last executing test programs: 4.6788829s ago: executing program 2 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000240)={@loopback, 0x0}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="21002abd7000fbdbdf2507000000050038000000000005002e0000000000080031000100000008000300", @ANYRES32=r2, @ANYBLOB="05002d00000010268d97f698d600"], 0x3c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r6, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$binfmt_script(r3, 0x0, 0xfffffe5d) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) unshare(0x28000600) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 3.709809622s ago: executing program 2 (id=460): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES8], 0xb8}}, 0x0) 3.547950459s ago: executing program 2 (id=464): syz_emit_ethernet(0x36, &(0x7f0000000a40)={@local, @dev, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) 3.384271454s ago: executing program 2 (id=466): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000090000000000000000009500000000000000"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000140)="76ea092000000000009bb5606c1e", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=ANY=[@ANYBLOB="fc00", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fddbdf25120000000c009900ff0100007600000006001a01020000000600140100020000060014010500000000001400", @ANYRES32=0x0, @ANYBLOB="0a00060008021100000100000500c2004f00000000003600000000009c00ac00b04dcf6776a95156fc3cdc29147232211ee9a3d67443ba7a788949c6364fa213d5525bce325b7ace48f2775969d4427891b08d8b0d8f565261537b8133d4540902b5179dafe803648d31b8ef55b6d37daaa321b179f7ede078171b0e2200000006"], 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x100) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001400010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES8], 0xb8}}, 0x0) 3.216127902s ago: executing program 2 (id=467): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r2, 0x0, 0x6, 0x3}) sendmsg$unix(r3, &(0x7f0000001680)={&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000140)="f7e4a43bfd418b1f551e794196937dfe7ea7e9692d81bd32cd96b4f8aaddfb9d955e40b101a327d2f1d359f682d00ed3632955837dca1aacc5ab55fe6c1eb1d00ea397eafeb73459de5013779b76", 0x4e}, {&(0x7f0000000200)="8be67324cc83732b658f708de23f491e3c4c6baca64e77eabe5846d12b6ef83bb39b32b51763f0b7d701fb01259079b5cbda9873083ae1f6b55bfdf6ffeaf4204d166514cddc2f26f04504", 0x4b}, {&(0x7f0000000380)="14f66fd9260e355872c29e7c4a49266c8d30361a68e11ce214c02ea67f8ade44ca4e601251a47c5315ed308a4ca7a8fef8fdcd925fd63c322c0fd2a9446d08ff92ec8c22d19b1099ddfeeb0f648f1bc9e8ad50788257a05c268dddc35c131d9e", 0x60}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="485f312a144a17c95e5f6613277667a5e17e2c2aed4740063098dccf7b3637d86c2ecd000e1ecb55adfaf43d60da894a4d4ea01009fa643841acd084664a1d72ada63a72dba4c7413aa6aef358ded0def595c0ac0ba86dc6ad4966f8fb43bcb0f6aa4552123d4cd8a9721e5a2bf08aed17182a6693bc0db3d23eeebe68ed5b644d4e655ab3ace989299ae40145d12a14483b386f708353182991f76853c09ac0fdf3ec", 0xa3}, {&(0x7f00000014c0)="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", 0xfc}], 0x6, &(0x7f0000001780)=ANY=[@ANYRES32=r0, @ANYBLOB="9398a4953369f31c732e708266c437fd71052f651c6595898dd013c19a14d31cebd2a413744c0d1269919f61f1ca505157494931c47a563ece433e3fd24c5f064c4f31d692880616380910397ff5e4b910edc070dcd28e110b8432d1d7bee67158d154db6381b4ed4ef39ff9ae22c1cdd8bf1bccf5182f439cad170f94e2fc0c90ee0ea269f6eb986567ca2b3ea2add71ee383733b74c24558894874d6c9a03d3452848552b3bdbdea569f64f6ed4de5ab515a1979315f95def283ba193ac456396a51cc5e2be20988", @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x20, 0x20008024}, 0x804) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e22, 0x4}}, 0x80, 0x0}, 0x0) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000680)=""/216, 0xd8}], 0x1, &(0x7f0000000300)=""/139, 0x8b}, 0x0) sendmsg$kcm(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="ed", 0x1}], 0x1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x2f, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x45}], 0x1, &(0x7f00000015c0)=ANY=[], 0x11f0}, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000001700)={r6, 0x1, 0x6, @link_local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="4e670497604ade85a1127b63cb18d11c2ba49fd732ecc5999031823bd26a4c9641e5ac429c36823b5d5154d8720e2bfe3e21a60ff9e41fcef355703f6ff512fc6d7253caf15ab08c942977bf"], 0x14}}, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x9}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x6c}}, 0x0) 3.068444019s ago: executing program 2 (id=469): r0 = socket$can_j1939(0x1d, 0x2, 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x54}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x30, r4, 0x201, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rpc_buf_alloc\x00', r5}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001500010300000080ca00020005"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x50f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_ENCODING_SA={0x5, 0x6, 0xff}]}}}]}, 0x48}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r12, &(0x7f00000007c0)}, 0x20) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000000000800000a0000000800050000000000080005000000000024000380080001"], 0x48}}, 0x0) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) 2.354974956s ago: executing program 1 (id=479): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) sendto$inet6(r0, &(0x7f0000000380)="a6b891f57f56fa7b70bf5c0263049f62a9d47b818a76956d03d09170ca537f67000000008b2cd360", 0x28, 0x0, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0x89, 0x4) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x2d4, 0x65, 0x0, 0x0, 0x0, {}, [@filter_kind_options=@f_u32={{0x8}, {0x54, 0x2, [@TCA_U32_INDEV={0x14, 0x8, 'veth0_to_team\x00'}, @TCA_U32_INDEV={0x14, 0x8, 'veth0\x00'}, @TCA_U32_HASH={0x8}, @TCA_U32_CLASSID={0x8}, @TCA_U32_MARK={0x10}, @TCA_U32_FLAGS={0x8}]}}, @TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0x238, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x198, 0x6, [@m_connmark={0xdc, 0x0, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_vlan={0xb8, 0x0, 0x0, 0x0, {{0x9}, {0x8c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PARMS={0x1c}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_ROUTE4_ACT={0x94, 0x6, [@m_ct={0x90, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x65, 0x6, "6c904efdd44487f25ae7f54fe5c7b24ba2795c18dff3c0db0fa699976584120f1b4387be6787b3eaf5c21cc57e79aa46c3c74dfe1b2e03e4bb1b79f50a11ac2f05b2c46369feb9e976e5099aa4b8b29d138cdd786e6959c2447faaf7b183ea1fff"}, {0xc}, {0xc}}}]}]}}]}, 0x2d4}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000b2000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b15, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2.326671304s ago: executing program 0 (id=480): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) unshare(0x6020400) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x8, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000080)) sendmmsg$alg(r2, &(0x7f0000001800)=[{0x0, 0x0, &(0x7f0000000340), 0x4c, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040)={0x6}, 0x4) recvmmsg(r2, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000640)=""/2, 0x2}], 0x1}}], 0x1, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x29, 0x17, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000030000008500000017000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.215220865s ago: executing program 0 (id=481): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5}, @NL80211_MESHCONF_PATH_REFRESH_TIME={0x8}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x13, 0x2, [{}, {0x5, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x7, 0x3}, {0x1, 0x3}, {0x5, 0x7}, {0x0, 0x5}, {0x5, 0x5}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x2}, {0x1, 0x6}, {0x4}, {0x1, 0x6}]}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}}, 0x805) 2.086693355s ago: executing program 1 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32d2e89f710900010073797a300000000034000000080a010100000000000000000100000008000940000000000900020073797a32000000000900010073797a30"], 0xa8}}, 0x0) 2.053485479s ago: executing program 0 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x107}, {&(0x7f0000000f00)="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", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723", 0x53}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1", 0xe3}, {&(0x7f0000000840)}, {0x0}, {&(0x7f0000000a40)}], 0x6}}], 0x4, 0x0) 1.867239886s ago: executing program 1 (id=486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x40e00, 0x6f, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x7, 0x0, 0x0) unshare(0x8040480) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES16=r0, @ANYRES16=r1], &(0x7f0000000340)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r9}, 0x38) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r4, @ANYRESHEX=0x0, @ANYRES8=r2], 0xb4}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4048051) socket$inet6(0xa, 0x806, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) socket$inet_smc(0x2b, 0x1, 0x0) 1.83299006s ago: executing program 4 (id=487): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES8], 0xb8}}, 0x0) 1.77701044s ago: executing program 4 (id=488): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) shutdown(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe800000"], 0x30}, 0x1, 0x0, 0x0, 0x637d02aa9d69e2f8}, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x1, r7, 0x2d}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000500)="4f4a1f4cbe18273e48da227b7bf8196f77de37cffafcba659355b4a23c186069412f9d473d876964e99ce6d84c5abbfb224b8380016f8cfd0bf1be6bfcfa4923b19098fc03a47e2a0e8ae6d415553baeedc8b2f68aaedf3b84a4d841ad6ecac962d790cfdfa0ba3cf3acd6a65d8ee067dc50dbb78a004fca07b4ef9a18cbb6634dce5ad68ab4557f0a8c231ca220e2868652553ff03f95af6921df0278ce74bbc13df24d66d19b437b38c857afa4707de58ae78ef9796f53a378f626ba4186c8e20dc0a17cf038b4e889994a3901", 0xce}], 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r11, 0x1, 0x70bd28, 0x0, {{0x8}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r13, 0x8008f512, &(0x7f0000000040)) 1.69551816s ago: executing program 1 (id=489): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0xf4, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0xdc}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 1.621882651s ago: executing program 1 (id=491): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x0, 0x7}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f00000000c0)={r4}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01080000000000000000010000000000000008410000006300180000ffff696200"/98], 0x68}}, 0x4008045) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000004c0)='sched_kthread_stop_ret\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@newqdisc={0xd4, 0x14, 0x200, 0x70bd2c, 0xfffffffe, {0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x1}, {0xe}}, [@TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2b, 0x0, 0x4, 0x0, 0x1, 0x4, 0x5, 0x5}}, {0xe, 0x2, [0x200, 0x0, 0x20, 0x800, 0xec3c]}}, {{0x1c, 0x1, {0x0, 0x8, 0x3, 0x8, 0x0, 0x0, 0x200, 0x7}}, {0x12, 0x2, [0x0, 0x3, 0x6, 0x0, 0x2, 0xf, 0x0]}}, {{0x1c, 0x1, {0x6, 0x5, 0x9e, 0x8001, 0x0, 0x0, 0x8, 0x5}}, {0xe, 0x2, [0xb2d, 0x8001, 0x7ff, 0x800, 0x0]}}, {{0x1c, 0x1, {0x2, 0x0, 0x0, 0x8, 0x1, 0x10001, 0x0, 0x2}}, {0x8, 0x2, [0x40, 0x0]}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3032, 0xffffffffffffffff, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) recvmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/195, 0xc3}, {&(0x7f0000000000)=""/37, 0x25}], 0x2, &(0x7f00000001c0)=""/164, 0xa4}, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x0, 0x401, 0xffffffff}, 0x48) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) 1.487435705s ago: executing program 4 (id=492): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'ipvlan1\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000010000305000000000000000001000000", @ANYRES32=0x0, @ANYBLOB="4c240500000000001c0012800b0001006d616373656300000c000280060002400000000008000500", @ANYRES32=r2], 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) 1.353208103s ago: executing program 4 (id=494): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000480)="d9528045f36c8bc63d0cf1816223719e08bcc17afc4305ff9cd6f2faefadb093eddd250e51f2f4d23508ba33e22a033c0569fc2fbe22f3e4de8cb9928ec94f71f655fdf671ce6b055b3e203dddc2135aaea3b2a8593faf4f3da4fb285dbb0a393064cea2d4992ce208168d1950042e8b0b4e54fc83f2edf2a4e857e7ec0267677e04", 0x82}, {&(0x7f0000000240)="08d454c29d26d0a61af3a67f7eab818c299618e46659b00e45a7aa79806e24e7aba03be198322b9e10b1fabcc3feb13cbac7c5ba4d0be2374551a7f9fb0d11a13893419a4f56b683f8a1c1072888d2778cb024bf0b8d0f17b539b4d64701be37d3a40b7c0bb7b9264b17", 