last executing test programs: 2.994170634s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000b00)={'bond0\x00', &(0x7f0000000a40)=@ethtool_pauseparam={0x13, 0x0, 0x36, 0x101}}) gettid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@mcast1, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@mcast1}}, &(0x7f00000007c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000800)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000840)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf14361", 0x31}, {&(0x7f00000004c0)="edfb4e0208682b452cd165c83da6dfc89aa5780901ea6a254eeed68ef21398b1786952009c46133ba8e71abfea18fb1a5c0e37c0bf3e6d75e962bf3089db697758e2040fbd15a9a71ec7fa08b4316872ee165e4aa7e4d3b41742fe489dd1bb0dcdb452f5001cbcec1a8d4b2bf9b6d50bb836742e7bcd7681bd3fd6c61f90ee7e6c128470c89b6e79679833128c4d2ac2f21efc9920e0bf0097a7b5b34e48670be520356d8cbbb96252d11348cfd19f6d2ee3830d41c2ad6ec9aa56f1580f80c3ef88aac30c374d17d049e7a529b4b95bbc759a5abb1a97c54691d822bf50c075b6", 0xe1}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1630cc90eed99bd86f37b5115", 0x61}], 0x5, 0x0, 0x0, 0x4044005}}], 0x1, 0x0) sendmsg$netlink(r0, &(0x7f0000000940)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfe}, 0xc, &(0x7f00000002c0)=[{&(0x7f0000000440)={0x344, 0x12, 0x420, 0x70bd27, 0x25dfdbfc, "", [@typed={0x14, 0x36, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}, @nested={0x255, 0x69, 0x0, 0x1, [@typed={0x57, 0x17, 0x0, 0x0, @binary="1ed5ca8c36c1c43ef15ac7314d5693ef7be937682fc8531d58c410401c52b88715c13fa0508e3f4602e965e38b084a779ee83ba2317f18932555d2f742bf859e90998203c094a4cad7d4a02984b984ac579e18"}, @nested={0x4, 0xf4}, @generic="01c61271c18b27bc8996fa8d0008fe2bfe2c89087a04cc5e61d78ffde068b9353fa78b6c0ac2694d93dc9921da666595112f0252cef1173eb21f251be54e8a38fbfe69e26c08dbba78807b928c1ec509303b68420a9799ed9b0ae6bfcdf586ca1ae536626b7a881538d546efb16869515b1ab66717f170adae7c12bbf7fd476218b23b37b4d06d8f3e1e02cf9e646f8ad90eb09fa798557e8fd1db40e7365ef9476b9c79", @generic="094dab8de8d47f318914e3cf8a0ec2249f91f16e0dca7478edc451c8dacb9221170f030f0d0f309979f647b1f32ce4f7ce7e57e3df39adda49975633f154d648e732ddd108bd7f54e71f60aaaa4148341841e98bb9a086c2a7c2d8b87400194759343a0a83a33ad570f3de4479a26d36ba228a1d32586f94e377ce9874cd95926818fd32a6ec47f3188afbbb2aab253ae6d3fd51b44fb0e7d7169d84c19c135027d2c59d8a1afd6b382294473c2a6089617f093ddb5d4b8f1ebf69af1470e8bf04aea491ece58653c0278858eafa2071b28d9cb433542012d8217ada2babde1c1ed7cc9b9e4321aa3a4cc66e86", @typed={0x8, 0x24, 0x0, 0x0, @pid}, @generic="899d25e45791b95801c2b14d1849fd034f09c5f91d7d7cadce79ccbb8c7cfc7b35de216dbf0217c0ba6aa7d2de42dc7a4a7f927305cba61667714bb0bd3be352c4d2419f87a8b62bfe7e8a980d252338993a0bd6e7d69b49e2137111"]}, @nested={0xc5, 0x27, 0x0, 0x1, [@nested={0x4, 0xc8}, @nested={0x4, 0x11a}, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@private2}, @nested={0x4, 0x12f}, @generic="71559fbb9368b2f563ac646e058f27be8e99bab5240824cda91dc21cce3dfde880ecce59a538b5a8da8fe51f6c186c6833a16953bbb3b48a7136edb12c5a184c377e24f0ff3cc71cc37c4bc685ed8fedb4b87316553833e3c4c0e9796a098fb77232268386723e4e748bd73710fc45ab18afef1d4d137b46bd00c6ca408e17233afb303ae7f2442fd18c6b94e6b8b30b0d196c94ebcba62557a43810a379a3a778"]}]}, 0x344}, {&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x17c}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x40, 0x44}, 0x4008010) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000003800010310bd7000ffdbdf250d"], 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x40) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000002d000100000000000000000004000080050011802ee00000"], 0x1c}], 0x1}, 0x300) 2.776386601s ago: executing program 3 (id=4): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7ff}]}, 0x24}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x12c, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0xd0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff7f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFTA_SET_DESC_CONCAT={0x6c, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_TYPE={0x8}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x170}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.684303928s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="f0c406defd959d5054d628320f03", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) shutdown(0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) listen(r1, 0x40000000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000440000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x54) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x18, 0x3, "c6a41d106c72fffffffffffffff5000007000000"}, @NFTA_MATCH_NAME={0xa, 0x1, 'owner\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x4048010) 2.513586555s ago: executing program 1 (id=7): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b8", 0xea}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc999", 0x24}, {&(0x7f00000009c0)="1585e8ba284e7d1a5bb3", 0xa}, {&(0x7f0000000b40)="ccc066bbeded4a88443627a8d9c9a2a4483908e15ea410a893c83a44a086c8ce09e3e7492c0e928eec554b54e9dca42bcaee688c4bcce3ed84f3695b15d4cb7815c8d21d726b1548aa369bf7f5421463f72c75cf9c7888da95e993695e89a93cc2755d6a30c4e0ef566e6eb6f4e1019cd154f89b61235a38a78a1cc82e8bc405377d68011d6ecc3858da09184617da1cf9b62514e97cf31d2ed0a61047bd75c97c9c3f6237bb6a10c81475a429bb6bf9feeefd85c8ca5358feea518e118b", 0xbe}, {&(0x7f0000000a00)="10746208bf4e414d0e38d8182b73581d0a4f10838ab95caea0c8feb966aaeedae7fea9ab174af6c7b0f58f498fb5ecdd6198e09fa4", 0x35}, {&(0x7f0000000c00)="0e7526c4fee441e0e68fb9385ef27fa91b41994e8abbfee0987a09308a9b1d9a0b560fd7dc627d59819b01eed708e80e422c3b2117bee816395f9cd642cde0ccd021f6ee30faf9fdc36c9de40c6d6c001fea3572036fad281e47ae89ef9a47f2", 0x60}, {&(0x7f0000000d40)="2d6282eb051912b5385f7506025f100125df9b868554e846fea4ee4498f509aaf8013595080f0d8f3a83a71bb04047095fa09a00d23756518094026769876d1c42bdd9499f605b05416049cbfee8bf4f3a40216202878579a5a0d11bc72d6d2902542f6f1c3a2f81efa4c907e0c3854361d132a7f3b8df4ece13d02606f84ecb81ebbd6d2fa18d9cf50ee47a53096074627818e58cc05ad428f306b3fa62a496eb8311f187f872482704de4108f0017ce434985aa860d69b78086f2c83b52f27819f2dbe5b43a8", 