e4509d39b7c4180b371bb618921ac0f8e53d49de5857a8c5c053fe1bb12cb527e9773a05380f5a5bc4e435fcf4339c111e58ea0835840e0a0c4f6d895d232235ddd5bdbeff06a11199892fbb1ceeb6a33787c7f498d44f72cb8c89845b8b20a9f72a4e36b4439942062e1483bc7f31f5ea044f9228818e029021170d5a355b6895159afba83fc59a2f798a963ec45deb6", 0xd7}, {&(0x7f0000000840)="682118136c30a25e5f380b59fe76f0b348172d387deade0332222e2e8eb56563a3356a316d532c6a5a122ac47eb8e45e9daaa9b77c61318d466362d376c6addb91dac9110fa944350859ae93522871e2c89aefc5e9b023b827fc49c96139d634437b674bea7400218a5d89fe528f2488554f43acecbbf788348cf9a7e3394bb65b3efc56724bfcf70a28ed00e3ee98", 0x8f}, {&(0x7f0000000900)="b83e388dd410831170b38c9034a2a15fc823339dc6e91dbef925ccc04adf26e28765d6dcd5469ca975a57f4037b8062a7cfd5a43e48dc85502fa0c988d05da02d9deee56b1b72bc942032cc062c86370385cace95eae3586a8be04342fc9665585d89f3fa67152dc2556155e1f96516d778aa30b979d1a11e1977bffda9f", 0x7e}, {&(0x7f0000000a00)="bafb5a2b210774e9faa55b95948d3660becc1688d49773665614c7bcdbe02c1952e3149f95f6fbb40d420e2d3fd32fa02082a0878250231918e9bcd5de897ef89b04f9", 0x43}, {&(0x7f0000000980)="a4d989fe64c02a67764d", 0xa}], 0x5, &(0x7f0000000b00)=[{0xe0, 0x108, 0x87, "facd7edf5407c31a7c207e8f383222020d1b074ac4e2b3f8f2f2853eb0d8b5f28a24bd1c4206661881635230c865f64d685fe246539a42dd1b02a27f672c7b22719237bbdbb1a004d356f5a325d790fb3e52eb1271586458e7bbae53dcb3fa86ddedb8bccd0639d8e355cfa97d127f665edf1dcf12c4837d48da77cc13e2bd082c869f0cb8a1e7f6978d4da5b8870a47f649cf78d479a4763902b1f04d100063860f1c9ebc668884455913fb4968e30a38fc8294a0e3d411145b9e88c7dacd2156c29f15514fc7b6d2069a0dea44f4c1"}, {0xa8, 0x16, 0x200, "b82c0373c82fda4020784c3e00a19265cca758531316fdd700ee18084194afcad67c7b0a0d3c61ffdc26af6cee89016820ab4aae1aeedefad863edd6dccbb98a7d39d70a4515cc69b9331a42b27f0399ce01514a5f14acd38bc31290ffe612521006ff7b968ba77d3c78b4aaa7e26e5b0638dc660f290326e51a2b7b26d3a82b0ee29ba5e55dffcbf5fa0937f1f6dd4f38b5b3d72f27d8c7"}, {0x48, 0x1, 0x1ff, "d46aac6fb542862c602466f5d660e01c644d9784de6a91accc25a5bf71221a1cb943e8a9543a7c60e053012c85bb8a7f51"}, {0x50, 0x7, 0x9, "1b01512a4a067e02acfec386d57075d63bc9d7509a799af55a0bc53d1f11029a6486871b1eb3b675a350c91d85a9c65640fb185e4a435c8dbff8c960c8fc10a3"}, {0x28, 0x6, 0x3ff, "7e749276c69802909907dbe57dc04040aacf"}], 0x248}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r6) 1.138830523s ago: executing program 0 (id=233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 1.026012481s ago: executing program 4 (id=234): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 999.042253ms ago: executing program 3 (id=235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000d200850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f9ffffff8500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000018000100000000000000000002000000000000050000000006001500020000000c0016d82bfffaaa80080006"], 0x30}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000100)={0xffffffff, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2}) ioctl$NS_GET_PARENT(r3, 0xb702, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000006bc28ed34d0a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000006e617400140004800800014000000001080002400000000014000000030a00000000000000000000000000001400000011000100"/164], 0xa4}}, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0xd, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst={0x4}, @ldst={0x2, 0x0, 0x3}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xa0, &(0x7f0000000440)=""/160, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000200), &(0x7f0000000380)='%ps \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x201, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f0000002bc0)='workqueue_activate_work\x00', r7}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a80258c6394f90324fc60100005000a000200053582c137153e3705000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r9, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x3) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_all\x00', 0x275a, 0x0) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_ADDRFORM(r11, 0x29, 0x2, &(0x7f0000000000), 0x4) r12 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r12, 0x10d, 0xd, &(0x7f0000000000)=r10, 0x4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000008c0)=@mangle={'mangle\x00', 0x44, 0x6, 0x3f0, 0x2b8, 0x188, 0x2b8, 0x0, 0x2b8, 0x358, 0x358, 0x358, 0x358, 0x358, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'veth0_to_batadv\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@unspec=@addrtype1={{0x28}}]}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@TOS={0x28}}, {{@ip={@empty, @private, 0x0, 0x0, 'ip6tnl0\x00', 'team_slave_0\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000003080103000000be0000000000060000080900010073797a3000000008140004800800084000000009080005400000007f"], 0x34}, 0x1, 0x0, 0x0, 0x830}, 0x801) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x41009432, &(0x7f00000000c0)) 916.65554ms ago: executing program 0 (id=236): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x52}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) 916.269637ms ago: executing program 4 (id=237): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$inet6(0xa, 0x80003, 0x6b) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1501000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r4, 0x40, 0x52}, [@NDA_VLAN={0x6, 0x5, 0x1}]}, 0x24}}, 0x0) 914.784631ms ago: executing program 1 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r2, 0x4000000, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) 874.7821ms ago: executing program 2 (id=239): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000000)) 751.693859ms ago: executing program 2 (id=240): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x3}]}}}]}, 0x3c}}, 0x0) 538.842125ms ago: executing program 2 (id=241): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0020000", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"/704], 0x2e0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) listen(r10, 0x0) accept4(r10, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 538.048793ms ago: executing program 0 (id=242): r0 = socket(0x10, 0x803, 0x0) recvmmsg(r0, 0x0, 0x0, 0x5000000, &(0x7f0000003700)={0x77359400}) 399.78375ms ago: executing program 4 (id=244): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x68, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x4c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a9fcc9639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x0, 0x0, 0xe}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x68}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) syz_emit_ethernet(0x4bc, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x486, 0x3a, 0x0, @dev, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xe, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d983b10420fa979a3"}, {0x0, 0x1, "d429145c793e823829"}, {0x0, 0x7e, "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"}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100), 0x4) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x11060) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 384.657471ms ago: executing program 0 (id=245): socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, 0x0, &(0x7f00000009c0)) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x4, &(0x7f0000000340)=@framed={{}, [@generic={0x61, 0x0, 0x4}]}, &(0x7f0000000400)='syzkaller\x00', 0x6, 0x25, &(0x7f0000000440)=""/37}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt(r3, 0xfff, 0x6, 0x0, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000300)=0x20, 0xffffffffffffffd1) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[], 0x6) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x10) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000d80)={&(0x7f00000006c0)=@qipcrtr={0x2a, 0x0, 0x3fff}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)="5a5e08ea2ac466f9de5b778cff964c2866aaf60a6e0d5875514cd9cdde60eaa7a40ec6c531590991eef3d6f7d98011c914873debb6e6155ccfd6658db1d55ccb863c95821dbb3e4509d39b7c4180b371bb618921ac0f8e53d49de5857a8c5c053fe1bb12cb527e9773a05380f5a5bc4e435fcf4339c111e58ea0835840e0a0c4f6d895d232235ddd5bdbeff06a11199892fbb1ceeb6a33787c7f498d44f72cb8c89845b8b20a9f72a4e36b4439942062e1483bc7f31f5ea044f9228818e029021170d5a355b6895159afba83fc59a2f798a963ec45deb6", 0xd7}, {&(0x7f0000000840)="682118136c30a25e5f380b59fe76f0b348172d387deade0332222e2e8eb56563a3356a316d532c6a5a122ac47eb8e45e9daaa9b77c61318d466362d376c6addb91dac9110fa944350859ae93522871e2c89aefc5e9b023b827fc49c96139d634437b674bea7400218a5d89fe528f2488554f43acecbbf788348cf9a7e3394bb65b3efc56724bfcf70a28ed00e3ee98", 0x8f}, {&(0x7f0000000900)="b83e388dd410831170b38c9034a2a15fc823339dc6e91dbef925ccc04adf26e28765d6dcd5469ca975a57f4037b8062a7cfd5a43e48dc85502fa0c988d05da02d9deee56b1b72bc942032cc062c86370385cace95eae3586a8be04342fc9665585d89f3fa67152dc2556155e1f96516d778aa30b979d1a11e1977bffda9f", 0x7e}, {&(0x7f0000000a00)="bafb5a2b210774e9faa55b95948d3660becc1688d49773665614c7bcdbe02c1952e3149f95f6fbb40d420e2d3fd32fa02082a0878250231918e9bcd5de897ef89b04f9", 0x43}, {&(0x7f0000000980)="a4d989fe64c02a67764d", 0xa}], 0x5, &(0x7f0000000b00)=[{0xe0, 0x108, 0x87, "facd7edf5407c31a7c207e8f383222020d1b074ac4e2b3f8f2f2853eb0d8b5f28a24bd1c4206661881635230c865f64d685fe246539a42dd1b02a27f672c7b22719237bbdbb1a004d356f5a325d790fb3e52eb1271586458e7bbae53dcb3fa86ddedb8bccd0639d8e355cfa97d127f665edf1dcf12c4837d48da77cc13e2bd082c869f0cb8a1e7f6978d4da5b8870a47f649cf78d479a4763902b1f04d100063860f1c9ebc668884455913fb4968e30a38fc8294a0e3d411145b9e88c7dacd2156c29f15514fc7b6d2069a0dea44f4c1"}, {0xa8, 0x16, 0x200, "b82c0373c82fda4020784c3e00a19265cca758531316fdd700ee18084194afcad67c7b0a0d3c61ffdc26af6cee89016820ab4aae1aeedefad863edd6dccbb98a7d39d70a4515cc69b9331a42b27f0399ce01514a5f14acd38bc31290ffe612521006ff7b968ba77d3c78b4aaa7e26e5b0638dc660f290326e51a2b7b26d3a82b0ee29ba5e55dffcbf5fa0937f1f6dd4f38b5b3d72f27d8c7"}, {0x48, 0x1, 