0x6a}, {&(0x7f0000000600)="c887ebaabea682ca6ba4db45b5f1fbd0091cd6bdc79ddb69636e45dd4b95327d40f550be8f319aaf16b6ec2e048e986e03c70c291ebaf625d3e83dc0f7062d21df335c8e928aad690b658a0f146a28e6fef8a3813b855cede44e5bcda6d6f33e2f1710c39c6b38b1f1cff95e08ba64c86550009db7b3e2330198bdad5bec119a8a4c2005aa71f0081f23b2a72dc723ddcc2276b9eaf8e7dd82c4eaef699153b982a4c35a8ef1068ef20e42947080a8e39d1fa0b5c4ca82e90862d4375071314ab8e0ee59a18b36db6dd70b6fb9bae13c614324076f15bde02eabf782ca3132d75da1a5e532f7d826f8edf7607d7c89ea7f349876826b", 0xf6}, {&(0x7f0000000300)="abbedf3cb733800186f077a07d6bd5b0309caadb4cabf13e9b735e29a8e7bb2f449d2e7d8cdc", 0x26}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f00000003c0)="0bdfaf777afda5ceb32f", 0xa}, {&(0x7f0000000700)="688497d06c3dbacbf9795372cafa56640cc582453438ae7e698d0f288d89b23b1c8c1de612e907c3bd3205b5b67542f07ab367652838a9abb6b57e858f41f6f79342bda1b74b736153621b79c73eb2682de29a2aee5da2bd35ac04d2a83bea35ae55d6fc912581daaf036d3cc171c479ab6a29f34c81b56744085ccb1eea006488aa820ecb60eb38a66b26b445053c2e06e18ac2558031602e85a599de55f4dc5bdce7e486fcbb7b25e187692182", 0xae}], 0x7) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000feffff020000004c0001"], 0x60}}, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, &(0x7f0000000140)={0x1ff, 0xfb90}, 0x0, 0x0) clock_gettime(0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000980)=ANY=[@ANYBLOB='1D'], 0x31) ppoll(&(0x7f0000000180)=[{r3}, {r0}], 0x2, &(0x7f0000000100), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="44000000f7ffffffffffffff46da3ca29e6a7d85", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280060004000000000005000c0000000000"], 0x44}}, 0x0) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}}}, &(0x7f0000000780)=0x90) 1.080212551s ago: executing program 0 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRES32=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c9f4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75055df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83766b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b556381768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42ddd5f393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8dc0d472672286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8455029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a82a6ef09d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b420e74c6bcdf1ed0b306141a83bf1268e954ad069257fbfaa1a7ea582badc1a7f2a5b0965f3535872"], &(0x7f0000000100)='GPL\x00'}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="000005021a57790000000c0007809aaa945367a2860020f600000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r4, r2, 0x2f, 0x0, 0x0, @prog_fd}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup=r2, r4, 0x2f, 0x8, 0x4, @prog_id}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r6, 0x40107447, &(0x7f0000002a40)={0x2, &(0x7f00000007c0)=[{0x40}, {0x6}]}) write$ppp(r6, &(0x7f0000000900)='\x00\x00', 0x2) socket(0x8000000010, 0x2, 0x0) r7 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r7, 0x10d, 0x81, &(0x7f0000000980), &(0x7f0000000280)=0x4) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f00000005c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbc}, @printk={@lli}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) r11 = accept$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r11, 0x8983, &(0x7f0000000000)={0x6, 'team_slave_1\x00', {0xfffffff7}, 0x5}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="24005a8020000180140003000000000000000000000000000005"], 0x40}}, 0x0) 692.724226ms ago: executing program 1 (id=500): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) listen(r0, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x102, @loopback}]}, &(0x7f00000002c0)=0x10) 662.528887ms ago: executing program 3 (id=501): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 491.196396ms ago: executing program 3 (id=502): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) shutdown(r1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800010300000000000000000a800000000300070000000014000100fe800000"], 0x30}, 0x1, 0x0, 0x0, 0x637d02aa9d69e2f8}, 0x0) epoll_wait(r2, &(0x7f0000000140)=[{}, {}], 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000300)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x1, r7, 0x2d}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000500)="4f4a1f4cbe18273e48da227b7bf8196f77de37cffafcba659355b4a23c186069412f9d473d876964e99ce6d84c5abbfb224b8380016f8cfd0bf1be6bfcfa4923b19098fc03a47e2a0e8ae6d415553baeedc8b2f68aaedf3b84a4d841ad6ecac962d790cfdfa0ba3cf3acd6a65d8ee067dc50dbb78a004fca07b4ef9a18cbb6634dce5ad68ab4557f0a8c231ca220e2868652553ff03f95af6921df0278ce74bbc13df24d66d19b437b38c857afa4707de58ae78ef9796f53a378f626ba4186c8e20dc0a17cf038b4e889994a3901", 0xce}], 0x1, 0x0, 0x0, 0x8080}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r11, 0x1, 0x70bd28, 0x0, {{0x8}, {@val={0x8, 0x3, r12}, @void}}}, 0x1c}}, 0x0) r13 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r13, 0x8008f512, &(0x7f0000000040)) 429.937274ms ago: executing program 0 (id=503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r5}, 0x10) close(r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4e}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) close(r6) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000013000100"/20, @ANYRES8=r0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000018001a80080002"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r1}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='ext4_allocate_inode\x00', r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r5}, 0x10) (async) close(r2) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x4e}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) close(r6) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000013000100"/20, @ANYRES8=r0, @ANYBLOB="0000000000000000140003006772653000000000000000000000000018001a80080002"], 0x4c}}, 0x0) (async) 397.123427ms ago: executing program 4 (id=504): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r2, &(0x7f0000000340)={'#! ', './file0'}, 0xb) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000007c0)="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", 0x1f1}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000040), 0x3fffff) socket(0x10, 0x3, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f00000001c0)=0x5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="2400000068000100000000000000004927e61b42000a00000000000000eeff03", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x0) recvmmsg(r6, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000580)=""/15, 0xf}], 0x1}}], 0x1, 0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r8, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)=',\t', 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 304.87446ms ago: executing program 3 (id=505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=@newpolicy={0xb8, 0x13, 0x5, 0x0, 0x0, {{@in6=@dev, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x20, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x3000000}}}, 0xb8}}, 0x0) 207.214534ms ago: executing program 0 (id=506): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000ec850000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100101) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x43, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x0, 0xc, 0x1, 0x8, 0x51, 0xfffffffffffffffc}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x3}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5fd3}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x5}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}}, @map_idx={0x18, 0x2359476c92d35aa, 0x5, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2, 0x76, 0x6, 0x7, 0x10, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10, 0x80, 0x0, 0x9}}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x1, 0x8, 0x8, 0x86, 0xffffffffffffffff, 0xa3b6, '\x00', r4, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0x9}, 0x48) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x4, 0xd1, 0x604, r6, 0x7, '\x00', 0x0, r6, 0x2, 0x0, 0x0, 0x6}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x4788, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="5800000010000104f0ffffff000500000000fdff", @ANYRES32, @ANYBLOB="00000000da44000024001a8020000a8014000700fe"], 0x58}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000002680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000026c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000002700)={0x14, r7, 0x1, 0x703d2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)=@newlink={0x68, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x40400, 0xc9a9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}, @IFLA_XDP={0x2c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r3}, @IFLA_XDP_EXPECTED_FD={0x8, 0x8, r5}, @IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x1}, @IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x68}}, 0x58) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) epoll_create(0x8) 178.363148ms ago: executing program 3 (id=507): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="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", 0x107}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3a314f6c196d953bcaf1aff06d181d51662fdaa52e46d7905c0b4c632602c", 0x10f}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000003c0)="03d54d843173f8be883a57d9e39cc6c79c415ac50f3e1e9c9373002a5b1918", 0x1f}], 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="610cb4f6db2105b873df3f7652cc642b85afb69fc18178429903bb6e1ecd18186c48864c", 0x24}, {&(0x7f0000000180)="6fe279d51047ff146af40b78b8d7ae53db8648c2090d72bcfeaf6fabbbfbe8dbc8b8f4cb22ac43d5a0fa87533bb375454751b8dd8aae4808a37a7649b3", 0x3d}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723", 0x53}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="acc841985992b79554acfc02163bb0fb2bb293e68702bb40b6b870bde5700d368744361ae9fce3a4ff6bb3bf10f3485e399c8b59df5b02c5f2702522", 0x3c}, {&(0x7f0000000740)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2c691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b8016623d1863d7d77ceefde94faf2e36c3920581691a79a6678db1e5e7fa1ca703ee7aa87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c54e708601eae992", 0xd2}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472fd012198c3c61bb81e71ba62134303d2db9740143b0374a0d0be875789932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19645f7a1dcf1449fd34eecae5f52fba1e89d6d34b39297bbbc258c2ea547d47f2d89ad6e36e737691a1c6bdd164b2a85cbaaf648c910559f53581c60bd6c80f90c75f664e5b285c738881560f8ae89a4943141ac45fb6995cece6a2e0e62bd79213527a11c34a6e89ca41ead3e2589301279d9b0832d0b5a6ebe2cf0cbfa40ab948b0b9efe108aeded8d12388a459902261bb0d5ab83ed7ce81b8a59ef1", 0xe3}, {&(0x7f0000000840)}, {0x0}, {&(0x7f0000000a40)}], 0x6}}], 0x4, 0x0) 126.91551ms ago: executing program 4 (id=508): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES32], 0x0) socket(0x40000000015, 0x5, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004d0000480000000000069078ac141400ac1e0001830bdfac1414aa00000000440c05030000000600000000860600"/69, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50d7200090780000"], 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) socket$packet(0x11, 0x3, 0x300) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0x0, 0x0, 0x205fffff) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="14", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0a0009000180240b0000080008000b0000000000"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002cbd7000fbdbdf250e00000005002d0000000000000600", @ANYRES32=0x0, @ANYBLOB="0a000900aaaaaaaaaa220000050029000000000008002b00080000"], 0x48}, 0x1, 0x0, 0x0, 0x24004801}, 0x4000000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, &(0x7f0000000000)=""/63, &(0x7f0000000040)=0x3f) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0xc, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x2}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x2}}]}, {0x4}, {0xc, 0x3}, {0x22, 0x8, {0x3}}}}]}]}, 0xcc}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c00)=ANY=[@ANYBLOB="2c0000001000010800"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000800", @ANYRES32, @ANYBLOB="3232108547cb504b1b9e684a553fb10577adb38eef2db70a68e0d6c7df64b105b7185cb6b20acd0e7b0305eb14801ae1ee878195e002759d8bbf3feb2948fd97f85807527847095ed16da2c56bd446c1a9ec7bef334a95ff20fe37e8a07a1606a70e90e98750e4aeb2664f942922ad80f2f185175621cf7155752b6a63e1f87db1900f4c45dae22aac25c795952b25df8c8ce985ba6bbe850a499930fe39bca9d97e203856e45068c148ad2f276fc8a0b3c731bb72c4a0118429ddde89eed867d903c37668d7bf0eca3bd59d98c08aba9d30837b6830456201c679a1d66c696208ba1df95561d3b9a8279c26ee2b"], 0x2c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 104.615388ms ago: executing program 3 (id=509): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xb8}}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000040)=0x5, 0x4) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002", @ANYRES32=0x0, @ANYRES8], 0xb8}}, 0x0) 0s ago: executing program 3 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x844) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000940)='batadv_slave_1\x00', 