last executing test programs: 3.386790443s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) write$cgroup_subtree(r1, &(0x7f00000003c0)=ANY=[], 0x7) write$cgroup_pid(r3, &(0x7f0000000500), 0x12) 3.300050778s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={0xffffffffffffffff, 0x0, 0x0}, 0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100), 0x1001) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r4, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000200)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0, r5}, 0x38) 3.169966653s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 3.057187152s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec663189d3348bf13f872a468352b72482b5b2b364a29c6f0f2c4e741bf6457d1418455e157253231681a3889f39b3da6b60dbe404cb9a145d0d49cfd1668a32b96ff302975748993a8a534144d211c681ff3d91ffa436d40b9afe648ec8bde2f7553fb5d3f3b8423873903abd024284bfd01511c149b6101851f7aae4675df76e7d32d7b91659e4adcc14ddfff8a2b49d1393de72b9d970ee7f45a755c1d9f7b4d43e37e17d6eaff5fe352d507eb0424ab937980ae8fae8a9062b651a53b6543733e259ee3083a308a78ac50f0972629b74e6aadefedf2352d024d8f27d4bc8703493b08bbe75e34ee5796d0d275cae3d3c0eba179e145feee0c8acc98af7888a374dbe705e058fc565e40677890a39e6999ae47202a9237803e9eee30f368725ca8571a8f6a8ba396905f4f023a60acb644bab6b0b8964aa514c37f23509c685648d6adb0e230aca690c91e664bc49fa30ae42a2c71abc7517181d4157ef996628b3624f367519970366acca85d399e2c7703930e2abd4bdbac076230ad16368ccb350357d57626ea47a15f0fa16bd5efa8233fa3ea1183da730204a455a673c783c10a26411c5de816699f7af3401b9f38592a4cd9f3f0b7de18cd69f831eee87a3d2edb64ecf517d201f32f86b80fcd3287330f286465260370527e6116df0651001405563622e14af715f6c3dd10e1986e3b95ebf618ff42bdd7a74f0d0cc2cc8dab1048eb5fdbfb72cb16f9e2a196b512720cbfbb4696f291200a153c383cc441091c62649a88ef173a42eced93a374e4f0a078244e56c14b3c4cc9625b3e9e1853839ecb00d6cfc2d2398634935aedd9a545e4b13895a3b8b05c8fca9af2bba82762db85a449f5d9c6ff87b724f19dc1805eca58445e67782a30f03e7b1272685ab8306c255604360b0d6e53cc443b0b81bcf92b470b8734b7b7b2ccf2d51fc1a8b43d8dba290e875f35b0bdb66790a3bb4d8391c5fdde5f461b5922c56f8a858865c0fd8b39cb79e8e182342ef0398641ca3c76620482705878ff0d9fe2eaae18a8ad73313663e36feca9bae81834482bb19c651e273bc04333963f2a64d516761280db45fc4217b5c2ab73a8a04c5d2c2aced37bb2825d17f68c4d65dfcc54057a46f045bf435391b7304ee376977220e71e97919cd67e3f0f0f63e0dcee8d90d80ead12a5eda22db217bd362c1a4f9244c99da91d618c6b71b21ed80826d4df95aee10786e61b3141002e342490f2d842051305d2e8d41aca580a13cd48a850eada7dfee4bda67a5491acf4cfdd3919135e7b113a1973595b99d6ba152ae8cc63fd95c1d7d4a59b038c426ffdb949fe1a6004df2bbae2acce3f5720419dc597229f2d120c689b07a344e75f4c631d83b3130cc927412daa9607c8c0fa254cde27306360a9a5d18ff9d4d4ed38162a5202ba214db4486887b5831d727bd93e6e7cddfa4d3480cb3b4683b1de52bdff534016719324051f81bdf49a5c12dd7b389107b3eb5dc4858caebe8c0a9866ff632deebc16492f95d202ce0f454476ab77871d3188ec83fc74f2ec1055893b2a138cce27ac5553c5496cbf147002a9c55fdb202969a4802ca3556453a58d2aa8e19f40e577fa280625468d385af8659a0f3ab69fabf4fa1326f7a7ebad98a23958c91f28c4b03ff9f343b6ecdb82e820bcb7de6f51d0fcfbbcef902d21a7eed03ea125363b758085022ade27451ba5e0acd9a0044ec50571d234855448be132e14517ae38b798482cc07e1c009c1a4cdd5c42f3862dd6d4c3b18f9c41d0bf5b709d742877ef7ee6d9932c6d7a9fd09bede9f80645a5c4b97ae48734985131f948bf20e93f82b93d6e69479491158d83655244d91bb5e9dfdf103e2238a95a92f35750769b87dce1d0e8bac4e6ee5467f9800a12fe27a2c8f727bbda617899ca26d13ec3b68b4acd7200b3206852aafb13c94681413ee7d0987f4d067b4bc5fc5e01ebe9bdbfc0198232f92da3371d12023388f86a4bb4db9bd559570aef27a96812dd2583c72732922266b98c89c264311577621ceb2625dac0af0fd08f5c27a658645777cb36d687d6f0e6835587cbe65ed922cbd1190b1d60259024be61e7e32b1ecb5e72799103c3a3ea91191667418fedf79d839200ee75da4d68fd6facdd1243f30727c40c6a7c4ffa3d937f4c21b076d146f439d8961258526d56336f7d94e945f90053ef865dd9f939b12d8b6b72b1f20a050b69b8a3b8bc88584766bf9783116c8fc8c4883f8dca31dbfd2775675d868136e5f5e16e3508986750fa8825231fed43ae2b444f5992011f0b80b1f3b0e397ff98fe81da3bd00593329f3014315fb4828fdfec77c8f3c8a92278866f7d299f9a0818e36d1bbad629a61345e01e495dfc4412fcc8b64eac5259de21dae5f5b34c06ee81c0e46b12203b639cfef7f12871287abca6b2f70ffa2cb225585bfbf2c0cd010bdd1b2b3f560016e4db6c30a26e517b608633aa40ab1802da8e94188bad14ab007e415ec41c3dabf4d2817a43a082313529e4a80596807b785af9391117f780db637f2214bb8082373303da889ffd89fa43f4cca427b43e3c17942d314a577112cfb31e841ae40fd18220e9aaa24e382936c0b859a3a425c2018b093e42648b7517dcce9af1366dc5ea8fd575001cbe880ddbb0a768033ee3802c68c4b2fc290fcb84f1e33318543fd2ddf065503c0767c86fcde6931797f275ee4c149d616ff02a9a019c223c16cfd6e618b07c7bd8009d3201a92b91a0944ff21d71ffc53c39b7a318c6451d80b05f9d9c81fd1a78ef35e14cbebc1b4e2de28039301042c0fa09ad2e43d5f78ab4104218bab2da5034050bbf625c6803496dd3d77b574aed51badd3e9967548014b8b318dfb2e0a6ce6637cee786806ec06b359d6569c65df2e538b43862be27d4ddb2710447ed7e56cb4a02779c8767e11056cfaca1ab1aea20d4198a050e98695ae3f2a0aadb5b34b6b945379b81259ebe7abe6d3ca23cae048429b6c850813706f59231034fce07c4111961193d581e3bbbd6c9afd8b3d1e0604807dbd880d2ccc5266818a18287e8c4bda311be83c6f1c5e7f571b9f5ab1f84f8252df9d62f75865adcdd61eaaf7df4cbdd994ab17d2d5d684f95715d4636a6cb69fa2619c6b76ee060202a0a8c934aa537d2c5cf736142349b19fb9b532b05e6dff05c4c635f4134bcc0ef2e38c3fd75d8664d7dfa3139e1b2c2cbbdbe4fc0e2e80870ade368b730d4c06946b608088991f346765afaad6765e5a16267b2d249ee22ea1c6cb85d5d0f8ee48204a5dc48ae6415e3802fd8a431d249f95c72f6895978b36c424e40f83dfe1d0ca01dca14c4a308e926fe726ea0b456dcd976147e61744675f81f38bd5ef06ed76692ac8ac03744c8dc313f06aa28832a3286e626d5e29c748c21164475c739d3f6c6ad046fbb1a149867faf770c089b3513a0649d787208f06e7db6f8a44a9e32c6bd8dd9cca53bcd8ba7ec49d4068d7018b4c8fbd13070f9b0d02d3686b54f96a21e74e346c380a99f21f33925d4a39d510842ed84f2605a15051a784d8216364c2f8ec79f7884ec151ac56d11e30e058d2c49998147c1d54e04aea5d2e9bcc5bf051690d7aa905fdd68528309afda3fd5920cecfae73f6d5f8962e647f5e909748ff9105097118feecf28d6d514ede8cb2d4201da6efc9f3c24893570b227dfe673158e6c17bfcd91625bc4f87eb6fc67e5b647b18231d", 0xa53}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x40086607, 0x20001412) 2.938070347s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0xc, 0x10003, '\x00', [{}, {0xffffffff}]}) 2.854315803s ago: executing program 2: unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0xa, 0x2, 0x11) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000240)=@in6={0x2, 0x4e22, 0x4, @remote}, 0x80, 0x0}, 0x0) 2.549110258s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRESHEX=r6], 0x54}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000000440)=""/68, 0x44, 0x0, &(0x7f0000000540)=""/241, 0xf1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x9, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000240)=""/21, 0x41100, 0x31, '\x00', r5, 0x1a, r0, 0x8, &(0x7f0000000400)={0x10000, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, r0, r0], &(0x7f0000000880)=[{0x0, 0x1, 0xf, 0x3}, {0x2, 0x5, 0x0, 0x2}, {0x2, 0x2, 0xa, 0x7}, {0x1, 0x3, 0xa, 0x3}], 0x10, 0x8}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xd1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) 2.284031911s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000680001000000000000000000020000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 2.161476742s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000a40)="90b4", &(0x7f0000000040)=@udp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x0, 0x0, 0x5, 0x4, 0x50}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001640)=""/4096, 0x40f00, 0x48, '\x00', r7, 0x25, r5, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x9, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r2, r2, r5, r2, r2, r2], 0x0, 0x10, 0x2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000002640)=""/102394, 0x18ffa}], 0x1}}], 0x48}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) 1.864481082s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 1.796268152s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 1.679025s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9, 0x1}, 0x10, 0x0, r5, 0x2, &(0x7f00000007c0)=[r5, r5, r6, r5, r5], &(0x7f0000000800)=[{0x0, 0x3, 0x4, 0x3}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x5}, 0x90) close(r5) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x3, 0x0}, 0x8) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) bpf$MAP_CREATE(0x1300000000000000, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0xc44a, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2001612}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xd, 0x11, &(0x7f0000001000)=@ringbuf={{}, {}, {}, [@map_fd={0x18, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000c40)='GPL\x00', 0x800, 0x12, &(0x7f0000000c80)=""/18, 0x41000, 0x18, '\x00', r7, 0x27, r5, 0x8, &(0x7f0000000cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0x2, 0x1, 0x2}, 0x10, r8, r2, 0x6, &(0x7f0000000e80)=[r5, r6], &(0x7f0000000ec0)=[{0x0, 0x1, 0x6, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x8, 0xa}, {0x5, 0x4, 0xc, 0x4}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0xffffffe0}, 0x90) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x80) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000000c0)='sched_process_wait\x00', r9}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r12, r10, 0x0, r12}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r13 