0x1ff, "d46aac6fb542862c602466f5d660e01c644d9784de6a91accc25a5bf71221a1cb943e8a9543a7c60e053012c85bb8a7f51"}, {0x50, 0x7, 0x9, "1b01512a4a067e02acfec386d57075d63bc9d7509a799af55a0bc53d1f11029a6486871b1eb3b675a350c91d85a9c65640fb185e4a435c8dbff8c960c8fc10a3"}, {0x28, 0x6, 0x3ff, "7e749276c69802909907dbe57dc04040aacf"}], 0x248}, 0x4000000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000cc0)='memory.stat\x00', 0x26e1, 0x0) close(r6) 228.007286ms ago: executing program 0 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000070000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 205.703791ms ago: executing program 4 (id=247): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cpuset.memory_spread_slab\x00', 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x0, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7d}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 422.948µs ago: executing program 0 (id=248): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00', r0}, 0x10) r2 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r2, r1, 0x0, 0x0, 0xfffffffffffffffe}, 0x30) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="e0020000", @ANYRES16=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="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"/704], 0x2e0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000002007bfe779ad96b1c00"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r9}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x62) listen(r10, 0x0) accept4(r10, 0x0, 0x0, 0x0) close(0xffffffffffffffff) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfffffffe}}, @TCA_CT_ACTION={0x6, 0x3, 0x14}, @TCA_CT_MARK={0x8, 0x5, 0x200}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 0s ago: executing program 4 (id=249): r0 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="c2", 0x1, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfecc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x8, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x24}}, 0x240000a0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x204000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, 0xa, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x60, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_COMMENT={0xc, 0x1a, 'batadv0\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}]}]}, 0x74}}, 0x18c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000980)="f3d5574d66d92aa229cbff5e9823f4de2371ca0db7cabb5872db625b91538f5e8eb62cf1b8619a868613dc287f1db97941ea0d74b12936d296202e497a3db50b2dc0a973321c89cb585660c6144fbe88549ddc8eab9ac4f40fb259dd8573041b9d26de8097d54bbbff23220e7a14cbb8926e49d89f5c8afe46d0e576117a7bda5d51a869a7c55ef97f1b319d168eb5ae633f869a2ab6dd436a054dd9dfb45671caabc018fa62c51ab36455ada8a962a6151650cc60ffa1820cf60842e5ec7c079d29a5b3ceb344c6ef976a1f5c77f5810141b648f5a2116ff9588701d9c981c0fbde22d3a710c47276aef11ffac72b2be3aacbb88e42201166319aad4195bb3a7ac52f59e425065a9b8024b3691ebabb6455529c10c3227eed527264e59b7919eed3704135609e4d1260455a1075b75212136a7bd81db309aedbd1a01e7c4839cf063ad130b7159f57b14b2840adf5b1eb9cc84c0204d735e328058e739409467fccbd8ce61b64f0b465895cbd8cdb5c95adad9ebf663b4060ed57649ad00e7f51a5fd082c980401e60a8b050019bc1d682425c708c62085d94c11d942ab5b8623fcbf076c29f715b4c55f801ab5a7f879072172c94792c41212c0a9c99252e861a465fc72b5e53d3e800f7b9e97639adbfe57d8def8a690ed4b76d3286d0ed96bc67c2497956b6ea730cf8d394a3e0f5b423da8a84cf7d5610c2d3a7e420eaaa2a49d8a3d3a0b4d64a76c04e5c2", 0x20e}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000d80), r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. [ 47.970607][ T5076] cgroup: Unknown subsys name 'net' [ 48.121040][ T5076] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 49.502063][ T5076] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 50.105249][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 50.121713][ T5091] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 50.130717][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 50.142380][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 50.150517][ T5091] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 50.159144][ T5091] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 50.169281][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 50.177058][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 50.185360][ T5098] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 50.194860][ T5098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 50.202128][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 50.203248][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 50.210469][ T5098] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 50.224449][ T5105] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 50.225270][ T5098] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 50.238663][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 50.240801][ T5098] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 50.246232][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 50.254175][ T5098] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 50.259698][ T5105] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 50.266837][ T5098] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 50.276600][ T5105] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 50.281493][ T5098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 50.289658][ T5105] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 50.296572][ T5106] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 50.305476][ T5105] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 50.309652][ T5106] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 50.317903][ T5105] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 50.323861][ T5098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 50.344703][ T5098] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 50.904845][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 50.951457][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 50.974723][ T5088] chnl_net:caif_netlink_parms(): no params data found [ 51.062324][ T5096] chnl_net:caif_netlink_parms(): no params data found [ 51.089162][ T5099] chnl_net:caif_netlink_parms(): no params data found [ 51.166457][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.174254][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.181459][ T5087] bridge_slave_0: entered allmulticast mode [ 51.190768][ T5087] bridge_slave_0: entered promiscuous mode [ 51.237178][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.246856][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.254716][ T5087] bridge_slave_1: entered allmulticast mode [ 51.261357][ T5087] bridge_slave_1: entered promiscuous mode [ 51.310140][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.317451][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.324738][ T5096] bridge_slave_0: entered allmulticast mode [ 51.331413][ T5096] bridge_slave_0: entered promiscuous mode [ 51.378499][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.385696][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.393875][ T5096] bridge_slave_1: entered allmulticast mode [ 51.400537][ T5096] bridge_slave_1: entered promiscuous mode [ 51.420098][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.427308][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.435055][ T5088] bridge_slave_0: entered allmulticast mode [ 51.441895][ T5088] bridge_slave_0: entered promiscuous mode [ 51.449085][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.456398][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.464005][ T5095] bridge_slave_0: entered allmulticast mode [ 51.470671][ T5095] bridge_slave_0: entered promiscuous mode [ 51.503140][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.512397][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.520456][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.527802][ T5088] bridge_slave_1: entered allmulticast mode [ 51.534793][ T5088] bridge_slave_1: entered promiscuous mode [ 51.541270][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.548974][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.556316][ T5095] bridge_slave_1: entered allmulticast mode [ 51.563525][ T5095] bridge_slave_1: entered promiscuous mode [ 51.570153][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.577353][ T5099] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.584565][ T5099] bridge_slave_0: entered allmulticast mode [ 51.591196][ T5099] bridge_slave_0: entered promiscuous mode [ 51.600423][ T5099] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.607676][ T5099] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.614917][ T5099] bridge_slave_1: entered allmulticast mode [ 51.622054][ T5099] bridge_slave_1: entered promiscuous mode [ 51.640505][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.683660][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.696865][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.775195][ T5087] team0: Port device team_slave_0 added [ 51.783951][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.797213][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.808430][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.820915][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.832101][ T5099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.844700][ T5099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.856465][ T5096] team0: Port device team_slave_0 added [ 51.864826][ T5087] team0: Port device team_slave_1 added [ 51.914252][ T5096] team0: Port device team_slave_1 added [ 51.932136][ T5088] team0: Port device team_slave_0 added [ 51.940441][ T5088] team0: Port device team_slave_1 added [ 52.000833][ T5095] team0: Port device team_slave_0 added [ 52.010104][ T5099] team0: Port device team_slave_0 added [ 52.028447][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.041420][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.068097][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.091167][ T5095] team0: Port device team_slave_1 added [ 52.099030][ T5099] team0: Port device team_slave_1 added [ 52.105988][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.113016][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.139087][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.150907][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.158346][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.184698][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.202246][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.209447][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.235544][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.287108][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.294583][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.320739][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.343841][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.350798][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.362717][ T5091] Bluetooth: hci2: command tx timeout [ 52.381892][ T5098] Bluetooth: hci0: command tx timeout [ 52.382542][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.399587][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.406903][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.432925][ T5098] Bluetooth: hci1: command tx timeout [ 52.432943][ T5091] Bluetooth: hci3: command tx timeout [ 52.433238][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.442826][ T5098] Bluetooth: hci4: command tx timeout [ 52.446039][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.467823][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.494111][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.505959][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.513429][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.539374][ T5099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.555959][ T5099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.562953][ T5099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.588888][ T5099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.643283][ T5087] hsr_slave_0: entered promiscuous mode [ 52.649627][ T5087] hsr_slave_1: entered promiscuous mode [ 52.699204][ T5088] hsr_slave_0: entered promiscuous mode [ 52.706096][ T5088] hsr_slave_1: entered promiscuous mode [ 52.713219][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.721016][ T5088] Cannot create hsr debugfs directory [ 52.753227][ T5096] hsr_slave_0: entered promiscuous mode [ 52.759733][ T5096] hsr_slave_1: entered promiscuous mode [ 52.768114][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.776219][ T5096] Cannot create hsr debugfs directory [ 52.827540][ T5095] hsr_slave_0: entered promiscuous mode [ 52.834101][ T5095] hsr_slave_1: entered promiscuous mode [ 52.840185][ T5095] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.850732][ T5095] Cannot create hsr debugfs directory [ 52.881534][ T5099] hsr_slave_0: entered promiscuous mode [ 52.887780][ T5099] hsr_slave_1: entered promiscuous mode [ 52.895047][ T5099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.902665][ T5099] Cannot create hsr debugfs directory [ 53.346740][ T5087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 53.363657][ T5087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 53.374563][ T5087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 53.385524][ T5087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 53.448518][ T5088] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 53.468248][ T5088] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 53.488620][ T5088] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 53.516097][ T5088] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 53.584905][ T5096] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 53.600487][ T5096] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 53.610350][ T5096] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 53.623985][ T5096] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 53.726531][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.755469][ T5095] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 53.767296][ T5095] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 53.791562][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.799375][ T5095] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 53.841917][ T5095] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 53.873510][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.882551][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.889807][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.940746][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.948005][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.968541][ T5099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.979633][ T5099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.990081][ T5099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.003941][ T5099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.087629][ T5088] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.109026][ T5087] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.152137][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.159308][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.170490][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.177613][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.259790][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.394307][ T5096] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.438043][ T5098] Bluetooth: hci2: command tx timeout [ 54.443593][ T5091] Bluetooth: hci0: command tx timeout [ 54.449496][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.459268][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.466433][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.496693][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.503874][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.512928][ T5098] Bluetooth: hci4: command tx timeout [ 54.515250][ T5091] Bluetooth: hci1: command tx timeout [ 54.518329][ T5098] Bluetooth: hci3: command tx timeout [ 54.571462][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.599833][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.617610][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.624720][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.648592][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.655758][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.682174][ T5099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.720379][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.751734][ T5099] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.775146][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.782248][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.815686][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.822821][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.834264][ T5087] veth0_vlan: entered promiscuous mode [ 54.925469][ T5087] veth1_vlan: entered promiscuous mode [ 54.996984][ T5088] veth0_vlan: entered promiscuous mode [ 55.064319][ T5088] veth1_vlan: entered promiscuous mode [ 55.139559][ T5087] veth0_macvtap: entered promiscuous mode [ 55.162304][ T5087] veth1_macvtap: entered promiscuous mode [ 55.198665][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.279840][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.317939][ T5088] veth0_macvtap: entered promiscuous mode [ 55.345524][ T5088] veth1_macvtap: entered promiscuous mode [ 55.362021][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.392061][ T5087] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.404028][ T5087] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.413675][ T5087] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.422379][ T5087] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.436595][ T5096] veth0_vlan: entered promiscuous mode [ 55.465186][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.481006][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.492837][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.506936][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.516052][ T5096] veth1_vlan: entered promiscuous mode [ 55.531494][ T5099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.571080][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.590325][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.603065][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.658594][ T5088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.667817][ T5088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.686550][ T5088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.696723][ T5088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.817422][ T5096] veth0_macvtap: entered promiscuous mode [ 55.837546][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.850174][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.879255][ T5096] veth1_macvtap: entered promiscuous mode [ 55.928117][ T5095] veth0_vlan: entered promiscuous mode [ 55.948934][ T2836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.965797][ T2836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.981850][ T1066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.988582][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.001311][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.003430][ T1066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.016801][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.029850][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.043587][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.061173][ T5095] veth1_vlan: entered promiscuous mode [ 56.085011][ T5099] veth0_vlan: entered promiscuous mode [ 56.107909][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.127374][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.137717][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.148469][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.160598][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.171923][ T5096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.181710][ T5096] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.191004][ T5096] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.200894][ T5096] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.245133][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.257430][ T5099] veth1_vlan: entered promiscuous mode [ 56.265421][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.316614][ T5095] veth0_macvtap: entered promiscuous mode [ 56.415055][ T5095] veth1_macvtap: entered promiscuous mode [ 56.501202][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.515327][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.515442][ T5098] Bluetooth: hci2: command tx timeout [ 56.530757][ T5106] Bluetooth: hci0: command tx timeout [ 56.536483][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.537873][ T5176] raw_sendmsg: syz.3.6 forgot to set AF_INET. Fix it! [ 56.559955][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.577860][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.593174][ T5098] Bluetooth: hci3: command tx timeout [ 56.598611][ T5098] Bluetooth: hci1: command tx timeout [ 56.604269][ T5106] Bluetooth: hci4: command tx timeout [ 56.611593][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.649466][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.665367][ T5099] veth0_macvtap: entered promiscuous mode [ 56.690119][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.701030][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.712619][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.724668][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.735207][ T5095] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.745867][ T5095] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.758222][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.770421][ T5184] ip6gretap0: entered promiscuous mode [ 56.777697][ T5184] batadv_slave_0: entered promiscuous mode [ 56.793275][ T5099] veth1_macvtap: entered promiscuous mode [ 56.828295][ T5095] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.841305][ T5095] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.850119][ T5095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.862681][ T5095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.888080][ T5187] FAULT_INJECTION: forcing a failure. [ 56.888080][ T5187] name failslab, interval 1, probability 0, space 0, times 1 [ 56.902002][ T5187] CPU: 0 PID: 5187 Comm: syz.0.8 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 56.911821][ T5187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 56.921891][ T5187] Call Trace: [ 56.925164][ T5187] [ 56.928077][ T5187] dump_stack_lvl+0x241/0x360 [ 56.932754][ T5187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 56.937945][ T5187] ? __pfx__printk+0x10/0x10 [ 56.942551][ T5187] ? netlink_insert+0x10b7/0x14b0 [ 56.947590][ T5187] should_fail_ex+0x3b0/0x4e0 [ 56.952269][ T5187] ? __alloc_skb+0x1c3/0x440 [ 56.956845][ T5187] should_failslab+0x9/0x20 [ 56.961366][ T5187] kmem_cache_alloc_node_noprof+0x71/0x320 [ 56.967163][ T5187] __alloc_skb+0x1c3/0x440 [ 56.971567][ T5187] ? __pfx___alloc_skb+0x10/0x10 [ 56.976488][ T5187] ? netlink_autobind+0xd6/0x2f0 [ 56.981419][ T5187] ? netlink_autobind+0x2b0/0x2f0 [ 56.986441][ T5187] netlink_sendmsg+0x638/0xcb0 [ 56.991220][ T5187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.996498][ T5187] ? __import_iovec+0x536/0x820 [ 57.001335][ T5187] ? aa_sock_msg_perm+0x91/0x160 [ 57.006282][ T5187] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 57.011558][ T5187] ? security_socket_sendmsg+0x87/0xb0 [ 57.017007][ T5187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 57.022277][ T5187] __sock_sendmsg+0x221/0x270 [ 57.026946][ T5187] ____sys_sendmsg+0x525/0x7d0 [ 57.031703][ T5187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 57.036987][ T5187] __sys_sendmsg+0x2b0/0x3a0 [ 57.041600][ T5187] ? __pfx___sys_sendmsg+0x10/0x10 [ 57.046701][ T5187] ? vfs_write+0x7c4/0xc90 [ 57.051123][ T5187] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 57.057433][ T5187] ? do_syscall_64+0x100/0x230 [ 57.062185][ T5187] ? do_syscall_64+0xb6/0x230 [ 57.066848][ T5187] do_syscall_64+0xf3/0x230 [ 57.071337][ T5187] ? clear_bhb_loop+0x35/0x90 [ 57.076019][ T5187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.081910][ T5187] RIP: 0033:0x7fa897175b99 [ 57.086313][ T5187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.105908][ T5187] RSP: 002b:00007fa897f52048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.114309][ T5187] RAX: ffffffffffffffda RBX: 00007fa897303f60 RCX: 00007fa897175b99 [ 57.122272][ T5187] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000007 [ 57.130229][ T5187] RBP: 00007fa897f520a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.138184][ T5187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.146230][ T5187] R13: 000000000000000b R14: 00007fa897303f60 R15: 00007ffcaeec7c88 [ 57.154207][ T5187] [ 57.219359][ T2836] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.253752][ T2836] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.325453][ T5193] FAULT_INJECTION: forcing a failure. [ 57.325453][ T5193] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.342759][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.353500][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.364445][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.364714][ T5193] CPU: 0 PID: 5193 Comm: syz.3.10 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 57.375312][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.384720][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 57.384735][ T5193] Call Trace: [ 57.384743][ T5193] [ 57.384752][ T5193] dump_stack_lvl+0x241/0x360 [ 57.384784][ T5193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 57.395497][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.404587][ T5193] ? __pfx__printk+0x10/0x10 [ 57.404624][ T5193] ? snprintf+0xda/0x120 [ 57.404647][ T5193] should_fail_ex+0x3b0/0x4e0 [ 57.404676][ T5193] _copy_to_user+0x2f/0xb0 [ 57.404698][ T5193] simple_read_from_buffer+0xca/0x150 [ 57.404722][ T5193] proc_fail_nth_read+0x1e9/0x250 [ 57.404745][ T5193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.404769][ T5193] ? rw_verify_area+0x514/0x6b0 [ 57.404794][ T5193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 57.404815][ T5193] vfs_read+0x204/0xbd0 [ 57.404835][ T5193] ? __pfx_lock_release+0x10/0x10 [ 57.404863][ T5193] ? __pfx_vfs_read+0x10/0x10 [ 57.404886][ T5193] ? __fget_files+0x29/0x470 [ 57.404912][ T5193] ? __fget_files+0x3f6/0x470 [ 57.404947][ T5193] ksys_read+0x1a0/0x2c0 [ 57.404975][ T5193] ? __pfx_ksys_read+0x10/0x10 [ 57.404997][ T5193] ? do_syscall_64+0x100/0x230 [ 57.405019][ T5193] ? do_syscall_64+0xb6/0x230 [ 57.405040][ T5193] do_syscall_64+0xf3/0x230 [ 57.405059][ T5193] ? clear_bhb_loop+0x35/0x90 [ 57.405083][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.405103][ T5193] RIP: 0033:0x7f0a84f7467c [ 57.405122][ T5193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 57.405137][ T5193] RSP: 002b:00007f0a849ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.405159][ T5193] RAX: ffffffffffffffda RBX: 00007f0a85103f60 RCX: 00007f0a84f7467c [ 57.405172][ T5193] RDX: 000000000000000f RSI: 00007f0a849ff0b0 RDI: 0000000000000010 [ 57.411754][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.416012][ T5193] RBP: 00007f0a849ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 57.416028][ T5193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.416040][ T5193] R13: 000000000000000b R14: 00007f0a85103f60 R15: 00007fffe119e708 [ 57.416067][ T5193] [ 57.627361][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.638934][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.651260][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.687825][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.707131][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.737751][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.762671][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.782426][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.796748][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.822529][ T5099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.852827][ T5099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.875176][ T5099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.891363][ T1066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.908272][ T1066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.921228][ T5099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.954028][ T5099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.973634][ T5099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.986000][ T5099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.001257][ T5210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.156840][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.198782][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.317956][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.341855][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.396940][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.437060][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.574935][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.594261][ T5098] Bluetooth: hci2: command tx timeout [ 58.599714][ T5098] Bluetooth: hci0: command tx timeout [ 58.611632][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.673849][ T5106] Bluetooth: hci4: command tx timeout [ 58.674837][ T5091] Bluetooth: hci3: command tx timeout [ 58.679295][ T5098] Bluetooth: hci1: command tx timeout [ 58.975128][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21'. [ 59.068545][ T5240] Zero length message leads to an empty skb [ 59.202680][ T5247] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.257299][ T5247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.26'. [ 59.273384][ T5248] syz.0.25 (5248) used greatest stack depth: 19248 bytes left [ 59.338350][ T5247] vlan2: entered promiscuous mode [ 59.467074][ T5259] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 59.505138][ T5260] sctp: failed to load transform for md5: -2 [ 59.533907][ T5268] FAULT_INJECTION: forcing a failure. [ 59.533907][ T5268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 59.596823][ T5268] CPU: 0 PID: 5268 Comm: syz.2.32 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 59.606765][ T5268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 59.616837][ T5268] Call Trace: [ 59.620128][ T5268] [ 59.623074][ T5268] dump_stack_lvl+0x241/0x360 [ 59.627773][ T5268] ? __pfx_dump_stack_lvl+0x10/0x10 [ 59.632984][ T5268] ? __pfx__printk+0x10/0x10 [ 59.637686][ T5268] ? __pfx_lock_release+0x10/0x10 [ 59.642732][ T5268] should_fail_ex+0x3b0/0x4e0 [ 59.647434][ T5268] _copy_from_user+0x2f/0xe0 [ 59.652043][ T5268] smc_setsockopt+0x452/0xe50 [ 59.656746][ T5268] ? __pfx_smc_setsockopt+0x10/0x10 [ 59.661958][ T5268] ? aa_sock_opt_perm+0x79/0x120 [ 59.666919][ T5268] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 59.672476][ T5268] ? security_socket_setsockopt+0x87/0xb0 [ 59.678217][ T5268] ? __pfx_smc_setsockopt+0x10/0x10 [ 59.683432][ T5268] do_sock_setsockopt+0x3af/0x720 [ 59.688484][ T5268] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 59.694048][ T5268] ? __fget_files+0x29/0x470 [ 59.698669][ T5268] ? __fget_files+0x3f6/0x470 [ 59.703379][ T5268] __sys_setsockopt+0x1ae/0x250 [ 59.708254][ T5268] __x64_sys_setsockopt+0xb5/0xd0 [ 59.713301][ T5268] do_syscall_64+0xf3/0x230 [ 59.717822][ T5268] ? clear_bhb_loop+0x35/0x90 [ 59.722516][ T5268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.728423][ T5268] RIP: 0033:0x7f89c9175b99 [ 59.732849][ T5268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.752472][ T5268] RSP: 002b:00007f89c9ec2048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 59.760907][ T5268] RAX: ffffffffffffffda RBX: 00007f89c9303f60 RCX: 00007f89c9175b99 [ 59.768897][ T5268] RDX: 0000000000000012 RSI: 0000000000000006 RDI: 0000000000000003 [ 59.776883][ T5268] RBP: 00007f89c9ec20a0 R08: 0000000000000010 R09: 0000000000000000 [ 59.784868][ T5268] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 59.792849][ T5268] R13: 000000000000000b R14: 00007f89c9303f60 R15: 00007ffe842afb68 [ 59.800848][ T5268] [ 60.082199][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.2.36'. [ 60.116949][ T5283] netlink: 'syz.2.36': attribute type 12 has an invalid length. [ 60.162206][ T5283] netlink: 'syz.2.36': attribute type 14 has an invalid length. [ 60.190852][ T5290] No such timeout policy "syz0" [ 60.195249][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 60.204222][ T5283] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.213530][ T5283] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.222250][ T5283] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.231101][ T5283] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.262070][ T5283] vxlan0: entered promiscuous mode [ 60.321831][ T5296] gretap1: entered promiscuous mode [ 60.350682][ T5296] gretap1: entered allmulticast mode [ 60.557832][ T5305] FAULT_INJECTION: forcing a failure. [ 60.557832][ T5305] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 60.609973][ T5305] CPU: 0 PID: 5305 Comm: syz.4.43 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 60.619918][ T5305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 60.629990][ T5305] Call Trace: [ 60.633281][ T5305] [ 60.636224][ T5305] dump_stack_lvl+0x241/0x360 [ 60.640919][ T5305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 60.646134][ T5305] ? __pfx__printk+0x10/0x10 [ 60.650755][ T5305] should_fail_ex+0x3b0/0x4e0 [ 60.655458][ T5305] prepare_alloc_pages+0x1da/0x5d0 [ 60.660597][ T5305] __alloc_pages_noprof+0x166/0x6c0 [ 60.665819][ T5305] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 60.671584][ T5305] alloc_pages_mpol_noprof+0x3e8/0x680 [ 60.677074][ T5305] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 60.683082][ T5305] ? alloc_pages_noprof+0xef/0x170 [ 60.688216][ T5305] get_free_pages_noprof+0xc/0x30 [ 60.693251][ T5305] kasan_populate_vmalloc_pte+0x38/0xe0 [ 60.698817][ T5305] __apply_to_page_range+0x8a8/0xe50 [ 60.704131][ T5305] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 60.710393][ T5305] ? __pfx___apply_to_page_range+0x10/0x10 [ 60.716221][ T5305] ? do_raw_spin_unlock+0x13c/0x8b0 [ 60.721423][ T5305] alloc_vmap_area+0x1d41/0x23e0 [ 60.726368][ T5305] ? __pfx_alloc_vmap_area+0x10/0x10 [ 60.731638][ T5305] ? __kasan_kmalloc+0x98/0xb0 [ 60.736392][ T5305] ? kmalloc_node_trace_noprof+0x1d3/0x300 [ 60.742183][ T5305] ? __get_vm_area_node+0x113/0x270 [ 60.747370][ T5305] ? kvmemdup_bpfptr_noprof+0x25/0xf0 [ 60.752731][ T5305] __get_vm_area_node+0x1a9/0x270 [ 60.757750][ T5305] __vmalloc_node_range_noprof+0x3bc/0x1460 [ 60.763633][ T5305] ? kvmemdup_bpfptr_noprof+0x25/0xf0 [ 60.768997][ T5305] ? __alloc_pages_noprof+0xbd/0x6c0 [ 60.774321][ T5305] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 60.780657][ T5305] ? rcu_is_watching+0x15/0xb0 [ 60.785430][ T5305] ? trace_kmalloc+0x1f/0xd0 [ 60.790024][ T5305] ? __kmalloc_node_noprof+0x247/0x440 [ 60.795479][ T5305] ? kvmalloc_node_noprof+0x72/0x190 [ 60.800778][ T5305] kvmalloc_node_noprof+0x142/0x190 [ 60.805988][ T5305] ? kvmemdup_bpfptr_noprof+0x25/0xf0 [ 60.811362][ T5305] kvmemdup_bpfptr_noprof+0x25/0xf0 [ 60.816557][ T5305] map_update_elem+0x4ed/0x6f0 [ 60.821323][ T5305] __sys_bpf+0x76f/0x810 [ 60.825566][ T5305] ? __pfx___sys_bpf+0x10/0x10 [ 60.830337][ T5305] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 60.836314][ T5305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 60.842637][ T5305] __x64_sys_bpf+0x7c/0x90 [ 60.847046][ T5305] do_syscall_64+0xf3/0x230 [ 60.851540][ T5305] ? clear_bhb_loop+0x35/0x90 [ 60.856210][ T5305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.862094][ T5305] RIP: 0033:0x7f41f8775b99 [ 60.866513][ T5305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.886116][ T5305] RSP: 002b:00007f41f947b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 60.894528][ T5305] RAX: ffffffffffffffda RBX: 00007f41f8903f60 RCX: 00007f41f8775b99 [ 60.902493][ T5305] RDX: 0000000000000020 RSI: 00000000200006c0 RDI: 0000000000000002 [ 60.910462][ T5305] RBP: 00007f41f947b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 60.918426][ T5305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 60.926393][ T5305] R13: 000000000000000b R14: 00007f41f8903f60 R15: 00007ffc7cb881f8 [ 60.934365][ T5305] [ 61.322400][ T5315] No such timeout policy "syz0" [ 61.457674][ T5328] gretap1: entered promiscuous mode [ 61.476094][ T5328] gretap1: entered allmulticast mode [ 61.828872][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.53'. [ 61.979696][ T5343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 62.146073][ T5345] No such timeout policy "syz0" [ 62.259604][ T5345] gretap2: entered promiscuous mode [ 62.313628][ T5345] gretap2: entered allmulticast mode [ 63.159459][ T5373] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 63.169663][ T5374] No such timeout policy "syz0" [ 63.313912][ T5374] gretap1: entered promiscuous mode [ 63.342314][ T5374] gretap1: entered allmulticast mode [ 63.729434][ T5388] No such timeout policy "syz0" [ 63.893200][ T5392] No such timeout policy "syz0" [ 63.906661][ T5390] gretap1: entered promiscuous mode [ 63.928820][ T5390] gretap1: entered allmulticast mode [ 64.006407][ T5395] gretap1: entered promiscuous mode [ 64.034909][ T5395] gretap1: entered allmulticast mode [ 64.080553][ T5396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 64.700845][ T5413] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 65.020197][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 65.197843][ T5433] No such timeout policy "syz0" [ 65.293607][ T5439] No such timeout policy "syz0" [ 65.304174][ T5438] gretap2: entered promiscuous mode [ 65.354807][ T5438] gretap2: entered allmulticast mode [ 65.455438][ T5442] gretap3: entered promiscuous mode [ 65.460701][ T5442] gretap3: entered allmulticast mode [ 65.533851][ T5443] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 65.573585][ T5443] macsec1: entered promiscuous mode [ 65.662585][ T5443] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 66.047928][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 66.201811][ T5459] Bluetooth: MGMT ver 1.22 [ 66.414281][ T5467] FAULT_INJECTION: forcing a failure. [ 66.414281][ T5467] name failslab, interval 1, probability 0, space 0, times 0 [ 66.455893][ T5467] CPU: 1 PID: 5467 Comm: syz.0.104 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 66.465929][ T5467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.476004][ T5467] Call Trace: [ 66.479302][ T5467] [ 66.482251][ T5467] dump_stack_lvl+0x241/0x360 [ 66.486956][ T5467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.492175][ T5467] ? __pfx__printk+0x10/0x10 [ 66.496794][ T5467] ? __pfx___might_resched+0x10/0x10 [ 66.502101][ T5467] ? dynamic_dname+0x141/0x1b0 [ 66.506901][ T5467] should_fail_ex+0x3b0/0x4e0 [ 66.511600][ T5467] ? tomoyo_encode+0x26f/0x540 [ 66.516382][ T5467] should_failslab+0x9/0x20 [ 66.520904][ T5467] __kmalloc_noprof+0xd8/0x400 [ 66.525689][ T5467] tomoyo_encode+0x26f/0x540 [ 66.530298][ T5467] ? __pfx_sockfs_dname+0x10/0x10 [ 66.535344][ T5467] tomoyo_realpath_from_path+0x59e/0x5e0 [ 66.541004][ T5467] tomoyo_path_number_perm+0x23a/0x880 [ 66.546495][ T5467] ? tomoyo_path_number_perm+0x208/0x880 [ 66.552153][ T5467] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 66.558192][ T5467] ? __fget_files+0x29/0x470 [ 66.562805][ T5467] ? __fget_files+0x3f6/0x470 [ 66.567494][ T5467] ? __fget_files+0x29/0x470 [ 66.572116][ T5467] security_file_ioctl+0x75/0xb0 [ 66.577076][ T5467] __se_sys_ioctl+0x47/0x170 [ 66.581692][ T5467] do_syscall_64+0xf3/0x230 [ 66.586211][ T5467] ? clear_bhb_loop+0x35/0x90 [ 66.590907][ T5467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.596816][ T5467] RIP: 0033:0x7fa897175b99 [ 66.601244][ T5467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.620861][ T5467] RSP: 002b:00007fa897f52048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.629303][ T5467] RAX: ffffffffffffffda RBX: 00007fa897303f60 RCX: 00007fa897175b99 [ 66.637295][ T5467] RDX: 00000000200000c0 RSI: 00000000800448d3 RDI: 0000000000000004 [ 66.645456][ T5467] RBP: 00007fa897f520a0 R08: 0000000000000000 R09: 0000000000000000 [ 66.653445][ T5467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.661432][ T5467] R13: 000000000000000b R14: 00007fa897303f60 R15: 00007ffcaeec7c88 [ 66.669439][ T5467] [ 66.725198][ T5467] ERROR: Out of memory at tomoyo_realpath_from_path. [ 66.911308][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.922973][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.932787][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.940833][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.949907][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.959059][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.968643][ T5474] No such timeout policy "syz0" [ 67.028932][ T5475] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 67.051275][ T5475] macsec1: entered promiscuous mode [ 67.069463][ T5475] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 67.154037][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'. [ 67.196531][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.317142][ T5474] gretap4: entered promiscuous mode [ 67.329425][ T5474] gretap4: entered allmulticast mode [ 67.477639][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.637455][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.892920][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.088901][ T5506] No such timeout policy "syz0" [ 68.110601][ T5508] No such timeout policy "syz0" [ 68.179811][ T5509] gretap3: entered promiscuous mode [ 68.188475][ T5509] gretap3: entered allmulticast mode [ 68.329598][ T5510] gretap2: entered promiscuous mode [ 68.351312][ T5510] gretap2: entered allmulticast mode [ 68.407771][ T5469] chnl_net:caif_netlink_parms(): no params data found [ 68.489676][ T62] bridge_slave_1: left allmulticast mode [ 68.500214][ T62] bridge_slave_1: left promiscuous mode [ 68.518077][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.549559][ T62] bridge_slave_0: left allmulticast mode [ 68.555358][ T62] bridge_slave_0: left promiscuous mode [ 68.568256][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.992846][ T5098] Bluetooth: hci2: command tx timeout [ 69.118265][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.132427][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.145350][ T62] bond0 (unregistering): Released all slaves [ 69.209716][ T5520] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 69.222102][ T5520] macsec1: entered promiscuous mode [ 69.239754][ T5520] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 69.540031][ T5469] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.557803][ T5469] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.575773][ T5469] bridge_slave_0: entered allmulticast mode [ 69.606415][ T5469] bridge_slave_0: entered promiscuous mode [ 69.655146][ T5469] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.662311][ T5469] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.709005][ T5469] bridge_slave_1: entered allmulticast mode [ 69.728898][ T5469] bridge_slave_1: entered promiscuous mode [ 69.737495][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.126'. [ 69.987059][ T5469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.032343][ T62] hsr_slave_0: left promiscuous mode [ 70.053691][ T62] hsr_slave_1: left promiscuous mode [ 70.075621][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.093755][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.134265][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.160755][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.245811][ T62] veth1_macvtap: left promiscuous mode [ 70.266744][ T62] veth0_macvtap: left promiscuous mode [ 70.287751][ T62] veth1_vlan: left promiscuous mode [ 70.312377][ T62] veth0_vlan: left promiscuous mode [ 70.608175][ T5569] FAULT_INJECTION: forcing a failure. [ 70.608175][ T5569] name failslab, interval 1, probability 0, space 0, times 0 [ 70.632119][ T5569] CPU: 0 PID: 5569 Comm: syz.4.129 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 70.642143][ T5569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.652192][ T5569] Call Trace: [ 70.655462][ T5569] [ 70.658384][ T5569] dump_stack_lvl+0x241/0x360 [ 70.663059][ T5569] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.668248][ T5569] ? __pfx__printk+0x10/0x10 [ 70.672848][ T5569] ? ref_tracker_alloc+0x332/0x490 [ 70.677960][ T5569] should_fail_ex+0x3b0/0x4e0 [ 70.682642][ T5569] ? skb_clone+0x20c/0x390 [ 70.687099][ T5569] should_failslab+0x9/0x20 [ 70.691603][ T5569] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 70.696971][ T5569] skb_clone+0x20c/0x390 [ 70.701213][ T5569] __netlink_deliver_tap+0x3cc/0x7c0 [ 70.706492][ T5569] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.711674][ T5569] netlink_deliver_tap+0x19d/0x1b0 [ 70.716786][ T5569] netlink_unicast+0x7be/0x990 [ 70.721581][ T5569] ? __pfx_netlink_unicast+0x10/0x10 [ 70.726857][ T5569] ? __virt_addr_valid+0x183/0x520 [ 70.731959][ T5569] ? __check_object_size+0x49c/0x900 [ 70.737233][ T5569] ? bpf_lsm_netlink_send+0x9/0x10 [ 70.742337][ T5569] netlink_sendmsg+0x8e4/0xcb0 [ 70.747107][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.752382][ T5569] ? __import_iovec+0x536/0x820 [ 70.757216][ T5569] ? aa_sock_msg_perm+0x91/0x160 [ 70.762151][ T5569] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.767436][ T5569] ? security_socket_sendmsg+0x87/0xb0 [ 70.772886][ T5569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.778154][ T5569] __sock_sendmsg+0x221/0x270 [ 70.782821][ T5569] ____sys_sendmsg+0x525/0x7d0 [ 70.787586][ T5569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.792871][ T5569] __sys_sendmsg+0x2b0/0x3a0 [ 70.797455][ T5569] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.802564][ T5569] ? vfs_write+0x7c4/0xc90 [ 70.807024][ T5569] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.813356][ T5569] ? do_syscall_64+0x100/0x230 [ 70.818115][ T5569] ? do_syscall_64+0xb6/0x230 [ 70.822783][ T5569] do_syscall_64+0xf3/0x230 [ 70.827276][ T5569] ? clear_bhb_loop+0x35/0x90 [ 70.831944][ T5569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.837827][ T5569] RIP: 0033:0x7f41f8775b99 [ 70.842239][ T5569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.861840][ T5569] RSP: 002b:00007f41f947b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.870244][ T5569] RAX: ffffffffffffffda RBX: 00007f41f8903f60 RCX: 00007f41f8775b99 [ 70.878211][ T5569] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 70.886176][ T5569] RBP: 00007f41f947b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 70.894134][ T5569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.902098][ T5569] R13: 000000000000000b R14: 00007f41f8903f60 R15: 00007ffc7cb881f8 [ 70.910078][ T5569] [ 71.081171][ T5098] Bluetooth: hci2: command tx timeout [ 71.303976][ T62] team0 (unregistering): Port device team_slave_1 removed [ 71.352160][ T5577] No such timeout policy "syz0" [ 71.361791][ T62] team0 (unregistering): Port device team_slave_0 removed [ 71.676393][ T5469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.723674][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.730372][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.755538][ T5571] batadv_slave_1: entered promiscuous mode [ 71.774530][ T5573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.130'. [ 71.804823][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 71.833088][ T5577] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 71.879435][ T5577] gretap2: entered promiscuous mode [ 71.888148][ T5577] gretap2: entered allmulticast mode [ 72.016210][ T5570] batadv_slave_1: left promiscuous mode [ 72.030606][ T5581] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 72.063640][ T5581] macsec1: entered promiscuous mode [ 72.085186][ T5581] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 72.148326][ T5469] team0: Port device team_slave_0 added [ 72.186367][ T5469] team0: Port device team_slave_1 added [ 72.339938][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.370039][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.416539][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 72.443466][ T5469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.482822][ T5469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.504874][ T5469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.562604][ T5469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.752822][ T5469] hsr_slave_0: entered promiscuous mode [ 72.779920][ T5469] hsr_slave_1: entered promiscuous mode [ 72.810060][ T5469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.832592][ T5469] Cannot create hsr debugfs directory [ 73.152615][ T5098] Bluetooth: hci2: command tx timeout [ 73.336809][ T5620] No such timeout policy "syz0" [ 73.480038][ T5620] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 73.507749][ T5620] gretap5: entered promiscuous mode [ 73.525942][ T5620] gretap5: entered allmulticast mode [ 73.794920][ T5636] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 73.818044][ T5636] macsec1: entered promiscuous mode [ 73.896484][ T5636] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 74.465311][ T5469] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.489793][ T5469] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.511471][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 74.543249][ T5666] FAULT_INJECTION: forcing a failure. [ 74.543249][ T5666] name failslab, interval 1, probability 0, space 0, times 0 [ 74.556336][ T5666] CPU: 1 PID: 5666 Comm: syz.0.154 Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 74.565998][ T5469] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.566322][ T5666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 74.583071][ T5666] Call Trace: [ 74.586367][ T5666] [ 74.589319][ T5666] dump_stack_lvl+0x241/0x360 [ 74.594027][ T5666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 74.599247][ T5666] ? __pfx__printk+0x10/0x10 [ 74.603871][ T5666] ? do_raw_spin_lock+0x14f/0x370 [ 74.608904][ T5666] should_fail_ex+0x3b0/0x4e0 [ 74.613591][ T5666] ? __inet_hash_connect+0xa2e/0x2170 [ 74.618960][ T5666] should_failslab+0x9/0x20 [ 74.623460][ T5666] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 74.628835][ T5666] __inet_hash_connect+0xa2e/0x2170 [ 74.634033][ T5666] ? __pfx___inet_check_established+0x10/0x10 [ 74.640107][ T5666] ? __pfx___inet_hash_connect+0x10/0x10 [ 74.645741][ T5666] ? inet_hash_connect+0xac/0x140 [ 74.650762][ T5666] tcp_v4_connect+0xd04/0x1ba0 [ 74.655538][ T5666] ? __pfx_tcp_v4_connect+0x10/0x10 [ 74.660734][ T5666] ? mark_lock+0x9a/0x350 [ 74.665063][ T5666] __inet_stream_connect+0x262/0xf30 [ 74.670347][ T5666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.676670][ T5666] ? __local_bh_enable_ip+0x168/0x200 [ 74.682032][ T5666] ? lockdep_hardirqs_on+0x99/0x150 [ 74.687234][ T5666] ? __pfx___inet_stream_connect+0x10/0x10 [ 74.693037][ T5666] ? __local_bh_enable_ip+0x168/0x200 [ 74.698399][ T5666] ? inet_stream_connect+0x50/0xa0 [ 74.703512][ T5666] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 74.709229][ T5666] inet_stream_connect+0x65/0xa0 [ 74.714171][ T5666] kernel_connect+0x10b/0x160 [ 74.718845][ T5666] ? __pfx_kernel_connect+0x10/0x10 [ 74.724131][ T5666] ? do_raw_spin_unlock+0x13c/0x8b0 [ 74.729332][ T5666] smc_connect+0x72c/0xde0 [ 74.733750][ T5666] __sys_connect+0x2df/0x310 [ 74.738336][ T5666] ? __pfx___sys_connect+0x10/0x10 [ 74.743453][ T5666] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 74.749770][ T5666] ? do_syscall_64+0x100/0x230 [ 74.754529][ T5666] __x64_sys_connect+0x7a/0x90 [ 74.759289][ T5666] do_syscall_64+0xf3/0x230 [ 74.763784][ T5666] ? clear_bhb_loop+0x35/0x90 [ 74.768455][ T5666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.774340][ T5666] RIP: 0033:0x7fa897175b99 [ 74.778745][ T5666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.798358][ T5666] RSP: 002b:00007fa897f52048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 74.806783][ T5666] RAX: ffffffffffffffda RBX: 00007fa897303f60 RCX: 00007fa897175b99 [ 74.814758][ T5666] RDX: 0000000000000010 RSI: 0000000020000280 RDI: 0000000000000008 [ 74.822733][ T5666] RBP: 00007fa897f520a0 R08: 0000000000000000 R09: 0000000000000000 [ 74.830708][ T5666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.838675][ T5666] R13: 000000000000000b R14: 00007fa897303f60 R15: 00007ffcaeec7c88 [ 74.846653][ T5666] [ 74.860565][ T5469] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.034440][ T5680] No such timeout policy "syz0" [ 75.067510][ T5682] No such timeout policy "syz0" [ 75.180136][ T5469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.233156][ T5098] Bluetooth: hci2: command tx timeout [ 75.250682][ T5680] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 75.333903][ T5680] gretap3: entered promiscuous mode [ 75.339177][ T5680] gretap3: entered allmulticast mode [ 75.489900][ T5682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 75.524673][ T5682] gretap6: entered promiscuous mode [ 75.562817][ T5682] gretap6: entered allmulticast mode [ 75.620767][ T5469] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.696339][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.703553][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.763527][ T5700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.163'. [ 75.767052][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.780255][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.021671][ T5469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.224244][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.169'. [ 76.491789][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.0.170'. [ 76.730614][ T5737] No such timeout policy "syz0" [ 76.778717][ T5469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.856733][ T784] cfg80211: failed to load regulatory.db [ 76.909497][ T5737] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 76.966190][ T5737] gretap4: entered promiscuous mode [ 76.979420][ T5737] gretap4: entered allmulticast mode [ 77.114324][ T5469] veth0_vlan: entered promiscuous mode [ 77.128611][ T5469] veth1_vlan: entered promiscuous mode [ 77.232307][ T5763] netlink: 4 bytes leftover after parsing attributes in process `syz.4.181'. [ 77.238771][ T5469] veth0_macvtap: entered promiscuous mode [ 77.289575][ T5469] veth1_macvtap: entered promiscuous mode [ 77.343834][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.392647][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.412555][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.438608][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.484617][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.524565][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.552812][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.592104][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.630480][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.702883][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.722614][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.752522][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.785894][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.815624][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.854444][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.858476][ T5780] x_tables: duplicate underflow at hook 2 [ 77.892608][ T5469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.932567][ T5469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.971030][ T5469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.059957][ T5469] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.096850][ T5469] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.115197][ T5469] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.142831][ T5469] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.358227][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.391478][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.459393][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.185'. [ 78.468458][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.497001][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.794634][ T5803] geneve2: entered promiscuous mode [ 78.812889][ T5803] geneve2: entered allmulticast mode [ 79.354692][ T5823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 80.338805][ T5856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 80.562167][ T5862] geneve2: entered promiscuous mode [ 80.584473][ T5862] geneve2: entered allmulticast mode [ 80.860396][ T5878] No such timeout policy "syz0" [ 80.959207][ T5881] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 80.998587][ T5881] gretap5: entered promiscuous mode [ 81.046522][ T5881] gretap5: entered allmulticast mode [ 81.276726][ T5890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.214'. [ 81.462078][ T5897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 82.402428][ T5913] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 82.415383][ T5913] macsec1: entered promiscuous mode [ 82.435043][ T5913] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 82.486752][ T5922] geneve2: entered promiscuous mode [ 82.493679][ T5922] geneve2: entered allmulticast mode [ 82.712830][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.227'. [ 82.855634][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 83.846538][ T5949] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 83.878899][ T5949] macsec1: entered promiscuous mode [ 83.905605][ T5949] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 84.025949][ T5948] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 84.050435][ T5948] macsec1: entered promiscuous mode [ 84.059324][ T5948] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 84.357080][ T5966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 84.816480][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.248'. [ 84.899824][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.910038][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.919859][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.929001][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.940848][ T5091] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.948793][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.964048][ T5981] ================================================================== [ 84.972156][ T5981] BUG: KASAN: slab-use-after-free in sk_skb_reason_drop+0x44/0x3d0 [ 84.980068][ T5981] Read of size 4 at addr ffff8880234c3224 by task syz-executor/5981 [ 84.988037][ T5981] [ 84.990351][ T5981] CPU: 1 PID: 5981 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 85.000586][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.010646][ T5981] Call Trace: [ 85.013925][ T5981] [ 85.016851][ T5981] dump_stack_lvl+0x241/0x360 [ 85.021529][ T5981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.026728][ T5981] ? __pfx__printk+0x10/0x10 [ 85.031316][ T5981] ? _printk+0xd5/0x120 [ 85.035486][ T5981] ? __virt_addr_valid+0x183/0x520 [ 85.040600][ T5981] ? __virt_addr_valid+0x183/0x520 [ 85.045709][ T5981] print_report+0x169/0x550 [ 85.050204][ T5981] ? __virt_addr_valid+0x183/0x520 [ 85.055310][ T5981] ? __virt_addr_valid+0x183/0x520 [ 85.060502][ T5981] ? __virt_addr_valid+0x44e/0x520 [ 85.065615][ T5981] ? __phys_addr+0xba/0x170 [ 85.070111][ T5981] ? sk_skb_reason_drop+0x44/0x3d0 [ 85.075217][ T5981] kasan_report+0x143/0x180 [ 85.079717][ T5981] ? sk_skb_reason_drop+0x44/0x3d0 [ 85.084824][ T5981] kasan_check_range+0x282/0x290 [ 85.089758][ T5981] sk_skb_reason_drop+0x44/0x3d0 [ 85.094690][ T5981] __hci_req_sync+0x631/0x950 [ 85.099363][ T5981] ? __pfx___hci_req_sync+0x10/0x10 [ 85.104557][ T5981] ? __pfx___mutex_lock+0x10/0x10 [ 85.109578][ T5981] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.115640][ T5981] ? __pfx_hci_scan_req+0x10/0x10 [ 85.120653][ T5981] hci_req_sync+0xa9/0xd0 [ 85.124983][ T5981] hci_dev_cmd+0x4c5/0xa50 [ 85.129390][ T5981] ? security_capable+0x90/0xb0 [ 85.134230][ T5981] ? __pfx_hci_dev_cmd+0x10/0x10 [ 85.139156][ T5981] ? hci_sock_ioctl+0x6c6/0xa40 [ 85.144006][ T5981] sock_do_ioctl+0x158/0x460 [ 85.148590][ T5981] ? __pfx_sock_do_ioctl+0x10/0x10 [ 85.153710][ T5981] sock_ioctl+0x629/0x8e0 [ 85.158051][ T5981] ? __pfx_sock_ioctl+0x10/0x10 [ 85.162901][ T5981] ? __fget_files+0x29/0x470 [ 85.167496][ T5981] ? __fget_files+0x3f6/0x470 [ 85.172251][ T5981] ? __fget_files+0x29/0x470 [ 85.176836][ T5981] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.181765][ T5981] ? security_file_ioctl+0x87/0xb0 [ 85.186868][ T5981] ? __pfx_sock_ioctl+0x10/0x10 [ 85.191717][ T5981] __se_sys_ioctl+0xfc/0x170 [ 85.196303][ T5981] do_syscall_64+0xf3/0x230 [ 85.200797][ T5981] ? clear_bhb_loop+0x35/0x90 [ 85.205465][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.211353][ T5981] RIP: 0033:0x7f698d37579b [ 85.215760][ T5981] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 85.235357][ T5981] RSP: 002b:00007ffd25fbdef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 85.243770][ T5981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f698d37579b [ 85.251739][ T5981] RDX: 00007ffd25fbdf68 RSI: 00000000400448dd RDI: 0000000000000003 [ 85.259700][ T5981] RBP: 000055557bfb04a8 R08: 0000000000000000 R09: 0000000000000000 [ 85.267668][ T5981] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 85.275632][ T5981] R13: 0000000000000002 R14: 0000000000000009 R15: 0000000000000009 [ 85.283604][ T5981] [ 85.286612][ T5981] [ 85.288920][ T5981] Allocated by task 5098: [ 85.293229][ T5981] kasan_save_track+0x3f/0x80 [ 85.297985][ T5981] __kasan_slab_alloc+0x66/0x80 [ 85.302827][ T5981] kmem_cache_alloc_noprof+0x135/0x2a0 [ 85.308279][ T5981] skb_clone+0x20c/0x390 [ 85.312515][ T5981] hci_cmd_work+0x2a2/0x670 [ 85.317013][ T5981] process_scheduled_works+0xa2c/0x1830 [ 85.322551][ T5981] worker_thread+0x86d/0xd50 [ 85.327139][ T5981] kthread+0x2f0/0x390 [ 85.331204][ T5981] ret_from_fork+0x4b/0x80 [ 85.335611][ T5981] ret_from_fork_asm+0x1a/0x30 [ 85.340374][ T5981] [ 85.342685][ T5981] Freed by task 5098: [ 85.346646][ T5981] kasan_save_track+0x3f/0x80 [ 85.351318][ T5981] kasan_save_free_info+0x40/0x50 [ 85.356330][ T5981] poison_slab_object+0xe0/0x150 [ 85.361264][ T5981] __kasan_slab_free+0x37/0x60 [ 85.366021][ T5981] kmem_cache_free+0x145/0x350 [ 85.370776][ T5981] hci_req_sync_complete+0xe8/0x290 [ 85.375975][ T5981] hci_event_packet+0xc75/0x1540 [ 85.380901][ T5981] hci_rx_work+0x3e8/0xca0 [ 85.385310][ T5981] process_scheduled_works+0xa2c/0x1830 [ 85.390843][ T5981] worker_thread+0x86d/0xd50 [ 85.395508][ T5981] kthread+0x2f0/0x390 [ 85.399571][ T5981] ret_from_fork+0x4b/0x80 [ 85.403978][ T5981] ret_from_fork_asm+0x1a/0x30 [ 85.408734][ T5981] [ 85.411051][ T5981] The buggy address belongs to the object at ffff8880234c3140 [ 85.411051][ T5981] which belongs to the cache skbuff_head_cache of size 240 [ 85.425629][ T5981] The buggy address is located 228 bytes inside of [ 85.425629][ T5981] freed 240-byte region [ffff8880234c3140, ffff8880234c3230) [ 85.439425][ T5981] [ 85.441735][ T5981] The buggy address belongs to the physical page: [ 85.448138][ T5981] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x234c3 [ 85.456890][ T5981] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.464000][ T5981] page_type: 0xffffefff(slab) [ 85.468667][ T5981] raw: 00fff00000000000 ffff888018ada780 ffffea0001bb22c0 dead000000000004 [ 85.477239][ T5981] raw: 0000000000000000 00000000000c000c 00000001ffffefff 0000000000000000 [ 85.485806][ T5981] page dumped because: kasan: bad access detected [ 85.492213][ T5981] page_owner tracks the page as allocated [ 85.497911][ T5981] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4547, tgid 4547 (udevadm), ts 18889456018, free_ts 18876109919 [ 85.516756][ T5981] post_alloc_hook+0x1f3/0x230 [ 85.521525][ T5981] get_page_from_freelist+0x2e4c/0x2f10 [ 85.527067][ T5981] __alloc_pages_noprof+0x256/0x6c0 [ 85.532280][ T5981] alloc_slab_page+0x5f/0x120 [ 85.536957][ T5981] allocate_slab+0x5a/0x2f0 [ 85.541450][ T5981] ___slab_alloc+0xcd1/0x14b0 [ 85.546115][ T5981] __slab_alloc+0x58/0xa0 [ 85.550435][ T5981] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 85.556322][ T5981] __alloc_skb+0x1c3/0x440 [ 85.560726][ T5981] alloc_uevent_skb+0x74/0x230 [ 85.565479][ T5981] kobject_uevent_net_broadcast+0x2fd/0x580 [ 85.571361][ T5981] kobject_uevent_env+0x57d/0x8e0 [ 85.576375][ T5981] kobject_synth_uevent+0x4ef/0xae0 [ 85.581565][ T5981] uevent_store+0x4b/0x70 [ 85.585886][ T5981] kernfs_fop_write_iter+0x3a1/0x500 [ 85.591158][ T5981] vfs_write+0xa72/0xc90 [ 85.595390][ T5981] page last free pid 4547 tgid 4547 stack trace: [ 85.601699][ T5981] free_unref_page+0xd22/0xea0 [ 85.606455][ T5981] __put_partials+0xeb/0x130 [ 85.611038][ T5981] put_cpu_partial+0x17c/0x250 [ 85.615797][ T5981] __slab_free+0x2ea/0x3d0 [ 85.620204][ T5981] qlist_free_all+0x9e/0x140 [ 85.624787][ T5981] kasan_quarantine_reduce+0x14f/0x170 [ 85.630234][ T5981] __kasan_slab_alloc+0x23/0x80 [ 85.635076][ T5981] kmalloc_trace_noprof+0x132/0x2c0 [ 85.640260][ T5981] kernfs_fop_open+0x3e0/0xd10 [ 85.645013][ T5981] do_dentry_open+0x95a/0x1720 [ 85.649770][ T5981] path_openat+0x289f/0x3280 [ 85.654349][ T5981] do_filp_open+0x235/0x490 [ 85.658841][ T5981] do_sys_openat2+0x13e/0x1d0 [ 85.663503][ T5981] __x64_sys_openat+0x247/0x2a0 [ 85.668339][ T5981] do_syscall_64+0xf3/0x230 [ 85.672835][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.678725][ T5981] [ 85.681032][ T5981] Memory state around the buggy address: [ 85.686645][ T5981] ffff8880234c3100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 85.694698][ T5981] ffff8880234c3180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.702747][ T5981] >ffff8880234c3200: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 85.710879][ T5981] ^ [ 85.715973][ T5981] ffff8880234c3280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 85.724022][ T5981] ffff8880234c3300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 85.732085][ T5981] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 85.760236][ T5076] syz-executor (5076) used greatest stack depth: 18704 bytes left [ 85.778724][ T5981] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.785972][ T5981] CPU: 0 PID: 5981 Comm: syz-executor Not tainted 6.10.0-rc5-syzkaller-01193-gac26327635d6 #0 [ 85.796220][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 85.806481][ T5981] Call Trace: [ 85.809775][ T5981] [ 85.812714][ T5981] dump_stack_lvl+0x241/0x360 [ 85.817404][ T5981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.822627][ T5981] ? __pfx__printk+0x10/0x10 [ 85.827233][ T5981] ? preempt_schedule+0xe1/0xf0 [ 85.832102][ T5981] ? vscnprintf+0x5d/0x90 [ 85.836456][ T5981] panic+0x349/0x860 [ 85.840389][ T5981] ? check_panic_on_warn+0x21/0xb0 [ 85.845535][ T5981] ? __pfx_panic+0x10/0x10 [ 85.849969][ T5981] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 85.855968][ T5981] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.862572][ T5981] ? print_report+0x502/0x550 [ 85.867264][ T5981] check_panic_on_warn+0x86/0xb0 [ 85.872215][ T5981] ? sk_skb_reason_drop+0x44/0x3d0 [ 85.877341][ T5981] end_report+0x77/0x160 [ 85.881595][ T5981] kasan_report+0x154/0x180 [ 85.886128][ T5981] ? sk_skb_reason_drop+0x44/0x3d0 [ 85.891276][ T5981] kasan_check_range+0x282/0x290 [ 85.896243][ T5981] sk_skb_reason_drop+0x44/0x3d0 [ 85.901207][ T5981] __hci_req_sync+0x631/0x950 [ 85.905911][ T5981] ? __pfx___hci_req_sync+0x10/0x10 [ 85.911138][ T5981] ? __pfx___mutex_lock+0x10/0x10 [ 85.916191][ T5981] ? __pfx_autoremove_wake_function+0x10/0x10 [ 85.922283][ T5981] ? __pfx_hci_scan_req+0x10/0x10 [ 85.927318][ T5981] hci_req_sync+0xa9/0xd0 [ 85.931644][ T5981] hci_dev_cmd+0x4c5/0xa50 [ 85.936053][ T5981] ? security_capable+0x90/0xb0 [ 85.940895][ T5981] ? __pfx_hci_dev_cmd+0x10/0x10 [ 85.945821][ T5981] ? hci_sock_ioctl+0x6c6/0xa40 [ 85.950696][ T5981] sock_do_ioctl+0x158/0x460 [ 85.955299][ T5981] ? __pfx_sock_do_ioctl+0x10/0x10 [ 85.960502][ T5981] sock_ioctl+0x629/0x8e0 [ 85.964828][ T5981] ? __pfx_sock_ioctl+0x10/0x10 [ 85.969664][ T5981] ? __fget_files+0x29/0x470 [ 85.974251][ T5981] ? __fget_files+0x3f6/0x470 [ 85.978928][ T5981] ? __fget_files+0x29/0x470 [ 85.983520][ T5981] ? bpf_lsm_file_ioctl+0x9/0x10 [ 85.988452][ T5981] ? security_file_ioctl+0x87/0xb0 [ 85.993557][ T5981] ? __pfx_sock_ioctl+0x10/0x10 [ 85.998422][ T5981] __se_sys_ioctl+0xfc/0x170 [ 86.003020][ T5981] do_syscall_64+0xf3/0x230 [ 86.007536][ T5981] ? clear_bhb_loop+0x35/0x90 [ 86.012227][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.018137][ T5981] RIP: 0033:0x7f698d37579b [ 86.022568][ T5981] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 86.042175][ T5981] RSP: 002b:00007ffd25fbdef0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 86.050587][ T5981] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f698d37579b [ 86.058555][ T5981] RDX: 00007ffd25fbdf68 RSI: 00000000400448dd RDI: 0000000000000003 [ 86.066516][ T5981] RBP: 000055557bfb04a8 R08: 0000000000000000 R09: 0000000000000000 [ 86.074478][ T5981] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000002 [ 86.082440][ T5981] R13: 0000000000000002 R14: 0000000000000009 R15: 0000000000000009 [ 86.090420][ T5981] [ 86.093681][ T5981] Kernel Offset: disabled [ 86.097992][ T5981] Rebooting in 86400 seconds..