0x10) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000080)="08001efb3e6f0000", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x844) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r3], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) socket$l2tp(0x2, 0x2, 0x73) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000540), 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x28011, r6, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000140)=""/81, &(0x7f0000000340)=0x51) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="11000000000000538ad5e017d3b8c70008000000800c00020000000000000000000c0004000000000000000000"], 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x8, 0x8}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x100000000000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 53.192444][ T5088] cgroup: Unknown subsys name 'net' [ 53.361981][ T5088] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.748583][ T5088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.482955][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.492444][ T5112] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.500354][ T5112] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.502049][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.508596][ T5112] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.522787][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.525152][ T5112] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.537578][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.537862][ T5112] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.553405][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.559872][ T5112] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.569395][ T5112] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.584601][ T5113] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.611246][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.619109][ T4494] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.626966][ T5113] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.634336][ T4494] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.643831][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.647590][ T5112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.660359][ T5108] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.669253][ T5112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.671903][ T5113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.696610][ T5112] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.704449][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.711871][ T5112] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.720376][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.727889][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.743527][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.756152][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.777018][ T4494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.036280][ T5098] chnl_net:caif_netlink_parms(): no params data found [ 59.227500][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 59.245209][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.253384][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.261207][ T5098] bridge_slave_0: entered allmulticast mode [ 59.268371][ T5098] bridge_slave_0: entered promiscuous mode [ 59.277210][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.284384][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.291695][ T5098] bridge_slave_1: entered allmulticast mode [ 59.298731][ T5098] bridge_slave_1: entered promiscuous mode [ 59.378259][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 59.418315][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.451831][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.541420][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.549103][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.557504][ T5102] bridge_slave_0: entered allmulticast mode [ 59.564666][ T5102] bridge_slave_0: entered promiscuous mode [ 59.572145][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.580013][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.587520][ T5102] bridge_slave_1: entered allmulticast mode [ 59.594550][ T5102] bridge_slave_1: entered promiscuous mode [ 59.612553][ T5098] team0: Port device team_slave_0 added [ 59.665404][ T5098] team0: Port device team_slave_1 added [ 59.673769][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.721851][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 59.731645][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.739020][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.746375][ T5107] bridge_slave_0: entered allmulticast mode [ 59.753075][ T5107] bridge_slave_0: entered promiscuous mode [ 59.762510][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.801822][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.811350][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.821168][ T5107] bridge_slave_1: entered allmulticast mode [ 59.830852][ T5107] bridge_slave_1: entered promiscuous mode [ 59.882832][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.889851][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.915990][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.929958][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.937158][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.963596][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.012017][ T5102] team0: Port device team_slave_0 added [ 60.039858][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.051441][ T5102] team0: Port device team_slave_1 added [ 60.079775][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.156515][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 60.168683][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.176147][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.202062][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.219000][ T5098] hsr_slave_0: entered promiscuous mode [ 60.225342][ T5098] hsr_slave_1: entered promiscuous mode [ 60.241471][ T5107] team0: Port device team_slave_0 added [ 60.259731][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.266753][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.292688][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.326163][ T5107] team0: Port device team_slave_1 added [ 60.367367][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.374892][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.382041][ T5100] bridge_slave_0: entered allmulticast mode [ 60.389513][ T5100] bridge_slave_0: entered promiscuous mode [ 60.427863][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.435176][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.442453][ T5100] bridge_slave_1: entered allmulticast mode [ 60.449468][ T5100] bridge_slave_1: entered promiscuous mode [ 60.479257][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.486291][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.512288][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.550478][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.557635][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.565297][ T5116] bridge_slave_0: entered allmulticast mode [ 60.572023][ T5116] bridge_slave_0: entered promiscuous mode [ 60.592081][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.599149][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.625284][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.654858][ T4494] Bluetooth: hci1: command tx timeout [ 60.657129][ T5108] Bluetooth: hci0: command tx timeout [ 60.673458][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.680768][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.688424][ T5116] bridge_slave_1: entered allmulticast mode [ 60.695572][ T5116] bridge_slave_1: entered promiscuous mode [ 60.704692][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.722981][ T5102] hsr_slave_0: entered promiscuous mode [ 60.730001][ T5102] hsr_slave_1: entered promiscuous mode [ 60.735887][ T5108] Bluetooth: hci2: command tx timeout [ 60.741639][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.749855][ T5102] Cannot create hsr debugfs directory [ 60.772485][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.814083][ T5108] Bluetooth: hci3: command tx timeout [ 60.814510][ T4494] Bluetooth: hci4: command tx timeout [ 60.847304][ T5100] team0: Port device team_slave_0 added [ 60.856939][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.880388][ T5107] hsr_slave_0: entered promiscuous mode [ 60.887176][ T5107] hsr_slave_1: entered promiscuous mode [ 60.893236][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.901231][ T5107] Cannot create hsr debugfs directory [ 60.927246][ T5100] team0: Port device team_slave_1 added [ 60.947199][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.027063][ T5116] team0: Port device team_slave_0 added [ 61.042347][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.049790][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.075792][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.088900][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.096013][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.122045][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.160247][ T5116] team0: Port device team_slave_1 added [ 61.256752][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.263725][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.290871][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.322316][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.329570][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.355708][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.382809][ T5100] hsr_slave_0: entered promiscuous mode [ 61.390411][ T5100] hsr_slave_1: entered promiscuous mode [ 61.396870][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.404653][ T5100] Cannot create hsr debugfs directory [ 61.527902][ T5116] hsr_slave_0: entered promiscuous mode [ 61.535427][ T5116] hsr_slave_1: entered promiscuous mode [ 61.541652][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.550514][ T5116] Cannot create hsr debugfs directory [ 61.636804][ T5098] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.649485][ T5098] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.675066][ T5098] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.690211][ T5098] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.817863][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.829359][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.860853][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.877597][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.952478][ T5102] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.966655][ T5102] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.977309][ T5102] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.995140][ T5102] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.079985][ T5100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 62.100813][ T5100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 62.133716][ T5100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 62.178456][ T5100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 62.208981][ T5116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.218596][ T5116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.232071][ T5116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.259545][ T5116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.330100][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.357552][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.402457][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.435661][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.442983][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.458518][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.465653][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.548290][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.583071][ T5151] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.590283][ T5151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.622222][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.648696][ T5107] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.659580][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.673011][ T5151] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.680154][ T5151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.735362][ T4494] Bluetooth: hci0: command tx timeout [ 62.739350][ T5108] Bluetooth: hci1: command tx timeout [ 62.768583][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.798295][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.814958][ T5108] Bluetooth: hci2: command tx timeout [ 62.880656][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.894376][ T5108] Bluetooth: hci4: command tx timeout [ 62.899844][ T5108] Bluetooth: hci3: command tx timeout [ 62.907974][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.915164][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.926720][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.933933][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.996793][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.016433][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.053487][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.060736][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.080718][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.087945][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.119639][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.132051][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.139256][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.150581][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.157779][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.269959][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.319780][ T5100] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 63.340496][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 63.375733][ T5107] veth0_vlan: entered promiscuous mode [ 63.423292][ T5107] veth1_vlan: entered promiscuous mode [ 63.529529][ T5098] veth0_vlan: entered promiscuous mode [ 63.583272][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.611312][ T5098] veth1_vlan: entered promiscuous mode [ 63.635895][ T5107] veth0_macvtap: entered promiscuous mode [ 63.647403][ T5107] veth1_macvtap: entered promiscuous mode [ 63.778563][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.790775][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.807499][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.827879][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.837145][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.847322][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.856425][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.906993][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.952438][ T5102] veth0_vlan: entered promiscuous mode [ 63.961091][ T5098] veth0_macvtap: entered promiscuous mode [ 64.037759][ T5102] veth1_vlan: entered promiscuous mode [ 64.051224][ T5098] veth1_macvtap: entered promiscuous mode [ 64.107424][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.119017][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.131007][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.151417][ T5116] veth0_vlan: entered promiscuous mode [ 64.220258][ T5116] veth1_vlan: entered promiscuous mode [ 64.231115][ T5102] veth0_macvtap: entered promiscuous mode [ 64.242225][ T5102] veth1_macvtap: entered promiscuous mode [ 64.251069][ T5098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.272312][ T5098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.284707][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.304429][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.312479][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.323399][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.335994][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.346212][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.357209][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.368361][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.383689][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.394889][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.405179][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.417183][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.428349][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.443143][ T5098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.452062][ T5098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.461653][ T5098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.472000][ T5098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.506052][ T5102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.516626][ T5102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.525794][ T5102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.534668][ T5102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.565430][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.573512][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.677424][ T5100] veth0_vlan: entered promiscuous mode [ 64.690380][ T5116] veth0_macvtap: entered promiscuous mode [ 64.722718][ T5116] veth1_macvtap: entered promiscuous mode [ 64.752870][ T5100] veth1_vlan: entered promiscuous mode [ 64.814660][ T5108] Bluetooth: hci0: command tx timeout [ 64.814887][ T4494] Bluetooth: hci1: command tx timeout [ 64.840971][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.847284][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.853022][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.871743][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.882356][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.893078][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.904484][ T4494] Bluetooth: hci2: command tx timeout [ 64.910273][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.920546][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.921883][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.944993][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.964175][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.975491][ T4494] Bluetooth: hci3: command tx timeout [ 64.980938][ T4494] Bluetooth: hci4: command tx timeout [ 65.012032][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.022991][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.033119][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.043661][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.055651][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.069586][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.089798][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.115156][ T5116] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.145076][ T5116] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.153821][ T5116] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.170886][ T5116] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.203720][ T5100] veth0_macvtap: entered promiscuous mode [ 65.234878][ T2381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.248579][ T2381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.282918][ T5100] veth1_macvtap: entered promiscuous mode [ 65.378711][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.396731][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.410656][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.411654][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.420859][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.441576][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.451596][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.462136][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.472130][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.483386][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.502690][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.556564][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.576702][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.590150][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.606681][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.621973][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.633830][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.644523][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.655229][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.666652][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.683036][ T5100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.692087][ T5100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.705495][ T5100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.714412][ T5100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.791083][ T5203] wg1 speed is unknown, defaulting to 1000 [ 65.807753][ T5203] wg1 speed is unknown, defaulting to 1000 [ 65.808808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.850939][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.922677][ T5203] wg1 speed is unknown, defaulting to 1000 [ 66.019106][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.041045][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.125488][ T5213] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744071562067968) [ 66.169855][ T5213] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 66.197282][ T2445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.231697][ T2445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.373497][ T5203] infiniband syz1: set active [ 66.381223][ T5203] infiniband syz1: added wg1 [ 66.498901][ T5203] RDS/IB: syz1: added [ 66.508651][ T5203] smc: adding ib device syz1 with port count 1 [ 66.516078][ T5203] smc: ib device syz1 port 1 has pnetid [ 66.524569][ T5150] wg1 speed is unknown, defaulting to 1000 [ 66.896164][ T4494] Bluetooth: hci0: command tx timeout [ 66.905569][ T4494] Bluetooth: hci1: command tx timeout [ 66.974452][ T4494] Bluetooth: hci2: command tx timeout [ 67.054400][ T5108] Bluetooth: hci4: command tx timeout [ 67.059920][ T4494] Bluetooth: hci3: command tx timeout [ 67.443622][ T927] wg1 speed is unknown, defaulting to 1000 [ 67.477836][ T5203] wg1 speed is unknown, defaulting to 1000 [ 67.506987][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.573142][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.637443][ T5230] syz.2.14: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 67.723670][ T5230] CPU: 1 PID: 5230 Comm: syz.2.14 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 67.733359][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 67.743447][ T5230] Call Trace: [ 67.746752][ T5230] [ 67.749703][ T5230] dump_stack_lvl+0x241/0x360 [ 67.754433][ T5230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.759653][ T5230] ? __pfx__printk+0x10/0x10 [ 67.764268][ T5230] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 67.770706][ T5230] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 67.777246][ T5230] warn_alloc+0x278/0x410 [ 67.781597][ T5230] ? stack_depot_save_flags+0x6e4/0x830 [ 67.787171][ T5230] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 67.793272][ T5230] ? __pfx_warn_alloc+0x10/0x10 [ 67.798157][ T5230] ? kasan_save_track+0x3f/0x80 [ 67.803025][ T5230] ? __kasan_kmalloc+0x98/0xb0 [ 67.807798][ T5230] ? xsk_setsockopt+0x4ea/0x950 [ 67.812646][ T5230] ? do_sock_setsockopt+0x3af/0x720 [ 67.817844][ T5230] ? __sys_setsockopt+0x1ae/0x250 [ 67.822860][ T5230] ? __x64_sys_setsockopt+0xb5/0xd0 [ 67.828067][ T5230] ? do_syscall_64+0xf3/0x230 [ 67.832737][ T5230] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.838810][ T5230] __vmalloc_node_range_noprof+0x130/0x1460 [ 67.844723][ T5230] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 67.851061][ T5230] ? __kasan_kmalloc+0x98/0xb0 [ 67.855819][ T5230] ? xskq_create+0x54/0x170 [ 67.860316][ T5230] vmalloc_user_noprof+0x74/0x80 [ 67.865255][ T5230] ? xskq_create+0xb6/0x170 [ 67.869748][ T5230] xskq_create+0xb6/0x170 [ 67.874071][ T5230] xsk_init_queue+0xa1/0x100 [ 67.878655][ T5230] xsk_setsockopt+0x4ea/0x950 [ 67.883321][ T5230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 67.888515][ T5230] ? __pfx_lock_acquire+0x10/0x10 [ 67.893531][ T5230] ? aa_sock_opt_perm+0x79/0x120 [ 67.898465][ T5230] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 67.904011][ T5230] ? security_socket_setsockopt+0x87/0xb0 [ 67.909730][ T5230] ? __pfx_xsk_setsockopt+0x10/0x10 [ 67.914919][ T5230] do_sock_setsockopt+0x3af/0x720 [ 67.919946][ T5230] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 67.925480][ T5230] ? __fget_files+0x29/0x470 [ 67.930061][ T5230] ? __fget_files+0x3f6/0x470 [ 67.934743][ T5230] __sys_setsockopt+0x1ae/0x250 [ 67.939592][ T5230] __x64_sys_setsockopt+0xb5/0xd0 [ 67.944611][ T5230] do_syscall_64+0xf3/0x230 [ 67.949109][ T5230] ? clear_bhb_loop+0x35/0x90 [ 67.953778][ T5230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.959676][ T5230] RIP: 0033:0x7f86d1f75f19 [ 67.964091][ T5230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.983693][ T5230] RSP: 002b:00007f86d2d4f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 67.992104][ T5230] RAX: ffffffffffffffda RBX: 00007f86d2105f60 RCX: 00007f86d1f75f19 [ 68.000070][ T5230] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 68.008037][ T5230] RBP: 00007f86d1fe4e68 R08: 0000000000000004 R09: 0000000000000000 [ 68.016002][ T5230] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.023964][ T5230] R13: 000000000000000b R14: 00007f86d2105f60 R15: 00007ffd2e7c69a8 [ 68.031945][ T5230] [ 68.085490][ T5230] Mem-Info: [ 68.088648][ T5230] active_anon:4075 inactive_anon:0 isolated_anon:0 [ 68.088648][ T5230] active_file:1083 inactive_file:38126 isolated_file:0 [ 68.088648][ T5230] unevictable:768 dirty:257 writeback:0 [ 68.088648][ T5230] slab_reclaimable:8545 