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r13, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) 1.611255163s ago: executing program 1: unshare(0x68060200) 1.588461716s ago: executing program 2: unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x10030800) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ed80e931000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000100000008000b40000000002c00048028000180080001006e6174001c000280080001400000000c080002400000000008000540000000140900010073797a30"], 0xc8}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000100850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg(r1, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000004"], 0x68) (async) unshare(0x28040500) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @local}}, 0x3, 0x3}, 0x90) 1.55133025s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5a523}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="5dc413dd9f96"}, 0x14) 1.423189017s ago: executing program 4: unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)=ANY=[@ANYBLOB='filter'], &(0x7f0000000100)=0x28) 1.309185233s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x7}, 0x48) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xffffff47) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00), 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r5}, &(0x7f0000000c40), &(0x7f0000000c80)=r6}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x2c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01010000000100000000040000000c000180060001000000002a1f4042424cd07208482d143a5090c49177393ed21d8e5e0375c95005cf2726e861166b38f746fb187a049654742090b2c9954f3a1d60303a1061ee6a09cbd25e4d29c0643d6b9bba482ac1d31c7050592ec8097b6081199224a41804307939b4c86cd6aa72e31a6186d29ade354dadf1fbbd"], 0x20}}, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.082979703s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r2, &(0x7f0000000a40)="90b4", &(0x7f0000000040)=@udp6=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet6_mreq(r5, 0x29, 0x1c, &(0x7f0000000380)={@rand_addr, 0x0}, &(0x7f00000003c0)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @ldst={0x2, 0x0, 0x0, 0x5, 0x4, 0x50}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}]}, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000001640)=""/4096, 0x40f00, 0x48, '\x00', r7, 0x25, r5, 0x8, &(0x7f0000000400)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x9, 0x1, 0x7f}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000580)=[r2, r2, r2, r5, r2, r2, r2], 0x0, 0x10, 0x2}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000140)=[{&(0x7f0000002640)=""/102394, 0x18ffa}], 0x1}}], 0x48}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) 887.961241ms ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x48005}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000680001000000000000000000020000000000000008000500", @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x0, 0xb}}}, 0x24}}, 0x0) 866.657688ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000080)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={&(0x7f0000000e40), 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0xe8, 0x1, 0x9, 0x401, 0x0, 0x0, {}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_QUEUE_NUM={0x8}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @NFCTH_PRIV_DATA_LEN={0x8}, @NFCTH_TUPLE={0x84, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0xe8}}, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) accept4(r0, &(0x7f0000000140)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x80, 0xc0000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rds(0x15, 0x5, 0x0) write$binfmt_aout(r3, &(0x7f00000005c0)={{0x1c4, 0x80, 0xa1, 0x30, 0x2b9, 0x7fff, 0xa4, 0x5}, "9625a25cafb18800854df19d3d3e6f6a9ea51cd99a6986c46095e45e86dbde815a919b9047db53999e3a126a2b412724", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x850) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000600)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) close(r2) r6 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) bind$inet(r6, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x0, 0x0, 0xffffff6b) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 528.121617ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c000580050019"], 0x4c}}, 0x0) 506.948974ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000008c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000003b00)=[{{&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002940)="2e7be370f88e801dcbfd6fc9b169aadf2d788f31060000002c9c1ea0d17dc8387758e4428f3e298ab317415fd80b0cf47466f42c8884034bfe4e7ea097451bdc05d7b582537e4ab091cd008a8000000000000000368d5e9e19a9d33882be8e62fd0bbfcc94c842aa81c90fab7ab87fa321", 0x71}], 0x1}}], 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x8}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r4}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r3, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRESHEX=r6], 0x54}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000680)={r0, 0x20, &(0x7f0000000640)={&(0x7f0000000440)=""/68, 0x44, 0x0, &(0x7f0000000540)=""/241, 0xf1}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x9, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x15, &(0x7f0000000240)=""/21, 0x41100, 0x31, '\x00', r5, 0x1a, r0, 0x8, &(0x7f0000000400)={0x10000, 0x5}, 0x8, 0x10, 0x0, 0x0, r7, r0, 0x4, &(0x7f00000006c0)=[0xffffffffffffffff, r0, r0], &(0x7f0000000880)=[{0x0, 0x1, 0xf, 0x3}, {0x2, 0x5, 0x0, 0x2}, {0x2, 0x2, 0xa, 0x7}, {0x1, 0x3, 0xa, 0x3}], 0x10, 0x8}, 0x90) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0xd1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r9, &(0x7f0000000000)=ANY=[], 0xfffffecc) 463.63471ms ago: executing program 4: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x50, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback={0xfec0ffff00000000}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x50}}, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_plug\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000380)="b3460ad0c95abb19af20ff070000e3bfabb2ac1d4878b0d3cdb82c5761876619440b1011f034ab4718c118379a69991b2100ff30c01f028139ea36eed618ebe9a2476a9326909e12c3410d1626152ecbd58bf270df955540f89cf8deb772731522b0addffc481a42e65b0b299385c35d5f3f6b7381e31f4677f19fbfbc93765a8066", 0x82}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000006c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1a, 0x11, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000008000000000000000600000018200000", @ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018260000", @ANYRES32=r6, @ANYBLOB="00000000010000801800000007000000000000000001000018630000050000000000000000020000"], &(0x7f0000000680)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, 0x6, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x3, 0x5, 0x94}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000740)=[{0x3, 0x2, 0xd, 0x2}], 0x10, 0x10000}, 0x90) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000880), 0x10, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x4000810}, 0x40) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r10}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1c751, 0x48041}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000580)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000b40)=ANY=[@ANYBLOB="1c010000a1ec54a85a99342331d4e87669f425e919e47c489155217b8c15d6506f392abac98bfc09d7c5dee99c13f04faa8da3bc35381d52ddacf6b35f465bc2cde0806264568486ca7315bf163c270b2fd376e973f12a411800aaa28ded", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25120000007c0001801400020000000000000000000000000000000000140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002007465616d30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030003000000140002007465616d5f736c6176655f3100000000340001801400020076657468305f766972745f7769666900080003000000000014000200766c616e30000000000000000000000008000700810000003400018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="080003000300000008000600040000001400018008000100", @ANYRES32=r14, @ANYBLOB="0800030002000000"], 0x11c}, 0x1, 0x0, 0x0, 0x48080}, 0x40) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r15, &(0x7f0000000200), 0x43400) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e80)=""/208, 0xd0}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000740)=""/253, 0xfd}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f00000002c0)) 390.295366ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) 353.646091ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044810}, 0x4040010) 307.889013ms ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) 269.583154ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000080)=0x2, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.memory_pressure\x00', 0x275a, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc}, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) unshare(0x40400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x3, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0xfffffffe}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='btrfs_clear_extent_bit\x00', r5}, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket(0x2000000000000021, 0x2, 0x10000000000002) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x18841) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000380), 