0xc7}, {&(0x7f0000000a40)="26ca00284da104a30eb7e47472214d5882ddd4d927c13fd5313e93157a4ac83b0f7fe57d94eb61", 0x27}], 0xb}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {0x0}, {0x0}], 0x3}}], 0x2, 0xc0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.456522497s ago: executing program 0 (id=8): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e63, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000220000018000000", @ANYRES32=r1, @ANYBLOB="0000000000000001b702000014000000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c009c54) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x35a9, 0x8, 0x7}, &(0x7f0000000040)=0x10) 2.352659467s ago: executing program 3 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r6) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x8, 0xf, &(0x7f0000000c80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) 2.252801546s ago: executing program 2 (id=10): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 2.172748224s ago: executing program 3 (id=11): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000"], 0x17) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.143060432s ago: executing program 1 (id=12): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.934449422s ago: executing program 0 (id=13): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.867299736s ago: executing program 2 (id=14): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e63, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x1}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000010000000000", @ANYRES32=r1, @ANYBLOB="0000000000000001b702000014000000b7030000000000008500000005000006bf0900000000000045090100000003709500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0xffc, &(0x7f0000001e40)=""/4092, 0x40f00, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2c009c54) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x35a9, 0x8, 0x7}, &(0x7f0000000040)=0x10) 1.746835414s ago: executing program 3 (id=15): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r6, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.46815614s ago: executing program 2 (id=16): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 1.120555522s ago: executing program 2 (id=17): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd4}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000050000000900010073797a300000000054000000030a01030000000100010000050000000900010073797a30000000002800048008000140000000011400040076657468315f766972745f77696669000800024000000000090003"], 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.01829994s ago: executing program 4 (id=5): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 901.018599ms ago: executing program 2 (id=18): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x110}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {0x0}, {&(0x7f0000000580)=""/84, 0x54}, {0x0}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x5}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)}, 0xb0}, {{0x0, 0x0, 0x0}, 0x6}], 0x7, 0x20, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b8", 0xea}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5", 0xf4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc999", 0x24}, {&(0x7f00000009c0)="1585e8ba284e7d1a5bb3", 0xa}, {&(0x7f0000000b40)="ccc066bbeded4a88443627a8d9c9a2a4483908e15ea410a893c83a44a086c8ce09e3e7492c0e928eec554b54e9dca42bcaee688c4bcce3ed84f3695b15d4cb7815c8d21d726b1548aa369bf7f5421463f72c75cf9c7888da95e993695e89a93cc2755d6a30c4e0ef566e6eb6f4e1019cd154f89b61235a38a78a1cc82e8bc405377d68011d6ecc3858da09184617da1cf9b62514e97cf31d2ed0a61047bd75c97c9c3f6237bb6a10c81475a429bb6bf9feeefd85c8ca5358feea518e118b", 0xbe}, {&(0x7f0000000a00)="10746208bf4e414d0e38d8182b73581d0a4f10838ab95caea0c8feb966aaeedae7fea9ab174af6c7b0f58f498fb5ecdd6198e09fa4", 0x35}, {&(0x7f0000000c00)="0e7526c4fee441e0e68fb9385ef27fa91b41994e8abbfee0987a09308a9b1d9a0b560fd7dc627d59819b01eed708e80e422c3b2117bee816395f9cd642cde0ccd021f6ee30faf9fdc36c9de40c6d6c001fea3572036fad281e47ae89ef9a47f2", 0x60}, {&(0x7f0000000d40)="2d6282eb051912b5385f7506025f100125df9b868554e846fea4ee4498f509aaf8013595080f0d8f3a83a71bb04047095fa09a00d23756518094026769876d1c42bdd9499f605b05416049cbfee8bf4f3a40216202878579a5a0d11bc72d6d2902542f6f1c3a2f81efa4c907e0c3854361d132a7f3b8df4ece13d02606f84ecb81ebbd6d2fa18d9cf50ee47a53096074627818e58cc05ad428f306b3fa62a496eb8311f187f872482704de4108f0017ce434985aa860d69b78086f2c83b52f27819f2dbe5b43a8", 0xc7}, {&(0x7f0000000a40)="26ca00284da104a30eb7e47472214d5882ddd4d927c13fd5313e93157a4ac83b0f7fe57d94eb61", 0x27}], 0xb}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba00"/86, 0x56}, {0x0}, {0x0}], 0x3}}], 0x2, 0xc0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xd4}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r3, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000300)="ab", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 579.300614ms ago: executing program 2 (id=19): r0 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_team\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet(0x2, 0x4000000805, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400030000000b2fa2560d18"], 0x20, 0x2400e044}, 0x0) close(r4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r8 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000003c0)={0x1, 0x1}, 0x4) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r2, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc}, {0xfff3}}}, 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_POWER_SAVE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r11, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 472.287228ms ago: executing program 0 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 311.717312ms ago: executing program 0 (id=21): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x2f, 0xdb, 0x4, 0x5, 0x4f08e1870bd389bf, @loopback, @loopback, 0x7800, 0x80, 0x7, 