slab_unreclaimable:93886 [ 68.088648][ T5230] mapped:13142 shmem:1242 pagetables:676 [ 68.088648][ T5230] sec_pagetables:0 bounce:0 [ 68.088648][ T5230] kernel_misc_reclaimable:0 [ 68.088648][ T5230] free:1414072 free_pcp:1079 free_cma:0 [ 68.209304][ T5230] Node 0 active_anon:16400kB inactive_anon:0kB active_file:4332kB inactive_file:152440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:52568kB dirty:1028kB writeback:0kB shmem:3432kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9864kB pagetables:2804kB sec_pagetables:0kB all_unreclaimable? no [ 68.212846][ T5241] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 68.258423][ T5242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.280630][ T5230] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 68.319646][ T5230] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.350518][ T5230] lowmem_reserve[]: 0 2571 2571 0 0 [ 68.385168][ T5237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.420642][ T5241] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18'. [ 68.429853][ T5230] Node 0 DMA32 free:1694732kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:16512kB inactive_anon:0kB active_file:4360kB inactive_file:152128kB unevictable:1536kB writepending:1076kB present:3129332kB managed:2659812kB mlocked:0kB bounce:0kB free_pcp:1216kB local_pcp:244kB free_cma:0kB [ 68.429937][ T5230] lowmem_reserve[]: 0 0 0 0 0 [ 68.429981][ T5230] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.430029][ T5230] lowmem_reserve[]: 0 0 0 0 0 [ 68.430070][ T5230] Node 1 Normal free:3945420kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:64kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:2120kB local_pcp:276kB free_cma:0kB [ 68.430123][ T5230] lowmem_reserve[]: 0 0 0 0 0 [ 68.430166][ T5230] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 68.430355][ T5230] Node 0 DMA32: 7*4kB (M) 292*8kB (UME) 82*16kB (UME) [ 68.547952][ T5237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.580829][ T5203] wg1 speed is unknown, defaulting to 1000 [ 68.625367][ T5230] 137*32kB (UME) 68*64kB (UME) 7*128kB (UE) 2*256kB (UM) 1*512kB (E) 3*1024kB (ME) 3*2048kB (UM) 408*4096kB (M) = 1694716kB [ 68.641900][ T5230] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 68.761911][ T5230] Node 1 Normal: 1*4kB (U) 2*8kB (U) 2*16kB (U) 2*32kB (U) 5*64kB (UM) 5*128kB (U) 4*256kB (UM) 2*512kB (UM) 4*1024kB (U) 1*2048kB (U) 961*4096kB (M) = 3945524kB [ 68.790783][ T5253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 68.808260][ T5230] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.838382][ T5230] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.855326][ T5248] Bluetooth: MGMT ver 1.23 [ 68.875125][ T5230] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 68.894727][ T5230] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 68.911320][ T5230] 41060 total pagecache pages [ 68.925839][ T5230] 0 pages in swap cache [ 68.935750][ T5230] Free swap = 124996kB [ 68.946141][ T5230] Total swap = 124996kB [ 68.954259][ T5230] 2097051 pages RAM [ 68.962614][ T5230] 0 pages HighMem/MovableOnly [ 68.977578][ T5230] 400888 pages reserved [ 68.986264][ T5230] 0 pages cma reserved [ 69.064677][ T5203] wg1 speed is unknown, defaulting to 1000 [ 69.355471][ T5263] netlink: 172 bytes leftover after parsing attributes in process `syz.4.22'. [ 69.583068][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.22'. [ 69.720232][ T5203] wg1 speed is unknown, defaulting to 1000 [ 70.253084][ T5203] wg1 speed is unknown, defaulting to 1000 [ 70.692708][ T5295] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.877545][ T5303] netlink: 60 bytes leftover after parsing attributes in process `syz.4.35'. [ 71.058013][ T5309] netlink: 'syz.4.37': attribute type 3 has an invalid length. [ 71.087431][ T5307] netlink: 'syz.1.36': attribute type 1 has an invalid length. [ 71.119484][ T5307] netlink: 'syz.1.36': attribute type 2 has an invalid length. [ 71.151473][ T5307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.36'. [ 71.595200][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.630290][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.730307][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 71.780652][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.800269][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.925895][ T5346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.51'. [ 71.947387][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 72.002273][ T5351] netlink: 'syz.2.53': attribute type 3 has an invalid length. [ 72.035036][ T5351] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.53'. [ 72.451058][ T5365] netlink: 'syz.0.55': attribute type 3 has an invalid length. [ 72.641846][ T5372] netlink: 'syz.3.59': attribute type 21 has an invalid length. [ 72.738798][ T5372] netlink: 'syz.3.59': attribute type 4 has an invalid length. [ 72.971646][ T5390] FAULT_INJECTION: forcing a failure. [ 72.971646][ T5390] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.990721][ T5390] CPU: 0 PID: 5390 Comm: syz.2.65 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 73.000316][ T5390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 73.010399][ T5390] Call Trace: [ 73.013710][ T5390] [ 73.016653][ T5390] dump_stack_lvl+0x241/0x360 [ 73.021359][ T5390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.026661][ T5390] ? __pfx__printk+0x10/0x10 [ 73.031270][ T5390] ? __pfx_lock_release+0x10/0x10 [ 73.036323][ T5390] should_fail_ex+0x3b0/0x4e0 [ 73.041028][ T5390] _copy_from_iter+0x1f6/0x1960 [ 73.045902][ T5390] ? __virt_addr_valid+0x183/0x530 [ 73.051059][ T5390] ? __pfx_lock_release+0x10/0x10 [ 73.056123][ T5390] ? __alloc_skb+0x28f/0x440 [ 73.060746][ T5390] ? __pfx__copy_from_iter+0x10/0x10 [ 73.066060][ T5390] ? __virt_addr_valid+0x183/0x530 [ 73.071298][ T5390] ? __virt_addr_valid+0x183/0x530 [ 73.076441][ T5390] ? __virt_addr_valid+0x45f/0x530 [ 73.081578][ T5390] ? __check_object_size+0x49c/0x900 [ 73.086886][ T5390] netlink_sendmsg+0x73d/0xcb0 [ 73.091683][ T5390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.096997][ T5390] ? __import_iovec+0x536/0x820 [ 73.101869][ T5390] ? aa_sock_msg_perm+0x91/0x160 [ 73.106836][ T5390] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.112136][ T5390] ? security_socket_sendmsg+0x87/0xb0 [ 73.117645][ T5390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.122953][ T5390] __sock_sendmsg+0x221/0x270 [ 73.127659][ T5390] ____sys_sendmsg+0x525/0x7d0 [ 73.132457][ T5390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.137778][ T5390] __sys_sendmsg+0x2b0/0x3a0 [ 73.142397][ T5390] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.147528][ T5390] ? vfs_write+0x7c4/0xc90 [ 73.152008][ T5390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.158359][ T5390] ? do_syscall_64+0x100/0x230 [ 73.163144][ T5390] ? do_syscall_64+0xb6/0x230 [ 73.167850][ T5390] do_syscall_64+0xf3/0x230 [ 73.172366][ T5390] ? clear_bhb_loop+0x35/0x90 [ 73.177065][ T5390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.182988][ T5390] RIP: 0033:0x7f86d1f75f19 [ 73.187417][ T5390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.207051][ T5390] RSP: 002b:00007f86d2d4f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.215492][ T5390] RAX: ffffffffffffffda RBX: 00007f86d2105f60 RCX: 00007f86d1f75f19 [ 73.223501][ T5390] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 73.231497][ T5390] RBP: 00007f86d2d4f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 73.239488][ T5390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.247478][ T5390] R13: 000000000000000b R14: 00007f86d2105f60 R15: 00007ffd2e7c69a8 [ 73.255498][ T5390] [ 73.507858][ T5402] netlink: 'syz.2.67': attribute type 3 has an invalid length. [ 73.574325][ T5402] __nla_validate_parse: 4 callbacks suppressed [ 73.574344][ T5402] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.67'. [ 74.063764][ T5425] warning: `syz.3.76' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.089198][ T5425] netlink: 40 bytes leftover after parsing attributes in process `syz.3.76'. [ 74.243507][ T5432] netlink: 172 bytes leftover after parsing attributes in process `syz.4.80'. [ 74.402755][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.80'. [ 74.755403][ T5446] ip6gretap0: entered promiscuous mode [ 74.780756][ T5446] bridge0: entered promiscuous mode [ 75.429016][ T5478] netlink: 28 bytes leftover after parsing attributes in process `syz.4.93'. [ 75.607582][ T5487] netlink: 209840 bytes leftover after parsing attributes in process `syz.3.94'. [ 75.717758][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.94'. [ 75.923814][ T5501] netlink: 172 bytes leftover after parsing attributes in process `syz.2.99'. [ 76.143991][ T5511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 76.244650][ T5515] netlink: 'syz.4.106': attribute type 4 has an invalid length. [ 76.276906][ T5518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 76.913679][ T8] cfg80211: failed to load regulatory.db [ 77.386588][ T5554] netlink: 'syz.3.119': attribute type 3 has an invalid length. [ 77.443203][ T5555] netlink: 'syz.1.120': attribute type 1 has an invalid length. [ 78.006104][ T5582] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.018874][ T5573] FAULT_INJECTION: forcing a failure. [ 78.018874][ T5573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 78.073561][ T5573] CPU: 1 PID: 5573 Comm: syz.1.125 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 78.083264][ T5573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 78.093349][ T5573] Call Trace: [ 78.096659][ T5573] [ 78.097600][ T5584] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 78.099591][ T5573] dump_stack_lvl+0x241/0x360 [ 78.099639][ T5573] ? __pfx_dump_stack_lvl+0x10/0x10 [ 78.117132][ T5573] ? __pfx__printk+0x10/0x10 [ 78.121750][ T5573] ? snprintf+0xda/0x120 [ 78.126022][ T5573] should_fail_ex+0x3b0/0x4e0 [ 78.130732][ T5573] _copy_to_user+0x2f/0xb0 [ 78.135184][ T5573] simple_read_from_buffer+0xca/0x150 [ 78.140586][ T5573] proc_fail_nth_read+0x1e9/0x250 [ 78.145648][ T5573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.151218][ T5573] ? rw_verify_area+0x520/0x6b0 [ 78.156096][ T5573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 78.160056][ T5584] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 78.161648][ T5573] vfs_read+0x204/0xbc0 [ 78.173432][ T5573] ? __pfx_lock_release+0x10/0x10 [ 78.178492][ T5573] ? __pfx_vfs_read+0x10/0x10 [ 78.183191][ T5573] ? __fget_files+0x29/0x470 [ 78.187802][ T5573] ? __fget_files+0x3f6/0x470 [ 78.192504][ T5573] ksys_read+0x1a0/0x2c0 [ 78.196763][ T5573] ? __pfx_ksys_read+0x10/0x10 [ 78.201636][ T5573] ? do_syscall_64+0x100/0x230 [ 78.206431][ T5573] ? do_syscall_64+0xb6/0x230 [ 78.210211][ T5584] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 78.211112][ T5573] do_syscall_64+0xf3/0x230 [ 78.211138][ T5573] ? clear_bhb_loop+0x35/0x90 [ 78.227940][ T5573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.233866][ T5573] RIP: 0033:0x7fd7f61749fc [ 78.238299][ T5573] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 78.257933][ T5573] RSP: 002b:00007fd7f6f8d040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 78.266381][ T5573] RAX: ffffffffffffffda RBX: 00007fd7f6305f60 RCX: 00007fd7f61749fc [ 78.274364][ T5573] RDX: 000000000000000f RSI: 00007fd7f6f8d0b0 RDI: 000000000000000b [ 78.282353][ T5573] RBP: 00007fd7f6f8d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 78.282826][ T5584] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 78.290321][ T5573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.290336][ T5573] R13: 000000000000000b R14: 00007fd7f6305f60 R15: 00007ffd0dc81ce8 [ 78.290378][ T5573] [ 78.317041][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.344059][ T5584] netlink: 'syz.4.128': attribute type 2 has an invalid length. [ 78.357645][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.377557][ T5584] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 78.385372][ T5584] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 78.558513][ T5602] ip6gre1: entered allmulticast mode [ 78.869943][ T5604] __nla_validate_parse: 7 callbacks suppressed [ 78.869962][ T5604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 79.320043][ T5625] Zero length message leads to an empty skb [ 79.359569][ T5630] Cannot find set identified by id 0 to match [ 79.616179][ T5641] syz.3.145 uses obsolete (PF_INET,SOCK_PACKET) [ 79.643760][ T5634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.716378][ T5642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.733256][ T5652] FAULT_INJECTION: forcing a failure. [ 79.733256][ T5652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.749363][ T5634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.782116][ T5652] CPU: 0 PID: 5652 Comm: syz.2.148 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 79.791807][ T5652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 79.801887][ T5652] Call Trace: [ 79.805186][ T5652] [ 79.808136][ T5652] dump_stack_lvl+0x241/0x360 [ 79.812841][ T5652] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.818072][ T5652] ? __pfx__printk+0x10/0x10 [ 79.822693][ T5652] ? __pfx_lock_release+0x10/0x10 [ 79.827755][ T5652] should_fail_ex+0x3b0/0x4e0 [ 79.832467][ T5652] _copy_from_user+0x2f/0xe0 [ 79.837093][ T5652] csum_and_copy_from_iter_full+0x4eb/0x1df0 [ 79.843122][ T5652] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 79.849574][ T5652] ? alloc_pages_mpol_noprof+0x417/0x680 [ 79.855250][ T5652] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 79.861270][ T5652] ip_generic_getfrag+0x158/0x310 [ 79.866333][ T5652] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 79.871908][ T5652] ? raw6_getfrag+0x104/0x350 [ 79.876635][ T5652] __ip6_append_data+0x1eef/0x4070 [ 79.881805][ T5652] ? __pfx_raw6_getfrag+0x10/0x10 [ 79.886878][ T5652] ? __pfx___ip6_append_data+0x10/0x10 [ 79.892368][ T5652] ? ip6_setup_cork+0x9fd/0xfb0 [ 79.897249][ T5652] ip6_append_data+0x264/0x3a0 [ 79.902043][ T5652] ? __pfx_raw6_getfrag+0x10/0x10 [ 79.907097][ T5652] rawv6_sendmsg+0x18f1/0x23c0 [ 79.911925][ T5652] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 79.917079][ T5652] ? aa_sk_perm+0x967/0xab0 [ 79.921622][ T5652] ? __pfx_lock_release+0x10/0x10 [ 79.926678][ T5652] ? inet_sendmsg+0x330/0x390 [ 79.931383][ T5652] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 79.936732][ T5652] ? security_socket_sendmsg+0x87/0xb0 [ 79.942227][ T5652] __sock_sendmsg+0x1a6/0x270 [ 79.946942][ T5652] ____sys_sendmsg+0x525/0x7d0 [ 79.951747][ T5652] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.957090][ T5652] __sys_sendmsg+0x2b0/0x3a0 [ 79.961709][ T5652] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.966855][ T5652] ? vfs_write+0x7c4/0xc90 [ 79.971346][ T5652] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.977702][ T5652] ? do_syscall_64+0x100/0x230 [ 79.982492][ T5652] ? do_syscall_64+0xb6/0x230 [ 79.987199][ T5652] do_syscall_64+0xf3/0x230 [ 79.991730][ T5652] ? clear_bhb_loop+0x35/0x90 [ 79.996439][ T5652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.002362][ T5652] RIP: 0033:0x7f86d1f75f19 [ 80.006798][ T5652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 80.026431][ T5652] RSP: 002b:00007f86d2d4f048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 80.034880][ T5652] RAX: ffffffffffffffda RBX: 00007f86d2105f60 RCX: 00007f86d1f75f19 [ 80.042880][ T5652] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 80.050888][ T5652] RBP: 00007f86d2d4f0a0 R08: 0000000000000000 R09: 0000000000000000 [ 80.058885][ T5652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 80.066890][ T5652] R13: 000000000000000b R14: 00007f86d2105f60 R15: 00007ffd2e7c69a8 [ 80.074911][ T5652] [ 80.888750][ T5686] FAULT_INJECTION: forcing a failure. [ 80.888750][ T5686] name failslab, interval 1, probability 0, space 0, times 0 [ 80.916805][ T5686] CPU: 0 PID: 5686 Comm: syz.1.157 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 80.926494][ T5686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 80.936544][ T5686] Call Trace: [ 80.939816][ T5686] [ 80.942750][ T5686] dump_stack_lvl+0x241/0x360 [ 80.947430][ T5686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.952620][ T5686] ? __pfx__printk+0x10/0x10 [ 80.957214][ T5686] should_fail_ex+0x3b0/0x4e0 [ 80.961888][ T5686] ? sctp_add_bind_addr+0x89/0x3a0 [ 80.967024][ T5686] should_failslab+0x9/0x20 [ 80.971542][ T5686] __kmalloc_cache_noprof+0x6c/0x2c0 [ 80.976832][ T5686] ? __pfx__get_random_bytes+0x10/0x10 [ 80.982293][ T5686] sctp_add_bind_addr+0x89/0x3a0 [ 80.987230][ T5686] sctp_copy_local_addr_list+0x311/0x500 [ 80.992867][ T5686] ? sctp_copy_local_addr_list+0xab/0x500 [ 80.998590][ T5686] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 81.004742][ T5686] ? sctp_v6_is_any+0x60/0x70 [ 81.009420][ T5686] sctp_bind_addr_copy+0xad/0x3b0 [ 81.014440][ T5686] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 81.020762][ T5686] sctp_connect_new_asoc+0x2f3/0x6c0 [ 81.026042][ T5686] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 81.031846][ T5686] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 81.037641][ T5686] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 81.043524][ T5686] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 81.049323][ T5686] __sctp_connect+0x66d/0xe30 [ 81.054003][ T5686] ? __pfx___sctp_connect+0x10/0x10 [ 81.059194][ T5686] ? __might_fault+0xc6/0x120 [ 81.063871][ T5686] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 81.069414][ T5686] ? security_sctp_bind_connect+0x90/0xb0 [ 81.075130][ T5686] sctp_getsockopt_connectx3+0x46f/0x730 [ 81.080757][ T5686] ? __local_bh_enable_ip+0x168/0x200 [ 81.086214][ T5686] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 81.092361][ T5686] ? __local_bh_enable_ip+0x168/0x200 [ 81.098255][ T5686] ? sctp_getsockopt+0x13a/0xbb0 [ 81.103183][ T5686] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 81.108906][ T5686] sctp_getsockopt+0x8de/0xbb0 [ 81.113666][ T5686] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 81.119554][ T5686] do_sock_getsockopt+0x373/0x850 [ 81.124584][ T5686] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 81.130221][ T5686] ? __fget_files+0x3f6/0x470 [ 81.134898][ T5686] __sys_getsockopt+0x271/0x330 [ 81.139748][ T5686] ? __pfx___sys_getsockopt+0x10/0x10 [ 81.145117][ T5686] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.151439][ T5686] ? do_syscall_64+0x100/0x230 [ 81.156201][ T5686] __x64_sys_getsockopt+0xb5/0xd0 [ 81.161226][ T5686] do_syscall_64+0xf3/0x230 [ 81.165724][ T5686] ? clear_bhb_loop+0x35/0x90 [ 81.170398][ T5686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.176286][ T5686] RIP: 0033:0x7fd7f6175f19 [ 81.180695][ T5686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.200299][ T5686] RSP: 002b:00007fd7f6f6c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 81.208710][ T5686] RAX: ffffffffffffffda RBX: 00007fd7f6306038 RCX: 00007fd7f6175f19 [ 81.216675][ T5686] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 81.224652][ T5686] RBP: 00007fd7f6f6c0a0 R08: 00000000200002c0 R09: 0000000000000000 [ 81.232611][ T5686] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 81.240584][ T5686] R13: 000000000000006e R14: 00007fd7f6306038 R15: 00007ffd0dc81ce8 [ 81.248650][ T5686] [ 81.433785][ T5697] netlink: 104 bytes leftover after parsing attributes in process `syz.3.162'. [ 81.502661][ C0] eth0: bad gso: type: 1, size: 1408 [ 81.741503][ T5714] netlink: 'syz.2.167': attribute type 3 has an invalid length. [ 81.766251][ T5714] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.167'. [ 81.821164][ T5709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.167'. [ 81.832493][ T5719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.849702][ T5709] netlink: 12 bytes leftover after parsing attributes in process `syz.2.167'. [ 81.947275][ T5710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.999879][ T5712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.880092][ T5766] netlink: 'syz.0.182': attribute type 3 has an invalid length. [ 82.894224][ T5766] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.182'. [ 82.912604][ T5766] netlink: 28 bytes leftover after parsing attributes in process `syz.0.182'. [ 82.922193][ T5766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 83.507534][ T5791] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 83.542707][ T5796] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.584465][ T5791] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 83.604062][ T5791] netlink: 7096 bytes leftover after parsing attributes in process `syz.0.189'. [ 83.626844][ T5791] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 83.945412][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.0.195'. [ 84.002585][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.057387][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.443805][ T5839] netlink: 'syz.3.207': attribute type 1 has an invalid length. [ 84.468204][ T5839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.207'. [ 84.515884][ T5844] ip6gre2: entered allmulticast mode [ 84.820956][ T5858] netlink: 204 bytes leftover after parsing attributes in process `syz.0.213'. [ 84.842407][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.214'. [ 84.885742][ T5865] netlink: 'syz.3.211': attribute type 3 has an invalid length. [ 84.914366][ T5865] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.936376][ T5870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.211'. [ 84.950489][ T5871] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'. [ 84.960786][ T5870] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 85.455922][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 85.526427][ T5895] FAULT_INJECTION: forcing a failure. [ 85.526427][ T5895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 85.553583][ T5895] CPU: 0 PID: 5895 Comm: syz.0.223 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 85.563447][ T5895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 85.573529][ T5895] Call Trace: [ 85.576919][ T5895] [ 85.579875][ T5895] dump_stack_lvl+0x241/0x360 [ 85.584761][ T5895] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.589992][ T5895] ? __pfx__printk+0x10/0x10 [ 85.594621][ T5895] ? __pfx_lock_release+0x10/0x10 [ 85.599788][ T5895] should_fail_ex+0x3b0/0x4e0 [ 85.604508][ T5895] _copy_from_user+0x2f/0xe0 [ 85.609152][ T5895] csum_and_copy_from_iter_full+0x4eb/0x1df0 [ 85.615192][ T5895] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 85.621658][ T5895] ? alloc_pages_mpol_noprof+0x417/0x680 [ 85.627596][ T5895] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 85.633616][ T5895] ip_generic_getfrag+0x158/0x310 [ 85.638682][ T5895] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 85.644260][ T5895] ? raw6_getfrag+0x104/0x350 [ 85.648983][ T5895] __ip6_append_data+0x1eef/0x4070 [ 85.654170][ T5895] ? __pfx_raw6_getfrag+0x10/0x10 [ 85.659407][ T5895] ? __pfx___ip6_append_data+0x10/0x10 [ 85.664870][ T5895] ? ip6_setup_cork+0x9fd/0xfb0 [ 85.669722][ T5895] ip6_append_data+0x264/0x3a0 [ 85.674495][ T5895] ? __pfx_raw6_getfrag+0x10/0x10 [ 85.679515][ T5895] rawv6_sendmsg+0x18f1/0x23c0 [ 85.684323][ T5895] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 85.689440][ T5895] ? aa_sk_perm+0x967/0xab0 [ 85.694123][ T5895] ? __pfx_lock_release+0x10/0x10 [ 85.699149][ T5895] ? inet_sendmsg+0x330/0x390 [ 85.703822][ T5895] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 85.709111][ T5895] ? security_socket_sendmsg+0x87/0xb0 [ 85.714575][ T5895] __sock_sendmsg+0x1a6/0x270 [ 85.719249][ T5895] ____sys_sendmsg+0x525/0x7d0 [ 85.724026][ T5895] ? __pfx_____sys_sendmsg+0x10/0x10 [ 85.729320][ T5895] __sys_sendmsg+0x2b0/0x3a0 [ 85.733903][ T5895] ? __pfx___sys_sendmsg+0x10/0x10 [ 85.739010][ T5895] ? vfs_write+0x7c4/0xc90 [ 85.743444][ T5895] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 85.749798][ T5895] ? do_syscall_64+0x100/0x230 [ 85.754577][ T5895] ? do_syscall_64+0xb6/0x230 [ 85.759252][ T5895] do_syscall_64+0xf3/0x230 [ 85.763755][ T5895] ? clear_bhb_loop+0x35/0x90 [ 85.768546][ T5895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.774434][ T5895] RIP: 0033:0x7fcf00175f19 [ 85.778841][ T5895] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.798632][ T5895] RSP: 002b:00007fcf00efc048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 85.807313][ T5895] RAX: ffffffffffffffda RBX: 00007fcf00305f60 RCX: 00007fcf00175f19 [ 85.815461][ T5895] RDX: 0000000000000000 RSI: 0000000020001180 RDI: 0000000000000003 [ 85.823424][ T5895] RBP: 00007fcf00efc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 85.831385][ T5895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 85.839348][ T5895] R13: 000000000000000b R14: 00007fcf00305f60 R15: 00007fffc2bce6d8 [ 85.847323][ T5895] [ 86.482436][ T5930] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 86.514644][ T5930] netlink: 224 bytes leftover after parsing attributes in process `syz.4.233'. [ 87.123337][ T5960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.155648][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.212690][ T5954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.291729][ T5969] syzkaller1: entered allmulticast mode [ 87.392334][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.473021][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.502488][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.689186][ T5985] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 87.912303][ T5992] wg1 speed is unknown, defaulting to 1000 [ 88.049959][ T6001] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 88.112621][ T6003] ip6gretap0: entered promiscuous mode [ 88.166409][ T6003] bridge0: entered promiscuous mode [ 88.209403][ T6003] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 88.226008][ T6003] Cannot create hsr debugfs directory [ 88.926900][ T6046] xt_connbytes: Forcing CT accounting to be enabled [ 89.257444][ T6055] netlink: 'syz.3.271': attribute type 1 has an invalid length. [ 