0x4) r8 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) writev(r8, &(0x7f0000001500)=[{&(0x7f0000000180)="c4", 0x1}], 0x36) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003100)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x3ffffffffffff52, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x12, r2, 0x0) r10 = socket(0x1d, 0x2, 0x6) getsockopt$nfc_llcp(r10, 0x6a, 0x4, 0x0, 0x20000071) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 110.895572ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x7}, 0x48) ioctl$IMHOLD_L1(0xffffffffffffffff, 0x80044948, &(0x7f0000000000)=0xffffff47) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r3, 0x303, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00), 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000011c0)={{r5}, &(0x7f0000000c40), &(0x7f0000000c80)=r6}, 0x20) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x2c, r10, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000080) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000004c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01010000000100000000040000000c000180060001000000002a1f4042424cd07208482d143a5090c49177393ed21d8e5e0375c95005cf2726e861166b38f746fb187a049654742090b2c9954f3a1d60303a1061ee6a09cbd25e4d29c0643d6b9bba482ac1d31c7050592ec8097b6081199224a41804307939b4c86cd6aa72e31a6186d29ade354dadf1fbbd"], 0x20}}, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup(r7, &(0x7f00000000c0)='syz1\x00', 0x1ff) write$cgroup_pid(r8, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) 84.182101ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = socket(0x0, 0x80802, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f00000000c0)={0x10000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3d}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r3, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x24) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110}}], 0x18, 0x4c00}, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b80)={{r4}, &(0x7f0000000b00), &(0x7f0000000b40)='%-010d \x00'}, 0x20) listen(r3, 0x44) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000040)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000280), 0x8, 0x10, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r6, &(0x7f0000000700)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x5b, 0x6, 0x40, 0x800, 0xffffffffffffffff, 0x6, '\x00', r5, r6, 0x2, 0x5, 0x1, 0xb}, 0x48) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8}}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000740)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r8}, 0x80) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x1e) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002700)={r10}, 0x4) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r10}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ec0)=@bpf_ext={0x1c, 0x17, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x80000000}, [@map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x66c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_idx={0x18, 0x5, 0x5, 0x0, 0xb}, @map_idx={0x18, 0xa}, @generic={0x20, 0x3, 0x7, 0x654d, 0x1c}]}, &(0x7f0000000c80)='syzkaller\x00', 0xffff6423, 0xea, &(0x7f0000000cc0)=""/234, 0x41000, 0x6f, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000e00)={0x4, 0x8, 0x1, 0x8000}, 0x10, 0x1bb19, r8, 0x3, &(0x7f0000000e40)=[r10, r4], &(0x7f0000000e80)=[{0x5, 0x3, 0xd, 0x3}, {0x2, 0x2, 0x4, 0x8}, {0x5, 0x2, 0x4, 0x8}], 0x10, 0x81}, 0x90) sendmsg$inet(r0, &(0x7f0000001500)={&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="f2db3e8add72015fb7f05eb4aff03213928b8c9b5ccba19b9620e322915c45710dd4db88", 0x24}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="5f9b9703d7b336324505dd4d176879a318dd5bf4f99449298c013dfa6d37c53c8da8bb27bc6c9211f95de48dc4117834ed0e6fa04406cef81edf6b23fe079276298c24e71f3b33147db30ad22844a62fb839d27a96cb087d6b0183545157bd8cd45241f314e152216ecdd1afa79909a3873218de3cb5c4db4e832efdab801356d68399dcbe51253e1b07febcb681508b4dacf3f3140ca7d20820ea077edc7ea522666b932eb4b424100bf35cf311d69a53a761e27986610e86d6d4b1c7c68316858a11e3d1e8468b528a5dac625c37a39d7baa7ebc", 0xd5}], 0x3, &(0x7f00000013c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x401}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0x7e, 0x1, 0x7, [{@private=0xa010102, 0x4}, {@multicast1, 0x80}]}, @ssrr={0x89, 0x1f, 0xf0, [@dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x12}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @remote, @remote]}, @end, @cipso={0x86, 0x17, 0xffffffffffffffff, [{0x5, 0xf, "7aaa3b0c887dc5bcc9cecccfa4"}, {0x0, 0x2}]}, @cipso={0x86, 0x13, 0xffffffffffffffff, [{0x7, 0xd, "4b363d4814dbbea16cf8d6"}]}, @generic={0x7, 0xe, "06d08161cb5ddb61eb1340d5"}, @ssrr={0x89, 0xb, 0x5f, [@empty, @private=0xa010102]}, @cipso={0x86, 0x33, 0x3, [{0x2, 0x8, "988059e1a6ad"}, {0x6, 0xe, "6a0960e3688c2cfb55a5872d"}, {0x6, 0x9, "ca8bc405f1e987"}, {0x1, 0x6, "4a53dd61"}, {0x0, 0x8, "46261800497b"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010100, @private=0xa010101}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x8f, [@broadcast, @rand_addr=0x64010100, @loopback]}]}}}], 0x120}, 0x24000815) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_da_reserve_space\x00', r1}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r11, &(0x7f0000000040)=ANY=[], 0xffe6) 0s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x8}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xfffffffb}, @TCA_NETEM_RATE64={0xc, 0x8, 0x654534bf5327d02e}, @TCA_NETEM_RATE={0x14, 0x6, {0x0, 0x0, 0x2}}]}}}]}, 0x78}}, 0x0) socket(0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000480)={0x0, 0x4, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="680000001000370429bd70000000000000000000", @ANYRES32=r4, @ANYBLOB="93040400000000004800128008000100736974003c00028006000f000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff0800ff03ef000000080002006401010005000a00000000000600080003"], 0x68}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. 2024/05/30 01:37:39 fuzzer started 2024/05/30 01:37:39 dialing manager at 10.128.0.169:30016 [ 55.658626][ T5090] cgroup: Unknown subsys name 'net' [ 55.852101][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/05/30 01:37:40 starting 5 executor processes [ 56.941579][ T5092] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.954101][ T5092] syz-executor (5092) used greatest stack depth: 18832 bytes left [ 57.770345][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.789041][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.798282][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.819522][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.826777][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.839397][ T5124] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.845131][ T5129] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.849026][ T5124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.863518][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.863902][ T5124] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.871528][ T5129] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.880054][ T5124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.886053][ T5128] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.894283][ T5124] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.906897][ T5124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.911894][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.915561][ T5124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.921063][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.928937][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.937256][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.943362][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.949062][ T5128] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.958557][ T5124] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.965829][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.978509][ T5124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.985373][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.986129][ T5124] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.000178][ T5124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.008312][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.016532][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.570333][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 58.685765][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 58.711672][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 58.805820][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 58.835160][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 58.874369][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.882210][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.892200][ T5111] bridge_slave_0: entered allmulticast mode [ 58.899191][ T5111] bridge_slave_0: entered promiscuous mode [ 58.949188][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.956375][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.963963][ T5111] bridge_slave_1: entered allmulticast mode [ 58.971239][ T5111] bridge_slave_1: entered promiscuous mode [ 