0x7ff}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl0\x00', r5, 0x2f, 0x10, 0xb, 0x5, 0x12, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x40, 0x700, 0x40}}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x3, 0xfffffffc) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000180)=0xc) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x1c, 0x20, 0x1, 0xfffffffe, 0x1000020, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1001e}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) 0s ago: executing program 1 (id=22): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x7f}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000037"], 0x40}, 0x40) pipe(0x0) writev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000100)="e6", 0x1}, {0x0}, {&(0x7f00000003c0)="1a0c2dabf2d40e30126b8e8697c3ec369283d934021683b9ab485cf161dbb60feeb5b875924d1e9e7494f317f4b49f3339a8f60bf0d5ee9a446895943a162a05c22227177ae4def0f670b9deaf1ce777b4b3785b984a6ebb92b8eee90e48f00681f2ddb692486e7f6bc0b927dad55809880e8dc8a18b5d1aaaf92995cc57b190376c8621d3f04515858284e731ab653474cdcf6d3a8b501401f31e2b1093d5415ec81c429d34d28527f5d0fd523e037f6afe161bcbd00a52cef96363f582fc85a48fbc34f4621032638c6bac0a59d99fee39baeb608d5a12c7", 0xd9}, {&(0x7f00000004c0)="4fd9f51a8bebe1877e01beae43f202490fadf3f0fb6a77ee74997fc85f60ff941762ea269ad97da4404f27246d335bf4b229ef97b5cb5979f2106d202855ed5511220ea8cecb9433faa2473cae1bfda40f98a0b0c6089fb107b6a75907decf8be7832b297fe9fa6e7b51306a1db652f1a7080b833753fa1e5995d66098e09f6b4d17ed5d2f4e01fc5439536cbde741ad972306bcccf706bc", 0x98}, {&(0x7f0000000580)="921f65f435dbf5ce1afad43f69ef05a3b6f136f3bc23a80675", 0x19}, {&(0x7f00000005c0)="1197d7a424adaf47b8a3b9e7eb017d30213ce4f8ab7bac7dbfed", 0x1a}, {&(0x7f00000006c0)="5aa26dbffa011b088471e404bb6bb9b3808fe6b03480f5bb5aa9e4c427970774859058de119bef4c8b77be048efc133ccc3cf4e88be5ca48b7534af13ef227c3699b0057996e4bd0887823ecc79230d41a1dd22f7c294ce6e698977c91ae614689f38389b34a239f0cedd84d41eecb4eed4d9cb2ae6b6cc32ce5aa9e05ccc74e6807c3927598bdc5627f720bd97e10fabcb719c5e9153b931af1c0ef1e0bfad7cad5593f4cd1abf75e235e2dc373e1258f65feedf367c5e8cb2666362e394e80e109830412d7f2ffb519d8a3884d32f4", 0xd0}], 0x7) close(0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44048010) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe}}}, 0x24}}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 48.610273][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.643640][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. syzkaller login: [ 72.353506][ T5823] cgroup: Unknown subsys name 'net' [ 72.465377][ T5823] cgroup: Unknown subsys name 'cpuset' [ 72.474198][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.825402][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.270533][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.280847][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.288479][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.289062][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.303445][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.305313][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.319135][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.326605][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.327357][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.343179][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.351588][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.362417][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.362643][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.370120][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.385370][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.397703][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.406216][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.414834][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.422507][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.430370][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.430780][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.438107][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.453071][ T5156] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.477562][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.485317][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.900030][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 77.124057][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 77.207351][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.214733][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.222547][ T5833] bridge_slave_0: entered allmulticast mode [ 77.229585][ T5833] bridge_slave_0: entered promiscuous mode [ 77.334455][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.343852][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.350997][ T5833] bridge_slave_1: entered allmulticast mode [ 77.359270][ T5833] bridge_slave_1: entered promiscuous mode [ 77.367247][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 77.437226][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.460732][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 77.487657][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.506654][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.563126][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.570244][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.578172][ T5836] bridge_slave_0: entered allmulticast mode [ 77.585993][ T5836] bridge_slave_0: entered promiscuous mode [ 77.594446][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.601584][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.608948][ T5836] bridge_slave_1: entered allmulticast mode [ 77.616017][ T5836] bridge_slave_1: entered promiscuous mode [ 77.637059][ T5833] team0: Port device team_slave_0 added [ 77.655050][ T5833] team0: Port device team_slave_1 added [ 77.761904][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.778122][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.785602][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.792893][ T5835] bridge_slave_0: entered allmulticast mode [ 77.799858][ T5835] bridge_slave_0: entered promiscuous mode [ 77.827416][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.854576][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.861726][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.870036][ T5835] bridge_slave_1: entered allmulticast mode [ 77.878451][ T5835] bridge_slave_1: entered promiscuous mode [ 77.891894][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.899147][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.925409][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.985190][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.992840][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.018768][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.037925][ T5836] team0: Port device team_slave_0 added [ 78.059983][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.067177][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.075223][ T5840] bridge_slave_0: entered allmulticast mode [ 78.082675][ T5840] bridge_slave_0: entered promiscuous mode [ 78.114427][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.121553][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.129005][ T5845] bridge_slave_0: entered allmulticast mode [ 78.136003][ T5845] bridge_slave_0: entered promiscuous mode [ 78.145478][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.153005][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.160147][ T5845] bridge_slave_1: entered allmulticast mode [ 78.167718][ T5845] bridge_slave_1: entered promiscuous mode [ 78.176220][ T5836] team0: Port device team_slave_1 added [ 78.196875][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.204267][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.211373][ T5840] bridge_slave_1: entered allmulticast mode [ 78.218471][ T5840] bridge_slave_1: entered promiscuous mode [ 78.228718][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.240782][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.317015][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.324100][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.350451][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.399652][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.411690][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.418686][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.444845][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.452902][ T5853] Bluetooth: hci0: command tx timeout [ 78.465229][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.481318][ T5833] hsr_slave_0: entered promiscuous mode [ 78.488026][ T5833] hsr_slave_1: entered promiscuous mode [ 78.498793][ T5835] team0: Port device team_slave_0 added [ 78.507087][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.522143][ T5853] Bluetooth: hci4: command tx timeout [ 78.522190][ T5842] Bluetooth: hci3: command tx timeout [ 78.527752][ T5853] Bluetooth: hci2: command tx timeout [ 78.533377][ T5842] Bluetooth: hci1: command tx timeout [ 78.543088][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.566213][ T5835] team0: Port device team_slave_1 added [ 78.615457][ T5840] team0: Port device team_slave_0 added [ 78.644830][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.651788][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.678678][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.716390][ T5840] team0: Port device team_slave_1 added [ 78.729663][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.739099][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.765226][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.779071][ T5845] team0: Port device team_slave_0 added [ 78.788003][ T5845] team0: Port device team_slave_1 added [ 78.798784][ T5836] hsr_slave_0: entered promiscuous mode [ 78.806229][ T5836] hsr_slave_1: entered promiscuous mode [ 78.812684][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.820343][ T5836] Cannot create hsr debugfs directory [ 78.902544][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.909685][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.936400][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.972100][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.979078][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.010593][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.027323][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.034442][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.060803][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.089908][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.097064][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.123493][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.209547][ T5835] hsr_slave_0: entered promiscuous mode [ 79.216393][ T5835] hsr_slave_1: entered promiscuous mode [ 79.223218][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.231111][ T5835] Cannot create hsr debugfs directory [ 79.364472][ T5845] hsr_slave_0: entered promiscuous mode [ 79.370654][ T5845] hsr_slave_1: entered promiscuous mode [ 79.379875][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.387609][ T5845] Cannot create hsr debugfs directory [ 79.413591][ T5840] hsr_slave_0: entered promiscuous mode [ 79.419813][ T5840] hsr_slave_1: entered promiscuous mode [ 79.426109][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.433729][ T5840] Cannot create hsr debugfs directory [ 