89.265527][ T6055] __nla_validate_parse: 2 callbacks suppressed [ 89.265544][ T6055] netlink: 224 bytes leftover after parsing attributes in process `syz.3.271'. [ 89.796778][ T6064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 91.373827][ T6058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 91.763162][ T6074] netlink: 'syz.4.279': attribute type 3 has an invalid length. [ 91.806011][ T6074] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.279'. [ 91.835680][ T6082] netlink: 20 bytes leftover after parsing attributes in process `syz.4.279'. [ 92.151434][ T6096] ip6gre3: entered allmulticast mode [ 92.365223][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 92.408786][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 92.415657][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.423702][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.431683][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.439746][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.447719][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.455862][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.463799][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.471941][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.479916][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.488084][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.496051][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.504196][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.512123][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.520227][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.528190][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.536250][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.544200][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.552228][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.560199][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.568323][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.575975][ T6110] netlink: 68 bytes leftover after parsing attributes in process `syz.1.291'. [ 92.576263][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.593154][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.601458][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.609638][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.617629][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.625681][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.633607][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.641653][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.649620][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.657671][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.665633][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.673720][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.681703][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.689732][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.697708][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.705741][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.713673][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.721802][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.729775][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.737832][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.745793][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 92.753808][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 92.762046][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 93.097948][ T6116] netlink: 'syz.0.294': attribute type 1 has an invalid length. [ 93.218665][ T6117] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 93.238542][ T6117] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 93.283116][ T6117] bond1: (slave vcan1): making interface the new active one [ 93.292642][ T6117] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 93.338052][ T6122] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 93.368340][ T6122] bond1: (slave vcan2): Enslaving as a backup interface with an up link [ 93.426472][ T6135] netlink: 164 bytes leftover after parsing attributes in process `syz.2.300'. [ 93.442746][ T6126] wg1 speed is unknown, defaulting to 1000 [ 93.481528][ T6135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.300'. [ 94.283815][ T6168] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 95.030504][ T6201] wg1 speed is unknown, defaulting to 1000 [ 95.148366][ T6208] netlink: 16 bytes leftover after parsing attributes in process `syz.0.320'. [ 95.319518][ T6213] gretap1: entered promiscuous mode [ 95.423646][ T6218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 95.710020][ T6228] netlink: 100 bytes leftover after parsing attributes in process `syz.1.327'. [ 96.009903][ T6244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.329'. [ 96.067644][ T6244] netlink: 'syz.0.329': attribute type 1 has an invalid length. [ 96.142647][ T6249] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 96.278704][ T6247] wg1 speed is unknown, defaulting to 1000 [ 96.430324][ T6251] syzkaller0: entered promiscuous mode [ 96.437616][ T6251] syzkaller0: entered allmulticast mode [ 96.487967][ T6257] gre1: entered allmulticast mode [ 96.517967][ T35] syzkaller0: tun_net_xmit 48 [ 96.526114][ T6264] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 96.584301][ T6197] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 96.624118][ T6197] syzkaller0: Linktype set failed because interface is up [ 98.118983][ T6287] ip6gre1: entered allmulticast mode [ 98.698840][ T6301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 98.839044][ T6310] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 98.872572][ T6314] wg1 speed is unknown, defaulting to 1000 [ 99.314194][ T6325] netlink: 'syz.1.357': attribute type 3 has an invalid length. [ 99.337936][ T6325] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.357'. [ 99.360083][ T6332] netlink: 20 bytes leftover after parsing attributes in process `syz.1.357'. [ 99.603792][ C0] eth0: bad gso: type: 1, size: 1408 [ 99.897382][ T6354] netlink: 'syz.1.366': attribute type 3 has an invalid length. [ 99.929174][ T6354] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.366'. [ 99.961104][ T6356] netlink: 'syz.4.369': attribute type 3 has an invalid length. [ 99.970409][ T6356] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.369'. [ 100.146888][ T6359] team1: Mode changed to "activebackup" [ 100.176970][ T6359] team1: Mode changed to "roundrobin" [ 100.263976][ T6378] __nla_validate_parse: 3 callbacks suppressed [ 100.264001][ T6378] netlink: 76 bytes leftover after parsing attributes in process `syz.0.372'. [ 100.344849][ T6373] can: request_module (can-proto-4) failed. [ 100.666546][ T6397] netlink: 32 bytes leftover after parsing attributes in process `syz.3.380'. [ 100.693657][ T6389] netlink: 'syz.4.375': attribute type 29 has an invalid length. [ 100.722877][ T6396] batadv1: entered allmulticast mode [ 100.789463][ T6391] wg1 speed is unknown, defaulting to 1000 [ 100.797378][ T6403] FAULT_INJECTION: forcing a failure. [ 100.797378][ T6403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.811936][ T6403] CPU: 1 PID: 6403 Comm: syz.0.382 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 100.821611][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 100.831691][ T6403] Call Trace: [ 100.834990][ T6403] [ 100.837941][ T6403] dump_stack_lvl+0x241/0x360 [ 100.842649][ T6403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.847876][ T6403] ? __pfx__printk+0x10/0x10 [ 100.852510][ T6403] ? snprintf+0xda/0x120 [ 100.856799][ T6403] should_fail_ex+0x3b0/0x4e0 [ 100.861510][ T6403] _copy_to_user+0x2f/0xb0 [ 100.865952][ T6403] simple_read_from_buffer+0xca/0x150 [ 100.871336][ T6403] proc_fail_nth_read+0x1e9/0x250 [ 100.876367][ T6403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.881911][ T6403] ? rw_verify_area+0x520/0x6b0 [ 100.886762][ T6403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 100.892306][ T6403] vfs_read+0x204/0xbc0 [ 100.896461][ T6403] ? __pfx_lock_release+0x10/0x10 [ 100.901482][ T6403] ? __pfx_sock_write_iter+0x10/0x10 [ 100.906848][ T6403] ? __pfx_vfs_read+0x10/0x10 [ 100.911522][ T6403] ? __fget_files+0x29/0x470 [ 100.916119][ T6403] ? __fget_files+0x3f6/0x470 [ 100.920794][ T6403] ksys_read+0x1a0/0x2c0 [ 100.925036][ T6403] ? __pfx_ksys_read+0x10/0x10 [ 100.929822][ T6403] ? do_syscall_64+0x100/0x230 [ 100.934585][ T6403] ? do_syscall_64+0xb6/0x230 [ 100.939266][ T6403] do_syscall_64+0xf3/0x230 [ 100.943763][ T6403] ? clear_bhb_loop+0x35/0x90 [ 100.948442][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.954331][ T6403] RIP: 0033:0x7fcf001749fc [ 100.958739][ T6403] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 100.978349][ T6403] RSP: 002b:00007fcf00efc040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.986769][ T6403] RAX: ffffffffffffffda RBX: 00007fcf00305f60 RCX: 00007fcf001749fc [ 100.994737][ T6403] RDX: 000000000000000f RSI: 00007fcf00efc0b0 RDI: 0000000000000006 [ 101.002701][ T6403] RBP: 00007fcf00efc0a0 R08: 0000000000000000 R09: 0000000000000000 [ 101.010661][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.018626][ T6403] R13: 000000000000000b R14: 00007fcf00305f60 R15: 00007fffc2bce6d8 [ 101.026602][ T6403] [ 101.373390][ T6409] netlink: 'syz.4.384': attribute type 3 has an invalid length. [ 101.411757][ T6409] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.384'. [ 101.761276][ T6436] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 102.021603][ T6443] netlink: 172 bytes leftover after parsing attributes in process `syz.0.395'. [ 102.247044][ T6450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.395'. [ 102.440288][ T6464] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 103.027023][ T6492] netlink: 36 bytes leftover after parsing attributes in process `syz.3.415'. [ 103.077065][ T6492] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 103.102955][ T6492] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 103.162512][ T6499] Cannot find set identified by id 0 to match [ 103.657438][ T6516] netlink: 172 bytes leftover after parsing attributes in process `syz.1.423'. [ 103.732248][ T6519] FAULT_INJECTION: forcing a failure. [ 103.732248][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.762770][ T6516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.423'. [ 103.773571][ T6519] CPU: 1 PID: 6519 Comm: syz.4.424 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 103.783270][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 103.793350][ T6519] Call Trace: [ 103.796646][ T6519] [ 103.799596][ T6519] dump_stack_lvl+0x241/0x360 [ 103.804303][ T6519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.809531][ T6519] ? __pfx__printk+0x10/0x10 [ 103.814166][ T6519] ? snprintf+0xda/0x120 [ 103.818441][ T6519] should_fail_ex+0x3b0/0x4e0 [ 103.823147][ T6519] _copy_to_user+0x2f/0xb0 [ 103.827601][ T6519] simple_read_from_buffer+0xca/0x150 [ 103.833009][ T6519] proc_fail_nth_read+0x1e9/0x250 [ 103.838074][ T6519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.843657][ T6519] ? rw_verify_area+0x520/0x6b0 [ 103.848542][ T6519] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.854127][ T6519] vfs_read+0x204/0xbc0 [ 103.858312][ T6519] ? __pfx_lock_release+0x10/0x10 [ 103.863376][ T6519] ? __pfx_vfs_read+0x10/0x10 [ 103.868088][ T6519] ? __fget_files+0x29/0x470 [ 103.872710][ T6519] ? __fget_files+0x3f6/0x470 [ 103.877431][ T6519] ksys_read+0x1a0/0x2c0 [ 103.881709][ T6519] ? __pfx_ksys_read+0x10/0x10 [ 103.886499][ T6519] ? do_syscall_64+0x100/0x230 [ 103.891296][ T6519] ? do_syscall_64+0xb6/0x230 [ 103.896019][ T6519] do_syscall_64+0xf3/0x230 [ 103.900577][ T6519] ? clear_bhb_loop+0x35/0x90 [ 103.905293][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.910299][ T6525] netlink: 36 bytes leftover after parsing attributes in process `syz.0.428'. [ 103.911190][ T6519] RIP: 0033:0x7f77a8d749fc [ 103.911215][ T6519] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 103.911230][ T6519] RSP: 002b:00007f77a9bff040 EFLAGS: 00000246 [ 103.921122][ T6525] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 103.924441][ T6519] ORIG_RAX: 0000000000000000 [ 103.924457][ T6519] RAX: ffffffffffffffda RBX: 00007f77a8f05f60 RCX: 00007f77a8d749fc [ 103.924472][ T6519] RDX: 000000000000000f RSI: 00007f77a9bff0b0 RDI: 0000000000000004 [ 103.924483][ T6519] RBP: 00007f77a9bff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.924494][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.924505][ T6519] R13: 000000000000000b R14: 00007f77a8f05f60 R15: 00007ffe168a5fa8 [ 103.924531][ T6519] [ 104.034240][ T6525] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 104.373226][ T6532] can: request_module (can-proto-0) failed. [ 104.413727][ T6540] wg1 speed is unknown, defaulting to 1000 [ 106.138325][ T6620] batadv1: entered allmulticast mode [ 106.581979][ T6629] netlink: 'syz.0.457': attribute type 3 has an invalid length. [ 106.619763][ T6629] __nla_validate_parse: 2 