59.000979][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.008224][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.015544][ T5122] bridge_slave_0: entered allmulticast mode [ 59.022709][ T5122] bridge_slave_0: entered promiscuous mode [ 59.032319][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.040179][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.047353][ T5122] bridge_slave_1: entered allmulticast mode [ 59.054385][ T5122] bridge_slave_1: entered promiscuous mode [ 59.126683][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.134224][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.141628][ T5119] bridge_slave_0: entered allmulticast mode [ 59.148750][ T5119] bridge_slave_0: entered promiscuous mode [ 59.156444][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.163979][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.172186][ T5119] bridge_slave_1: entered allmulticast mode [ 59.179221][ T5119] bridge_slave_1: entered promiscuous mode [ 59.189915][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.246262][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.284946][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.298354][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.311334][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.352273][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.359903][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.367234][ T5125] bridge_slave_0: entered allmulticast mode [ 59.374967][ T5125] bridge_slave_0: entered promiscuous mode [ 59.396599][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.417139][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.424546][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.431933][ T5112] bridge_slave_0: entered allmulticast mode [ 59.439307][ T5112] bridge_slave_0: entered promiscuous mode [ 59.446355][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.453896][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.461170][ T5125] bridge_slave_1: entered allmulticast mode [ 59.468069][ T5125] bridge_slave_1: entered promiscuous mode [ 59.499760][ T5111] team0: Port device team_slave_0 added [ 59.506102][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.513365][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.521208][ T5112] bridge_slave_1: entered allmulticast mode [ 59.528072][ T5112] bridge_slave_1: entered promiscuous mode [ 59.563288][ T5122] team0: Port device team_slave_0 added [ 59.582888][ T5111] team0: Port device team_slave_1 added [ 59.616200][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.627475][ T5122] team0: Port device team_slave_1 added [ 59.645987][ T5119] team0: Port device team_slave_0 added [ 59.656452][ T5119] team0: Port device team_slave_1 added [ 59.675367][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.689166][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.728653][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.735628][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.762265][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.799053][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.817264][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.827716][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.854488][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.879422][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.886468][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.913056][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.924953][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.932135][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.958152][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.971613][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.978656][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.004671][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.029320][ T5125] team0: Port device team_slave_0 added [ 60.038932][ T5118] Bluetooth: hci4: command tx timeout [ 60.039003][ T53] Bluetooth: hci0: command tx timeout [ 60.044818][ T5128] Bluetooth: hci2: command tx timeout [ 60.050491][ T5124] Bluetooth: hci1: command tx timeout [ 60.065463][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.072696][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.098882][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.122502][ T5124] Bluetooth: hci3: command tx timeout [ 60.132585][ T5125] team0: Port device team_slave_1 added [ 60.175673][ T5112] team0: Port device team_slave_0 added [ 60.211865][ T5122] hsr_slave_0: entered promiscuous mode [ 60.218610][ T5122] hsr_slave_1: entered promiscuous mode [ 60.240466][ T5112] team0: Port device team_slave_1 added [ 60.259740][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.266820][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.293392][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.352827][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.360203][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.386620][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.413082][ T5111] hsr_slave_0: entered promiscuous mode [ 60.421046][ T5111] hsr_slave_1: entered promiscuous mode [ 60.427228][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.435263][ T5111] Cannot create hsr debugfs directory [ 60.466930][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.474164][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.500802][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.545923][ T5119] hsr_slave_0: entered promiscuous mode [ 60.552698][ T5119] hsr_slave_1: entered promiscuous mode [ 60.559548][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.567144][ T5119] Cannot create hsr debugfs directory [ 60.574423][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.581668][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.608347][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.634224][ T5125] hsr_slave_0: entered promiscuous mode [ 60.640790][ T5125] hsr_slave_1: entered promiscuous mode [ 60.646894][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.654569][ T5125] Cannot create hsr debugfs directory [ 60.857584][ T5112] hsr_slave_0: entered promiscuous mode [ 60.865178][ T5112] hsr_slave_1: entered promiscuous mode [ 60.873341][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.881069][ T5112] Cannot create hsr debugfs directory [ 61.160222][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.174570][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.195690][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.223033][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.246030][ T5111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.266309][ T5111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.283412][ T5111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.319542][ T5111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.384550][ T5119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.425712][ T5119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.437179][ T5119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.474871][ T5119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.505972][ T5125] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.515552][ T5125] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.529637][ T5125] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.542583][ T5125] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.663621][ T5112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.695100][ T5112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.706489][ T5112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.723772][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.749978][ T5112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.797444][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.832482][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.882123][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.889602][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.941335][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.948527][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.962557][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.022652][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.029918][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.059048][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.071141][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.090289][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.097420][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.119020][ T53] Bluetooth: hci4: command tx timeout [ 62.119917][ T5118] Bluetooth: hci0: command tx timeout [ 62.126758][ T5124] Bluetooth: hci2: command tx timeout [ 62.130273][ T5128] Bluetooth: hci1: command tx timeout [ 62.144963][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.198577][ T5128] Bluetooth: hci3: command tx timeout [ 62.233720][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.247662][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.254907][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.284984][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.292206][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.342726][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.349964][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.406902][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.495247][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.519817][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.527011][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.549074][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.556178][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.600661][ T5164] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.607800][ T5164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.695559][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.742661][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.766240][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.874015][ T5122] veth0_vlan: entered promiscuous mode [ 62.927673][ T5111] veth0_vlan: entered promiscuous mode [ 62.985849][ T5111] veth1_vlan: entered promiscuous mode [ 62.996590][ T5122] veth1_vlan: entered promiscuous mode [ 63.100427][ T5111] veth0_macvtap: entered promiscuous mode [ 63.113427][ T5111] veth1_macvtap: entered promiscuous mode [ 63.165266][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.190670][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.213596][ T5122] veth0_macvtap: entered promiscuous mode [ 63.229610][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.296973][ T5111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.307428][ T5111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.317674][ T5111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.327967][ T5111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.345132][ T5122] veth1_macvtap: entered promiscuous mode [ 63.395294][ T5125] veth0_vlan: entered promiscuous mode [ 63.416641][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.428122][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.441038][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.469553][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.505900][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.527957][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.544579][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.556362][ T5125] veth1_vlan: entered promiscuous mode [ 63.596730][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.607435][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.623386][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.633473][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.672353][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.698806][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.706870][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.810458][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.824186][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.887230][ T5125] veth0_macvtap: entered promiscuous mode [ 63.932420][ T5125] veth1_macvtap: entered promiscuous mode [ 63.992001][ T5112] veth0_vlan: entered promiscuous mode [ 64.028189][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.036059][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.064647][ T5196] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 64.084108][ T5196] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.097400][ T5196] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.112593][ T5112] veth1_vlan: entered promiscuous mode [ 64.122833][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.140182][ T5196] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.147302][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.160704][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.165591][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.180097][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.191413][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.198713][ T5128] Bluetooth: hci2: command tx timeout [ 64.204818][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.206623][ T5128] Bluetooth: hci4: command tx timeout [ 64.220924][ T5124] Bluetooth: hci1: command tx timeout [ 64.220939][ T5118] Bluetooth: hci0: command tx timeout [ 64.273613][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.285463][ T53] Bluetooth: hci3: command tx timeout [ 64.295559][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.313694][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.325272][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.337320][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.350194][ T5119] veth0_vlan: entered promiscuous mode [ 64.367520][ T5112] veth0_macvtap: entered promiscuous mode [ 64.401251][ T5112] veth1_macvtap: entered promiscuous mode [ 64.435557][ T5125] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.454324][ T5125] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.463828][ T5125] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.473748][ T5125] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.526523][ T5204] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.540701][ T5119] veth1_vlan: entered promiscuous mode [ 64.661977][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.682933][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.694318][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.706088][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.721387][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.732981][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.762963][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.789850][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.803993][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.816947][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.844995][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.883392][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.895258][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.909159][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.939364][ T5112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.949363][ T5112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.962466][ T5213] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 64.969378][ T5112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.980355][ T5112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.064170][ T5119] veth0_macvtap: entered promiscuous mode [ 65.085576][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.095396][ T5119] veth1_macvtap: entered promiscuous mode [ 65.100862][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.203005][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.218633][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.232541][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.244668][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.257771][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.269778][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.279870][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.290430][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.307046][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.325524][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.339820][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.379706][ T5219] wg2: entered promiscuous mode [ 65.384648][ T5219] wg2: entered allmulticast mode [ 65.393060][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.409305][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.423553][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.443145][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.457052][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.474167][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.485346][ T5226] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.502851][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.513572][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.530439][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.544552][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.555092][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.633505][ T5119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.663856][ T5230] sctp: [Deprecated]: syz-executor.3 (pid 5230) Use of int in maxseg socket option. [ 65.663856][ T5230] Use struct sctp_assoc_value instead [ 65.663951][ T5119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.695991][ T5119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.705694][ T5119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.772968][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.799771][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.934434][ T5236] : renamed from bond0 (while UP) [ 66.007606][ T5236] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 66.039850][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 66.114547][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.146749][ T5240] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 66.160702][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.284214][ T5124] Bluetooth: hci0: command tx timeout [ 66.284236][ T5128] Bluetooth: hci2: command tx timeout [ 66.284272][ T5128] Bluetooth: hci4: command tx timeout [ 66.289821][ T53] Bluetooth: hci1: command tx timeout [ 66.311567][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.325964][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.358699][ T53] Bluetooth: hci3: command tx timeout [ 66.883998][ T5272] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 67.063355][ T5281] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 67.090438][ T5281] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 67.156735][ T5280] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.506045][ T5302] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 67.556900][ T5305] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.922406][ T5321] ip6tnl0: entered promiscuous mode [ 68.006822][ T5325] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 68.037747][ T5325] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 68.085328][ T5326] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 68.138768][ T5326] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 68.195640][ T5301] ip6tnl0: left promiscuous mode [ 68.204428][ T5331] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 68.232591][ T5331] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 68.516424][ T5338] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 69.218838][ T5368] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 69.281307][ T5370] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 69.451456][ T5374] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 69.580537][ T5378] ip6tnl0: entered promiscuous mode [ 69.613772][ T5379] ip6tnl0: entered promiscuous mode [ 69.736699][ T5382] validate_nla: 1 callbacks suppressed [ 69.736721][ T5382] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 69.766849][ T5382] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 69.794236][ T5367] ip6tnl0: left promiscuous mode [ 69.815300][ T5383] ip6tnl0: entered promiscuous mode [ 69.955981][ T5369] ip6tnl0: left promiscuous mode [ 70.012343][ T5373] ip6tnl0: left promiscuous mode [ 70.066307][ T5386] netlink: 'syz-executor.3': attribute type 26 has an invalid length. [ 70.662171][ T5421] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 70.718124][ T5423] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 70.726242][ T5423] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 70.763317][ T5407] Zero length message leads to an empty skb [ 70.907623][ T5432] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 71.044413][ T5439] ip6tnl0: entered promiscuous mode [ 71.086810][ T5438] netlink: 'syz-executor.1': attribute type 26 has an invalid length. [ 71.212951][ T5441] ip6tnl0: entered promiscuous mode [ 71.301430][ T5420] ip6tnl0: left promiscuous mode [ 71.332499][ T5431] ip6tnl0: left promiscuous mode [ 71.607061][ T5460] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.644797][ T5460] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.702909][ T5466] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 71.731594][ T5466] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 71.882936][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.898131][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.918904][ T5477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.132257][ T5478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.315782][ T5499] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 72.424103][ T5507] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.746204][ T5518] ip6tnl0: entered promiscuous mode [ 73.122123][ T5531] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.196717][ T5494] ip6tnl0: left promiscuous mode [ 73.328131][ T5538] batadv0: entered promiscuous mode [ 73.359664][ T5538] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.376587][ T5545] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.436138][ T5538] batadv0: left promiscuous mode [ 73.747019][ T5562] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 74.068811][ T5573] ip6tnl0: entered promiscuous mode [ 74.122282][ T5575] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 74.154731][ T5575] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 74.447827][ T5584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.477713][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.536594][ T5561] ip6tnl0: left promiscuous mode [ 74.557713][ T5585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.280843][ T5627] ip6tnl0: Master is either lo or non-ether device [ 75.332020][ T5631] batadv0: entered promiscuous mode [ 75.340468][ T5631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 75.349953][ T5631] batadv0: left promiscuous mode [ 75.623150][ T5640] validate_nla: 1 callbacks suppressed [ 75.623171][ T5640] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 75.925050][ T5652] pim6reg: entered allmulticast mode [ 76.185990][ T5671] macsec0: entered promiscuous mode [ 76.211162][ T5671] macsec0: entered allmulticast mode [ 76.216575][ T5671] veth1_macvtap: entered allmulticast mode [ 76.251674][ T5675] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 76.290620][ T5675] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 76.395312][ T5679] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 76.715050][ T29] audit: type=1804 audit(1717033080.719:2): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir603004379/syzkaller.Twx50u/28/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 77.136161][ T5712] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 77.392657][ T5716] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 77.432356][ T5719] bridge0: port 3(bond1) entered blocking state [ 77.476522][ T5719] bridge0: port 3(bond1) entered disabled state [ 77.534417][ T5719] bond1: entered allmulticast mode [ 77.558974][ T5719] bridge2: entered allmulticast mode [ 77.585006][ T5719] bond1: entered promiscuous mode [ 77.599691][ T5719] bridge2: entered promiscuous mode [ 77.622513][ T5724] __nla_validate_parse: 8 callbacks suppressed [ 77.622532][ T5724] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.665954][ T5726] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 77.683002][ T5726] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 77.783888][ T5736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.848220][ T5736] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 77.885396][ T5736] net_ratelimit: 2 callbacks suppressed [ 77.885413][ T5736] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 78.154200][ T29] audit: type=1804 audit(1717033082.149:3): pid=5748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3710967603/syzkaller.AYNgGD/37/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 78.315159][ T5766] macsec0: entered promiscuous mode [ 78.349419][ T5766] macsec0: entered allmulticast mode [ 78.372928][ T5766] veth1_macvtap: entered allmulticast mode [ 78.513108][ T5773] openvswitch: netlink: Missing key (keys=40, expected=80) [ 78.685011][ T5775] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 78.776084][ T5777] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 78.881987][ T5781] bond1: (slave bridge5): Enslaving as a backup interface with an up link [ 78.931381][ T5783] bond0: (slave bridge2): Enslaving as a backup interface with an up link [ 78.952542][ T5784] bridge0: port 3(bond1) entered blocking state [ 78.968155][ T5784] bridge0: port 3(bond1) entered disabled state [ 78.980950][ T5784] bond1: entered allmulticast mode [ 78.986309][ T5784] bridge5: entered allmulticast mode [ 79.001871][ T5784] bond1: entered promiscuous mode [ 79.007123][ T5784] bridge5: entered promiscuous mode [ 79.024222][ T5786] bridge0: port 3(bond0) entered blocking state [ 79.038270][ T5786] bridge0: port 3(bond0) entered disabled state [ 79.058223][ T5786] bond0: entered allmulticast mode [ 79.063597][ T5786] bridge2: entered allmulticast mode [ 79.099094][ T5786] bond0: entered promiscuous mode [ 79.117723][ T5786] bridge2: entered promiscuous mode [ 79.391037][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.554811][ T5796] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.615458][ T5796] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 79.734550][ T29] audit: type=1804 audit(1717033083.739:4): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4134452576/syzkaller.ZbrVLA/36/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 79.896286][ T5811] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.980081][ T5820] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 80.410090][ T5823] bond1: (slave bridge4): Enslaving as a backup interface with an up link [ 80.490508][ T5843] openvswitch: netlink: Missing key (keys=40, expected=80) [ 80.498685][ T5830] bridge0: port 4(bond1) entered blocking state [ 80.506664][ T5830] bridge0: port 4(bond1) entered disabled state [ 80.556529][ T5830] bond1: entered allmulticast mode [ 80.582023][ T5830] bond1: entered promiscuous mode [ 80.588202][ T5820] bridge0: port 3(bond1) entered blocking state [ 80.616673][ T5820] bridge0: port 3(bond1) entered disabled state [ 80.642446][ T5820] bond1: entered allmulticast mode [ 80.652658][ T5820] bridge4: entered allmulticast mode [ 80.670492][ T5820] bond1: entered promiscuous mode [ 80.691231][ T5820] bridge4: entered promiscuous mode [ 80.917021][ T5854] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.092088][ T29] audit: type=1804 audit(1717033085.099:5): pid=5857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3710967603/syzkaller.AYNgGD/45/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 81.158864][ T5857] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 81.257330][ T5860] Illegal