79.741327][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.778183][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.816620][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.833716][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.951389][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.985375][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.017484][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.029390][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.090666][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.123300][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.135231][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.148408][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.207861][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.220566][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.232402][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.266027][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.363198][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.373208][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.405185][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.426314][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.456310][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.487515][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.522916][ T5842] Bluetooth: hci0: command tx timeout [ 80.528445][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.567088][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.574352][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.588014][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.595112][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.602701][ T5842] Bluetooth: hci1: command tx timeout [ 80.603763][ T5853] Bluetooth: hci2: command tx timeout [ 80.608101][ T5842] Bluetooth: hci3: command tx timeout [ 80.613732][ T5850] Bluetooth: hci4: command tx timeout [ 80.639405][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.673827][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.680987][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.755440][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.776457][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.783551][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.811296][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.846741][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.853859][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.873582][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.898315][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.905480][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.960196][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.989306][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.021306][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.028584][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.086714][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.093934][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.157122][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.236682][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.243864][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.296136][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.395606][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.421833][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.429016][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.617019][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.639394][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.778304][ T5836] veth0_vlan: entered promiscuous mode [ 81.807969][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.880937][ T5836] veth1_vlan: entered promiscuous mode [ 81.919659][ T5835] veth0_vlan: entered promiscuous mode [ 81.930974][ T5833] veth0_vlan: entered promiscuous mode [ 81.978860][ T5835] veth1_vlan: entered promiscuous mode [ 81.999663][ T5833] veth1_vlan: entered promiscuous mode [ 82.077125][ T5845] veth0_vlan: entered promiscuous mode [ 82.117397][ T5845] veth1_vlan: entered promiscuous mode [ 82.153087][ T5836] veth0_macvtap: entered promiscuous mode [ 82.167729][ T5836] veth1_macvtap: entered promiscuous mode [ 82.190347][ T5835] veth0_macvtap: entered promiscuous mode [ 82.240714][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.253304][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.275226][ T5835] veth1_macvtap: entered promiscuous mode [ 82.308269][ T5833] veth0_macvtap: entered promiscuous mode [ 82.328840][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.348774][ T5845] veth0_macvtap: entered promiscuous mode [ 82.376037][ T5833] veth1_macvtap: entered promiscuous mode [ 82.393579][ T5845] veth1_macvtap: entered promiscuous mode [ 82.407396][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.414904][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428039][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.453573][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.466467][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.500297][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.537324][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.548964][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.558889][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.585144][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.596314][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.608268][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.613949][ T5850] Bluetooth: hci0: command tx timeout [ 82.636155][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.678957][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.686826][ T5850] Bluetooth: hci4: command tx timeout [ 82.686864][ T5850] Bluetooth: hci2: command tx timeout [ 82.692731][ T5853] Bluetooth: hci3: command tx timeout [ 82.692767][ T5853] Bluetooth: hci1: command tx timeout [ 82.741754][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.779680][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.788889][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.820127][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.823335][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.831802][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.843249][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.869736][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.878803][ T3527] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.903433][ T3527] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.977826][ T3527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.989214][ T3527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.041305][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.060103][ T5840] veth0_vlan: entered promiscuous mode [ 83.066639][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.098643][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.109662][ T5840] veth1_vlan: entered promiscuous mode [ 83.115368][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.180828][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.209363][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.221213][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.253379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.263257][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.312416][ T970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.320251][ T970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.389754][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.403680][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.451165][ T5840] veth0_macvtap: entered promiscuous mode [ 83.491118][ T5840] veth1_macvtap: entered promiscuous mode [ 83.636453][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.689503][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.727932][ T970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784692][ T970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.811506][ T970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.882519][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.172818][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.181205][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.474937][ T5981] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.597108][ T5984] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.685034][ T5850] Bluetooth: hci0: command tx timeout [ 84.697986][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.718266][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.748468][ T5981] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.763456][ T5853] Bluetooth: hci3: command tx timeout [ 84.763471][ T5156] Bluetooth: hci2: command tx timeout [ 84.768855][ T5853] Bluetooth: hci4: command tx timeout [ 84.768914][ T5850] Bluetooth: hci1: command tx timeout [ 84.889464][ T5993] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.954387][ T5984] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.016706][ T5981] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.056399][ T5984] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.110924][ T5993] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.202304][ T5981] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.257279][ T5984] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.298688][ T5993] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.437448][ T6009] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.504598][ T5993] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.568994][ T6009] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.620192][ T49] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.629532][ T49] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.655503][ T49] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.666872][ T49] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.695390][ T6009] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.732760][ T49] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.746804][ T49] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.881595][ T6009] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.929700][ T6018] Zero length message leads to an empty skb [ 86.014574][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 86.206752][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.464090][ T6023] team0: Port device team_slave_0 removed [ 86.480359][ T6026] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.500367][ T6038] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.518133][ T49] ================================================================== [ 86.526198][ T49] BUG: KASAN: slab-use-after-free in __mutex_lock+0x144/0xe80 [ 86.533650][ T49] Read of size 8 at addr ffff8880258beeb0 by task kworker/u8:3/49 [ 86.541450][ T49] [ 86.543792][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) [ 86.543814][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 86.543825][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 86.543856][ T49] Call Trace: [ 86.543864][ T49] [ 86.543871][ T49] dump_stack_lvl+0x189/0x250 [ 86.543896][ T49] ? __virt_addr_valid+0x1c8/0x5c0 [ 86.543913][ T49] ? rcu_is_watching+0x15/0xb0 [ 86.543934][ T49] ? __kasan_check_byte+0x12/0x40 [ 86.543951][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.543972][ T49] ? rcu_is_watching+0x15/0xb0 [ 86.543995][ T49] ? lock_release+0x4b/0x3e0 [ 86.544018][ T49] ? __virt_addr_valid+0x1c8/0x5c0 [ 86.544034][ T49] ? __virt_addr_valid+0x4a5/0x5c0 [ 86.544052][ T49] print_report+0xd2/0x2b0 [ 86.544073][ T49] ? __mutex_lock+0x144/0xe80 [ 86.544087][ T49] kasan_report+0x118/0x150 [ 86.544101][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 86.544125][ T49] ? __mutex_lock+0x144/0xe80 [ 86.544142][ T49] __mutex_lock+0x144/0xe80 [ 86.544157][ T49] ? __lock_acquire+0xab9/0xd20 [ 86.544177][ T49] ? __mutex_lock+0x51b/0xe80 [ 86.544194][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 86.544214][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 86.544232][ T49] ? __lock_acquire+0xab9/0xd20 [ 86.544258][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 86.544280][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 86.544303][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 86.544327][ T49] process_scheduled_works+0xae1/0x17b0 [ 86.544361][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.544389][ T49] worker_thread+0x8a0/0xda0 [ 86.544420][ T49] kthread+0x70e/0x8a0 [ 86.544437][ T49] ? __pfx_worker_thread+0x10/0x10 [ 86.544458][ T49] ? __pfx_kthread+0x10/0x10 [ 86.544474][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.544494][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 86.544516][ T49] ? __pfx_kthread+0x10/0x10 [ 86.544533][ T49] ret_from_fork+0x3fc/0x770 [ 86.544555][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 86.544579][ T49] ? __switch_to_asm+0x39/0x70 [ 86.544601][ T49] ? __switch_to_asm+0x33/0x70 [ 86.544617][ T49] ? __pfx_kthread+0x10/0x10 [ 86.544635][ T49] ret_from_fork_asm+0x1a/0x30 [ 86.544657][ T49] [ 86.544663][ T49] [ 86.774088][ T49] Allocated by task 5984: [ 86.778404][ T49] kasan_save_track+0x3e/0x80 [ 86.783077][ T49] __kasan_kmalloc+0x93/0xb0 [ 86.787655][ T49] __kmalloc_noprof+0x27a/0x4f0 [ 86.792503][ T49] udp_tunnel_nic_netdevice_event+0x854/0x19f0 [ 86.798649][ T49] notifier_call_chain+0x1b3/0x3e0 [ 86.803754][ T49] register_netdevice+0x1608/0x1ae0 [ 86.808943][ T49] nsim_create+0xb19/0xef0 [ 86.813371][ T49] __nsim_dev_port_add+0x70a/0xb20 [ 86.818469][ T49] nsim_dev_port_add_all+0x35/0xe0 [ 86.823566][ T49] nsim_dev_reload_up+0x451/0x780 [ 86.828578][ T49] devlink_reload+0x4ec/0x8d0 [ 86.833251][ T49] devlink_nl_reload_doit+0x9c2/0xd50 [ 86.838622][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 86.844162][ T49] genl_rcv_msg+0x60e/0x790 [ 86.848654][ T49] netlink_rcv_skb+0x205/0x470 [ 86.853399][ T49] genl_rcv+0x28/0x40 [ 86.857369][ T49] netlink_unicast+0x758/0x8d0 [ 86.862125][ T49] netlink_sendmsg+0x805/0xb30 [ 86.866888][ T49] __sock_sendmsg+0x219/0x270 [ 86.871554][ T49] ____sys_sendmsg+0x505/0x830 [ 86.876312][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 86.880982][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 86.885911][ T49] do_syscall_64+0xfa/0x3b0 [ 86.890394][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.896269][ T49] [ 86.898582][ T49] Freed by task 6026: [ 86.902542][ T49] kasan_save_track+0x3e/0x80 [ 86.907222][ T49] kasan_save_free_info+0x46/0x50 [ 86.912244][ T49] __kasan_slab_free+0x62/0x70 [ 86.917005][ T49] kfree+0x18e/0x440 [ 86.921065][ T49] udp_tunnel_nic_netdevice_event+0x1332/0x19f0 [ 86.927292][ T49] notifier_call_chain+0x1b3/0x3e0 [ 86.932400][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 86.938801][ T49] unregister_netdevice_queue+0x33c/0x380 [ 86.944513][ T49] nsim_destroy+0x1f6/0x670 [ 86.949010][ T49] __nsim_dev_port_del+0x14d/0x1b0 [ 86.954102][ T49] nsim_dev_reload_destroy+0x288/0x490 [ 86.959555][ T49] nsim_dev_reload_down+0x8a/0xc0 [ 86.964566][ T49] devlink_reload+0x1b3/0x8d0 [ 86.969231][ T49] devlink_nl_reload_doit+0x9c2/0xd50 [ 86.974579][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 86.980111][ T49] genl_rcv_msg+0x60e/0x790 [ 86.984597][ T49] netlink_rcv_skb+0x205/0x470 [ 86.989351][ T49] genl_rcv+0x28/0x40 [ 86.993345][ T49] netlink_unicast+0x758/0x8d0 [ 86.998089][ T49] netlink_sendmsg+0x805/0xb30 [ 87.002832][ T49] __sock_sendmsg+0x219/0x270 [ 87.007486][ T49] ____sys_sendmsg+0x505/0x830 [ 87.012232][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 87.016897][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 87.021818][ T49] do_syscall_64+0xfa/0x3b0 [ 87.026301][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.032178][ T49] [ 87.034484][ T49] Last potentially related work creation: [ 87.040176][ T49] kasan_save_stack+0x3e/0x60 [ 87.044841][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 87.050035][ T49] insert_work+0x3d/0x330 [ 87.054360][ T49] __queue_work+0xbd9/0xfe0 [ 87.058845][ T49] queue_work_on+0x181/0x270 [ 87.063415][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 87.069038][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 87.074476][ T49] geneve_offload_rx_ports+0xd7/0x160 [ 87.079833][ T49] geneve_netdevice_event+0x6a/0x80 [ 87.085013][ T49] notifier_call_chain+0x1b3/0x3e0 [ 87.090111][ T49] call_netdevice_notifiers+0x88/0xc0 [ 87.095465][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 87.101702][ T49] notifier_call_chain+0x1b3/0x3e0 [ 87.106815][ T49] register_netdevice+0x1608/0x1ae0 [ 87.112010][ T49] nsim_create+0xb19/0xef0 [ 87.116424][ T49] __nsim_dev_port_add+0x70a/0xb20 [ 87.121520][ T49] nsim_dev_port_add_all+0x35/0xe0 [ 87.126614][ T49] nsim_dev_reload_up+0x451/0x780 [ 87.131620][ T49] devlink_reload+0x4ec/0x8d0 [ 87.136276][ T49] devlink_nl_reload_doit+0x9c2/0xd50 [ 87.141634][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 87.147169][ T49] genl_rcv_msg+0x60e/0x790 [ 87.151669][ T49] netlink_rcv_skb+0x205/0x470 [ 87.156415][ T49] genl_rcv+0x28/0x40 [ 87.160386][ T49] netlink_unicast+0x758/0x8d0 [ 87.165129][ T49] netlink_sendmsg+0x805/0xb30 [ 87.169876][ T49] __sock_sendmsg+0x219/0x270 [ 87.174534][ T49] ____sys_sendmsg+0x505/0x830 [ 87.179288][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 87.183962][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 87.188890][ T49] do_syscall_64+0xfa/0x3b0 [ 87.193374][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.199247][ T49] [ 87.201552][ T49] Second to last potentially related work creation: [ 87.208110][ T49] kasan_save_stack+0x3e/0x60 [ 87.212776][ T49] kasan_record_aux_stack+0xbd/0xd0 [ 87.217956][ T49] insert_work+0x3d/0x330 [ 87.222267][ T49] __queue_work+0xcfc/0xfe0 [ 87.226748][ T49] queue_work_on+0x181/0x270 [ 87.231314][ T49] __udp_tunnel_nic_add_port+0xb71/0xd60 [ 87.236931][ T49] udp_tunnel_push_rx_port+0x180/0x200 [ 87.242386][ T49] geneve_offload_rx_ports+0xd7/0x160 [ 87.247762][ T49] geneve_netdevice_event+0x6a/0x80 [ 87.252950][ T49] notifier_call_chain+0x1b3/0x3e0 [ 87.258051][ T49] call_netdevice_notifiers+0x88/0xc0 [ 87.263413][ T49] udp_tunnel_nic_netdevice_event+0x134d/0x19f0 [ 87.269639][ T49] notifier_call_chain+0x1b3/0x3e0 [ 87.274741][ T49] register_netdevice+0x1608/0x1ae0 [ 87.279928][ T49] nsim_create+0xb19/0xef0 [ 87.284332][ T49] __nsim_dev_port_add+0x70a/0xb20 [ 87.289424][ T49] nsim_dev_port_add_all+0x35/0xe0 [ 87.294518][ T49] nsim_dev_reload_up+0x451/0x780 [ 87.299521][ T49] devlink_reload+0x4ec/0x8d0 [ 87.304173][ T49] devlink_nl_reload_doit+0x9c2/0xd50 [ 87.309520][ T49] genl_family_rcv_msg_doit+0x215/0x300 [ 87.315050][ T49] genl_rcv_msg+0x60e/0x790 [ 87.319537][ T49] netlink_rcv_skb+0x205/0x470 [ 87.324279][ T49] genl_rcv+0x28/0x40 [ 87.328249][ T49] netlink_unicast+0x758/0x8d0 [ 87.332992][ T49] netlink_sendmsg+0x805/0xb30 [ 87.337736][ T49] __sock_sendmsg+0x219/0x270 [ 87.342845][ T49] ____sys_sendmsg+0x505/0x830 [ 87.347618][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 87.352289][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 87.357226][ T49] do_syscall_64+0xfa/0x3b0 [ 87.361719][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.367610][ T49] [ 87.369921][ T49] The buggy address belongs to the object at ffff8880258bee00 [ 87.369921][ T49] which belongs to the cache kmalloc-256 of size 256 [ 87.383988][ T49] The buggy address is located 176 bytes inside of [ 87.383988][ T49] freed 256-byte region [ffff8880258bee00, ffff8880258bef00) [ 87.397772][ T49] [ 87.400091][ T49] The buggy address belongs to the physical page: [ 87.406489][ T49] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x258be [ 87.415242][ T49] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.423727][ T49] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.431696][ T49] page_type: f5(slab) [ 87.435659][ T49] raw: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 87.444223][ T49] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 87.452791][ T49] head: 00fff00000000040 ffff88801a441b40 0000000000000000 dead000000000001 [ 87.461444][ T49] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 87.470095][ T49] head: 00fff00000000001 ffffea0000962f81 00000000ffffffff 00000000ffffffff [ 87.478748][ T49] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 87.487395][ T49] page dumped because: kasan: bad access detected [ 87.493796][ T49] page_owner tracks the page as allocated [ 87.499493][ T49] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 7780064481, free_ts 0 [ 87.519099][ T49] post_alloc_hook+0x240/0x2a0 [ 87.523851][ T49] get_page_from_freelist+0x21e4/0x22c0 [ 87.529379][ T49] __alloc_frozen_pages_noprof+0x181/0x370 [ 87.535164][ T49] alloc_pages_mpol+0x232/0x4a0 [ 87.539994][ T49] allocate_slab+0x8a/0x3b0 [ 87.544481][ T49] ___slab_alloc+0xbfc/0x1480 [ 87.549140][ T49] __kmalloc_cache_noprof+0x296/0x3d0 [ 87.554492][ T49] bus_add_driver+0x162/0x640 [ 87.559163][ T49] driver_register+0x23a/0x320 [ 87.563908][ T49] do_one_initcall+0x233/0x820 [ 87.568655][ T49] do_initcall_level+0x137/0x1f0 [ 87.573571][ T49] do_initcalls+0x69/0xd0 [ 87.577882][ T49] kernel_init_freeable+0x3d9/0x570 [ 87.583059][ T49] kernel_init+0x1d/0x1d0 [ 87.587375][ T49] ret_from_fork+0x3fc/0x770 [ 87.591947][ T49] ret_from_fork_asm+0x1a/0x30 [ 87.596689][ T49] page_owner free stack trace missing [ 87.602034][ T49] [ 87.604341][ T49] Memory state around the buggy address: [ 87.609946][ T49] ffff8880258bed80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.617987][ T49] ffff8880258bee00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.626026][ T49] >ffff8880258bee80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.634063][ T49] ^ [ 87.639845][ T49] ffff8880258bef00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.647909][ T49] ffff8880258bef80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.656049][ T49] ================================================================== [ 87.677866][ T43] cfg80211: failed to load regulatory.db [ 87.726608][ T49] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.733861][ T49] CPU: 0 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-rc1-syzkaller-00436-g253833da4e56 #0 PREEMPT(full) [ 87.745838][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 87.756154][ T49] Workqueue: udp_tunnel_nic udp_tunnel_nic_device_sync_work [ 87.763455][ T49] Call Trace: [ 87.766739][ T49] [ 87.769666][ T49] dump_stack_lvl+0x99/0x250 [ 87.774263][ T49] ? __asan_memcpy+0x40/0x70 [ 87.778874][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.784078][ T49] ? __pfx__printk+0x10/0x10 [ 87.788665][ T49] panic+0x2db/0x790 [ 87.792554][ T49] ? __pfx_panic+0x10/0x10 [ 87.796960][ T49] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 87.802841][ T49] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.809152][ T49] ? print_memory_metadata+0x314/0x400 [ 87.814595][ T49] ? __mutex_lock+0x144/0xe80 [ 87.819254][ T49] check_panic_on_warn+0x89/0xb0 [ 87.824183][ T49] ? __mutex_lock+0x144/0xe80 [ 87.828845][ T49] end_report+0x78/0x160 [ 87.833070][ T49] kasan_report+0x129/0x150 [ 87.837555][ T49] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 87.843436][ T49] ? __mutex_lock+0x144/0xe80 [ 87.848098][ T49] __mutex_lock+0x144/0xe80 [ 87.852583][ T49] ? __lock_acquire+0xab9/0xd20 [ 87.857425][ T49] ? __mutex_lock+0x51b/0xe80 [ 87.862088][ T49] ? udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 87.868323][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 87.873342][ T49] ? __lock_acquire+0xab9/0xd20 [ 87.878194][ T49] udp_tunnel_nic_device_sync_work+0x39/0xa50 [ 87.884255][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 87.889963][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 87.895673][ T49] process_scheduled_works+0xae1/0x17b0 [ 87.901223][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.907201][ T49] worker_thread+0x8a0/0xda0 [ 87.911790][ T49] kthread+0x70e/0x8a0 [ 87.915851][ T49] ? __pfx_worker_thread+0x10/0x10 [ 87.920953][ T49] ? __pfx_kthread+0x10/0x10 [ 87.925528][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 87.930719][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 87.935909][ T49] ? __pfx_kthread+0x10/0x10 [ 87.940487][ T49] ret_from_fork+0x3fc/0x770 [ 87.945069][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 87.950776][ T49] ? __switch_to_asm+0x39/0x70 [ 87.955543][ T49] ? __switch_to_asm+0x33/0x70 [ 87.960298][ T49] ? __pfx_kthread+0x10/0x10 [ 87.964947][ T49] ret_from_fork_asm+0x1a/0x30 [ 87.969797][ T49] [ 87.973128][ T49] Kernel Offset: disabled [ 87.977469][ T49] Rebooting in 86400 seconds..