callbacks suppressed [ 106.619785][ T6629] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.457'. [ 107.087917][ T6654] netlink: 104 bytes leftover after parsing attributes in process `syz.2.466'. [ 107.440781][ T6667] batadv1: entered allmulticast mode [ 107.572019][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 107.618805][ T6678] team1: Mode changed to "activebackup" [ 107.635961][ T6678] team1: Mode changed to "roundrobin" [ 107.656481][ T6675] netlink: 24 bytes leftover after parsing attributes in process `syz.2.469'. [ 107.976449][ T6697] netlink: 120 bytes leftover after parsing attributes in process `syz.4.478'. [ 108.355345][ T4494] Bluetooth: hci4: link tx timeout [ 108.361659][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.372311][ T4494] Bluetooth: hci4: link tx timeout [ 108.377879][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 108.492064][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 108.527100][ T6718] vlan2: entered allmulticast mode [ 108.533389][ T6718] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 108.608910][ T6723] IPv6: Can't replace route, no match found [ 109.094779][ T6742] netlink: 72 bytes leftover after parsing attributes in process `syz.4.494'. [ 109.155923][ T4494] Bluetooth: hci4: link tx timeout [ 109.161662][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.172990][ T4494] Bluetooth: hci4: link tx timeout [ 109.178610][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 109.250338][ T6749] netlink: 104 bytes leftover after parsing attributes in process `syz.3.496'. [ 109.352401][ T6752] netlink: 172 bytes leftover after parsing attributes in process `syz.0.497'. [ 109.519242][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.497'. [ 109.872337][ T6768] IPv6: Can't replace route, no match found [ 110.325148][ T4494] Bluetooth: hci4: link tx timeout [ 110.330342][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.338600][ T4494] Bluetooth: hci4: link tx timeout [ 110.343746][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.354122][ T4494] Bluetooth: hci4: link tx timeout [ 110.359717][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.368146][ T4494] Bluetooth: hci4: link tx timeout [ 110.373289][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.382924][ T4494] Bluetooth: hci4: link tx timeout [ 110.389221][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.398238][ T4494] Bluetooth: hci4: link tx timeout [ 110.403434][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.412533][ T4494] Bluetooth: hci4: link tx timeout [ 110.419991][ T4494] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 110.434161][ T4494] ================================================================== [ 110.442253][ T4494] BUG: KASAN: slab-use-after-free in hci_disconnect+0x208/0x2d0 [ 110.449914][ T4494] Read of size 1 at addr ffff888066f9803b by task kworker/u9:1/4494 [ 110.457905][ T4494] [ 110.460243][ T4494] CPU: 0 PID: 4494 Comm: kworker/u9:1 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 110.470145][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 110.480220][ T4494] Workqueue: hci4 hci_tx_work [ 110.484931][ T4494] Call Trace: [ 110.488227][ T4494] [ 110.491169][ T4494] dump_stack_lvl+0x241/0x360 [ 110.495867][ T4494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 110.501077][ T4494] ? __pfx__printk+0x10/0x10 [ 110.505658][ T4494] ? _printk+0xd5/0x120 [ 110.509796][ T4494] ? __virt_addr_valid+0x183/0x530 [ 110.514898][ T4494] ? __virt_addr_valid+0x183/0x530 [ 110.520018][ T4494] print_report+0x169/0x550 [ 110.524511][ T4494] ? __virt_addr_valid+0x183/0x530 [ 110.529618][ T4494] ? __virt_addr_valid+0x183/0x530 [ 110.534716][ T4494] ? __virt_addr_valid+0x45f/0x530 [ 110.539816][ T4494] ? __phys_addr+0xba/0x170 [ 110.544311][ T4494] ? hci_disconnect+0x208/0x2d0 [ 110.549153][ T4494] kasan_report+0x143/0x180 [ 110.553641][ T4494] ? hci_disconnect+0x208/0x2d0 [ 110.558478][ T4494] hci_disconnect+0x208/0x2d0 [ 110.563140][ T4494] ? __pfx_hci_disconnect+0x10/0x10 [ 110.568329][ T4494] ? hci_sched_esco+0x336/0x440 [ 110.573166][ T4494] ? __rcu_read_unlock+0xa1/0x110 [ 110.578198][ T4494] ? __check_timeout+0x181/0x550 [ 110.583141][ T4494] __check_timeout+0x3a5/0x550 [ 110.587904][ T4494] ? __check_timeout+0x181/0x550 [ 110.592834][ T4494] hci_tx_work+0xbc2/0x15e0 [ 110.597346][ T4494] ? __pfx_lock_acquire+0x10/0x10 [ 110.602371][ T4494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 110.608339][ T4494] ? __pfx_hci_tx_work+0x10/0x10 [ 110.613269][ T4494] ? process_scheduled_works+0x945/0x1830 [ 110.618975][ T4494] process_scheduled_works+0xa2c/0x1830 [ 110.624519][ T4494] ? __pfx_process_scheduled_works+0x10/0x10 [ 110.630488][ T4494] ? assign_work+0x364/0x3d0 [ 110.635071][ T4494] worker_thread+0x86d/0xd40 [ 110.639652][ T4494] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 110.645538][ T4494] ? __kthread_parkme+0x169/0x1d0 [ 110.650550][ T4494] ? __pfx_worker_thread+0x10/0x10 [ 110.655647][ T4494] kthread+0x2f0/0x390 [ 110.659704][ T4494] ? __pfx_worker_thread+0x10/0x10 [ 110.664817][ T4494] ? __pfx_kthread+0x10/0x10 [ 110.669501][ T4494] ret_from_fork+0x4b/0x80 [ 110.673906][ T4494] ? __pfx_kthread+0x10/0x10 [ 110.678483][ T4494] ret_from_fork_asm+0x1a/0x30 [ 110.683239][ T4494] [ 110.686242][ T4494] [ 110.688549][ T4494] Allocated by task 4494: [ 110.692854][ T4494] kasan_save_track+0x3f/0x80 [ 110.697524][ T4494] __kasan_kmalloc+0x98/0xb0 [ 110.702095][ T4494] __kmalloc_cache_noprof+0x19c/0x2c0 [ 110.707452][ T4494] __hci_conn_add+0x2f9/0x1850 [ 110.712206][ T4494] le_conn_complete_evt+0x2f6/0x12e0 [ 110.717473][ T4494] hci_le_conn_complete_evt+0x18c/0x420 [ 110.723002][ T4494] hci_event_packet+0xa55/0x1540 [ 110.727932][ T4494] hci_rx_work+0x3e8/0xca0 [ 110.732862][ T4494] process_scheduled_works+0xa2c/0x1830 [ 110.738396][ T4494] worker_thread+0x86d/0xd40 [ 110.742972][ T4494] kthread+0x2f0/0x390 [ 110.747068][ T4494] ret_from_fork+0x4b/0x80 [ 110.751479][ T4494] ret_from_fork_asm+0x1a/0x30 [ 110.756265][ T4494] [ 110.758573][ T4494] Freed by task 5108: [ 110.762531][ T4494] kasan_save_track+0x3f/0x80 [ 110.767200][ T4494] kasan_save_free_info+0x40/0x50 [ 110.772300][ T4494] poison_slab_object+0xe0/0x150 [ 110.777219][ T4494] __kasan_slab_free+0x37/0x60 [ 110.781966][ T4494] kfree+0x149/0x360 [ 110.786020][ T4494] device_release+0x99/0x1c0 [ 110.790595][ T4494] kobject_put+0x22f/0x480 [ 110.794999][ T4494] hci_conn_del+0x8c4/0xc40 [ 110.799491][ T4494] hci_abort_conn_sync+0x583/0xde0 [ 110.804590][ T4494] hci_cmd_sync_work+0x22b/0x400 [ 110.809514][ T4494] process_scheduled_works+0xa2c/0x1830 [ 110.815051][ T4494] worker_thread+0x86d/0xd40 [ 110.819628][ T4494] kthread+0x2f0/0x390 [ 110.823690][ T4494] ret_from_fork+0x4b/0x80 [ 110.828097][ T4494] ret_from_fork_asm+0x1a/0x30 [ 110.832865][ T4494] [ 110.835185][ T4494] The buggy address belongs to the object at ffff888066f98000 [ 110.835185][ T4494] which belongs to the cache kmalloc-8k of size 8192 [ 110.849234][ T4494] The buggy address is located 59 bytes inside of [ 110.849234][ T4494] freed 8192-byte region [ffff888066f98000, ffff888066f9a000) [ 110.863040][ T4494] [ 110.865358][ T4494] The buggy address belongs to the physical page: [ 110.871848][ T4494] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x66f98 [ 110.880625][ T4494] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 110.889130][ T4494] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 110.896665][ T4494] page_type: 0xffffefff(slab) [ 110.901342][ T4494] raw: 00fff00000000040 ffff888015042280 dead000000000122 0000000000000000 [ 110.909913][ T4494] raw: 0000000000000000 0000000000020002 00000001ffffefff 0000000000000000 [ 110.918491][ T4494] head: 00fff00000000040 ffff888015042280 dead000000000122 0000000000000000 [ 110.927167][ T4494] head: 0000000000000000 0000000000020002 00000001ffffefff 0000000000000000 [ 110.935833][ T4494] head: 00fff00000000003 ffffea00019be601 ffffffffffffffff 0000000000000000 [ 110.944495][ T4494] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 110.953143][ T4494] page dumped because: kasan: bad access detected [ 110.959556][ T4494] page_owner tracks the page as allocated [ 110.965267][ T4494] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4494, tgid 4494 (kworker/u9:1), ts 58795034924, free_ts 14939136805 [ 110.986700][ T4494] post_alloc_hook+0x1f3/0x230 [ 110.991454][ T4494] get_page_from_freelist+0x2e4c/0x2f10 [ 110.996995][ T4494] __alloc_pages_noprof+0x256/0x6c0 [ 111.002277][ T4494] alloc_slab_page+0x5f/0x120 [ 111.006940][ T4494] allocate_slab+0x5a/0x2f0 [ 111.011438][ T4494] ___slab_alloc+0xcd1/0x14b0 [ 111.016104][ T4494] __slab_alloc+0x58/0xa0 [ 111.020425][ T4494] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 111.025792][ T4494] __hci_conn_add+0x2f9/0x1850 [ 111.030541][ T4494] le_conn_complete_evt+0x2f6/0x12e0 [ 111.035899][ T4494] hci_le_conn_complete_evt+0x18c/0x420 [ 111.041427][ T4494] hci_event_packet+0xa55/0x1540 [ 111.046353][ T4494] hci_rx_work+0x3e8/0xca0 [ 111.050757][ T4494] process_scheduled_works+0xa2c/0x1830 [ 111.056290][ T4494] worker_thread+0x86d/0xd40 [ 111.060871][ T4494] kthread+0x2f0/0x390 [ 111.064926][ T4494] page last free pid 1 tgid 1 stack trace: [ 111.070709][ T4494] free_unref_page+0xd22/0xea0 [ 111.075461][ T4494] free_contig_range+0x9e/0x160 [ 111.080473][ T4494] destroy_args+0x8a/0x890 [ 111.084892][ T4494] debug_vm_pgtable+0x4be/0x550 [ 111.089730][ T4494] do_one_initcall+0x248/0x880 [ 111.094482][ T4494] do_initcall_level+0x157/0x210 [ 111.099413][ T4494] do_initcalls+0x3f/0x80 [ 111.103745][ T4494] kernel_init_freeable+0x435/0x5d0 [ 111.109011][ T4494] kernel_init+0x1d/0x2b0 [ 111.113331][ T4494] ret_from_fork+0x4b/0x80 [ 111.117736][ T4494] ret_from_fork_asm+0x1a/0x30 [ 111.122490][ T4494] [ 111.124797][ T4494] Memory state around the buggy address: [ 111.130408][ T4494] ffff888066f97f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.138454][ T4494] ffff888066f97f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 111.146509][ T4494] >ffff888066f98000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.154552][ T4494] ^ [ 111.160509][ T4494] ffff888066f98080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.168557][ T4494] ffff888066f98100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 111.176602][ T4494] ================================================================== [ 111.223143][ T4494] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 111.230384][ T4494] CPU: 1 PID: 4494 Comm: kworker/u9:1 Not tainted 6.10.0-syzkaller-09703-gd7e78951a8b8 #0 [ 111.240548][ T4494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 111.250612][ T4494] Workqueue: hci4 hci_tx_work [ 111.255292][ T4494] Call Trace: [ 111.258556][ T4494] [ 111.261474][ T4494] dump_stack_lvl+0x241/0x360 [ 111.266147][ T4494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.271337][ T4494] ? __pfx__printk+0x10/0x10 [ 111.275912][ T4494] ? preempt_schedule+0xe1/0xf0 [ 111.280757][ T4494] ? vscnprintf+0x5d/0x90 [ 111.285077][ T4494] panic+0x349/0x860 [ 111.288962][ T4494] ? check_panic_on_warn+0x21/0xb0 [ 111.294421][ T4494] ? __pfx_panic+0x10/0x10 [ 111.299001][ T4494] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 111.304980][ T4494] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 111.311308][ T4494] ? print_report+0x502/0x550 [ 111.315976][ T4494] check_panic_on_warn+0x86/0xb0 [ 111.321002][ T4494] ? hci_disconnect+0x208/0x2d0 [ 111.325848][ T4494] end_report+0x77/0x160 [ 111.330088][ T4494] kasan_report+0x154/0x180 [ 111.334590][ T4494] ? hci_disconnect+0x208/0x2d0 [ 111.339432][ T4494] hci_disconnect+0x208/0x2d0 [ 111.344098][ T4494] ? __pfx_hci_disconnect+0x10/0x10 [ 111.349374][ T4494] ? hci_sched_esco+0x336/0x440 [ 111.354211][ T4494] ? __rcu_read_unlock+0xa1/0x110 [ 111.359232][ T4494] ? __check_timeout+0x181/0x550 [ 111.364154][ T4494] __check_timeout+0x3a5/0x550 [ 111.368902][ T4494] ? __check_timeout+0x181/0x550 [ 111.373825][ T4494] hci_tx_work+0xbc2/0x15e0 [ 111.378323][ T4494] ? __pfx_lock_acquire+0x10/0x10 [ 111.383333][ T4494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.389301][ T4494] ? __pfx_hci_tx_work+0x10/0x10 [ 111.394232][ T4494] ? process_scheduled_works+0x945/0x1830 [ 111.399935][ T4494] process_scheduled_works+0xa2c/0x1830 [ 111.405481][ T4494] ? __pfx_process_scheduled_works+0x10/0x10 [ 111.411452][ T4494] ? assign_work+0x364/0x3d0 [ 111.416037][ T4494] worker_thread+0x86d/0xd40 [ 111.420711][ T4494] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 111.426603][ T4494] ? __kthread_parkme+0x169/0x1d0 [ 111.431615][ T4494] ? __pfx_worker_thread+0x10/0x10 [ 111.436719][ T4494] kthread+0x2f0/0x390 [ 111.440777][ T4494] ? __pfx_worker_thread+0x10/0x10 [ 111.445882][ T4494] ? __pfx_kthread+0x10/0x10 [ 111.450461][ T4494] ret_from_fork+0x4b/0x80 [ 111.454875][ T4494] ? __pfx_kthread+0x10/0x10 [ 111.459477][ T4494] ret_from_fork_asm+0x1a/0x30 [ 111.464328][ T4494] [ 111.467557][ T4494] Kernel Offset: disabled [ 111.471878][ T4494] Rebooting in 86400 seconds..