XDP return value 2508966967 on prog (id 96) dev N/A, expect packet loss! [ 81.302502][ T5864] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.366472][ T5857] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.466145][ T5864] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.506276][ T5864] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 81.971048][ T5881] validate_nla: 1 callbacks suppressed [ 81.971071][ T5881] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 82.130898][ T25] cfg80211: failed to load regulatory.db [ 82.176264][ T5882] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 82.251364][ T5883] bridge0: port 3(bond1) entered blocking state [ 82.268293][ T5883] bridge0: port 3(bond1) entered disabled state [ 82.277079][ T5883] bond1: entered allmulticast mode [ 82.282998][ T5883] bridge2: entered allmulticast mode [ 82.290875][ T5883] bond1: entered promiscuous mode [ 82.296068][ T5883] bridge2: entered promiscuous mode [ 82.309264][ T5891] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 82.425058][ T5898] bond2: (slave bridge5): Enslaving as a backup interface with an up link [ 82.460027][ T5900] bridge0: port 4(bond2) entered blocking state [ 82.551535][ T5900] bridge0: port 4(bond2) entered disabled state [ 82.569745][ T5900] bond2: entered allmulticast mode [ 82.586774][ T5909] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 82.589751][ T5900] bridge5: entered allmulticast mode [ 82.623410][ T5900] bond2: entered promiscuous mode [ 82.633143][ T5900] bridge5: entered promiscuous mode [ 82.704235][ T5913] openvswitch: netlink: Missing key (keys=40, expected=80) [ 82.842499][ T5917] __nla_validate_parse: 2 callbacks suppressed [ 82.842519][ T5917] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.889373][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.947166][ T5919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.990515][ T5919] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 83.175987][ T5919] bond3: entered allmulticast mode [ 83.188019][ T29] audit: type=1804 audit(1717033087.179:6): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4134452576/syzkaller.ZbrVLA/47/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 83.229916][ T5934] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 83.248014][ T5919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.269694][ T5939] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.317758][ T5939] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 83.426152][ T5943] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.053371][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.241163][ T5972] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.515647][ T5981] openvswitch: netlink: Missing key (keys=40, expected=80) [ 84.832972][ T29] audit: type=1804 audit(1717033088.839:7): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1921845064/syzkaller.4jqoOF/37/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 84.859045][ T5995] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 85.005708][ T6003] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.694096][ T29] audit: type=1804 audit(1717033089.699:8): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4134452576/syzkaller.ZbrVLA/50/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 85.745327][ T6011] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 85.776978][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.975855][ T6019] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.570820][ T6047] vlan2: entered promiscuous mode [ 86.661214][ T6045] openvswitch: netlink: Missing key (keys=40, expected=80) [ 87.068016][ T29] audit: type=1804 audit(1717033091.069:9): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4134452576/syzkaller.ZbrVLA/51/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 87.098457][ T6057] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 87.301872][ T6075] x_tables: duplicate underflow at hook 2 [ 88.089346][ T29] audit: type=1804 audit(1717033092.099:10): pid=6087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir603004379/syzkaller.Twx50u/52/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 88.140146][ T6087] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 88.332115][ T6088] __nla_validate_parse: 4 callbacks suppressed [ 88.332137][ T6088] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.823566][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.968841][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.073447][ T6276] syzkaller1: entered allmulticast mode [ 93.098214][ T6278] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 93.201643][ T6279] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 93.499568][ T6287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.721921][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.779830][ T6314] veth1_macvtap: left promiscuous mode [ 93.861180][ T6315] sctp: [Deprecated]: syz-executor.4 (pid 6315) Use of int in max_burst socket option. [ 93.861180][ T6315] Use struct sctp_assoc_value instead [ 94.002074][ T6327] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.070511][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.128869][ T6327] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 94.148425][ T6327] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 94.159923][ T6327] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 94.205242][ T6327] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 94.231788][ T6327] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 94.267450][ T6327] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.668445][ T6359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.888229][ T6422] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 95.905891][ T6422] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.344743][ T6448] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 96.376298][ T6448] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 96.588706][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.884232][ T6462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 97.628471][ T6492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.734527][ T6563] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 98.857298][ T6563] validate_nla: 3 callbacks suppressed [ 98.857319][ T6563] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 99.354426][ T6598] __nla_validate_parse: 2 callbacks suppressed [ 99.354448][ T6598] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.361088][ T6600] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.697457][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.705794][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.047844][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.084438][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.351520][ T6563] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.361417][ T6563] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.372409][ T6563] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.384246][ T6563] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.531375][ T6563] bond3: left allmulticast mode [ 100.537379][ T6601] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.733232][ T6635] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 100.759296][ T6635] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 100.768936][ T6640] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 100.809392][ T6641] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.878944][ T6645] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 100.895354][ T6650] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 100.984989][ T6641] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 101.176862][ T6666] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.637498][ T6692] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 101.677622][ T6692] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 101.713765][ T6692] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 101.918958][ T6704] can: request_module (can-proto-0) failed. [ 102.376177][ T6726] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.414924][ T6726] (unnamed net_device) (uninitialized): peer notification delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 102.544841][ T6737] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 102.645087][ T6732] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.652854][ T6732] IPv6: NLM_F_CREATE should be set when creating new route [ 102.660234][ T6732] IPv6: NLM_F_CREATE should be set when creating new route [ 103.489128][ T6788] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 103.627101][ T6792] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.039938][ T6806] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.872858][ T6847] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 105.988685][ T6847] syz-executor.0 (6847) used greatest stack depth: 18288 bytes left [ 106.632458][ T6879] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 106.719956][ T6886] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 106.896411][ T6886] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 106.912262][ T6888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.923361][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.965682][ T6888] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.985851][ T6888] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.021694][ T6888] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.150021][ T6903] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.194042][ T6908] unknown channel width for channel at 909000KHz? [ 107.517399][ T6938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.577467][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.741213][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.772078][ T6946] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.806150][ T6946] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 107.830943][ T6946] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.126456][ T6970] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 110.713578][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.561697][ T7135] xt_CT: No such helper "snmp" [ 111.921489][ T7159] __nla_validate_parse: 11 callbacks suppressed [ 111.921510][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.989280][ T7162] unknown channel width for channel at 909000KHz? [ 112.017206][ T7163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.312790][ T7177] sctp: [Deprecated]: syz-executor.4 (pid 7177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.312790][ T7177] Use struct sctp_sack_info instead [ 112.375798][ T7180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.412192][ T7180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.436579][ T7180] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 112.455929][ T7180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.471268][ T7182] syz-executor.4[7182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.471516][ T7182] syz-executor.4[7182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.477212][ T7180] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 112.532513][ T7180] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 112.567213][ T7185] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 112.611362][ T29] audit: type=1800 audit(1717033116.619:11): pid=7188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 112.765344][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.870729][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.002310][ T7208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.132819][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.205508][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.387456][ T7229] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 113.392268][ T7227] syz-executor.0[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.396080][ T7229] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 113.400304][ T7227] syz-executor.0[7227] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.427355][ T7229] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 113.460497][ T7229] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 113.548455][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.845085][ T7249] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 113.925294][ T7256] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.127468][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 114.200459][ T7264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.093656][ T7324] nbd: couldn't find device at index 16 [ 115.273100][ T7341] sctp: [Deprecated]: syz-executor.3 (pid 7341) Use of int in maxseg socket option. [ 115.273100][ T7341] Use struct sctp_assoc_value instead [ 116.035663][ T7376] mac80211_hwsim hwsim5 veth0_: renamed from wlan1 [ 116.990051][ T7436] __nla_validate_parse: 14 callbacks suppressed [ 116.990074][ T7436] netlink: 181324 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.015801][ T7431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.682378][ T7473] validate_nla: 37 callbacks suppressed [ 117.682408][ T7473] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.707089][ T7473] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.731472][ T7473] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 117.751531][ T7473] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.815791][ T7473] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.854268][ T7473] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 117.860427][ T7484] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.155113][ T7508] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.704956][ T29] audit: type=1804 audit(1717033122.709:12): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D746573746469723630333030343337392F73797A6B616C6C65722E5477783530752F3135362F14 dev="sda1" ino=1949 res=1 errno=0 [ 118.768564][ T7543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 118.783298][ T7543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 118.796010][ T7543] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 118.805413][ T7543] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 118.905260][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.308305][ T7578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.397312][ T7578] team1: Mode changed to "loadbalance" [ 119.413935][ T7587] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.470256][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.486388][ T7593] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.619132][ T7600] vlan2: entered promiscuous mode [ 119.625363][ T7600] vlan2: entered allmulticast mode [ 119.907667][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.010353][ T7616] team1: Mode changed to "loadbalance" [ 120.380243][ T7647] bridge0: port 4(hsr0) entered blocking state [ 120.394759][ T7647] bridge0: port 4(hsr0) entered disabled state [ 120.405317][ T7647] hsr0: entered allmulticast mode [ 120.421785][ T7647] hsr_slave_0: entered allmulticast mode [ 120.436873][ T7647] hsr_slave_1: entered allmulticast mode [ 120.454304][ T7647] hsr0: entered promiscuous mode [ 120.473600][ T7647] bridge0: port 4(hsr0) entered blocking state [ 120.479948][ T7647] bridge0: port 4(hsr0) entered forwarding state [ 120.506825][ T7649] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36482 - 0 [ 120.532615][ T7649] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36482 - 0 [ 120.551573][ T7649] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36482 - 0 [ 120.571485][ T7649] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36482 - 0 [ 120.589270][ T7649] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 35082 - 0 [ 120.606486][ T7649] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 35082 - 0 [ 120.627784][ T7649] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 35082 - 0 [ 120.637157][ T7649] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 35082 - 0 [ 120.760785][ T7660] team2: Mode changed to "loadbalance" [ 122.213430][ T7745] __nla_validate_parse: 4 callbacks suppressed [ 122.213449][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.043792][ T7793] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.450781][ T7820] validate_nla: 4 callbacks suppressed [ 123.450808][ T7820] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 123.469101][ T7820] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 124.212849][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 124.589137][ T7865] syz-executor.4[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.590579][ T7865] syz-executor.4[7865] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.838526][ T29] audit: type=1804 audit(1717033128.829:13): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1921845064/syzkaller.4jqoOF/154/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 124.901963][ T29] audit: type=1800 audit(1717033128.839:14): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 125.064812][ T7887] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.106612][ T7887] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.144596][ T7887] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.168741][ T7887] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.233509][ T7888] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 125.266159][ T7888] batman_adv: batadv0: Adding interface: gretap1 [ 125.281084][ T7888] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 125.315154][ T7888] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 125.343516][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.423759][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.446970][ T7887] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.477955][ T7887] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.497971][ T7887] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.512531][ T7887] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.834914][ T7905] syz-executor.3[7905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.835261][ T7905] syz-executor.3[7905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.734957][ T7931] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 126.808246][ T7931] batman_adv: batadv0: Adding interface: gretap1 [ 126.827930][ T7931] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.854705][ T7931] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 126.874294][ T7935] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.927491][ T7930] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.014820][ T7940] ip_vti0: entered promiscuous mode [ 127.035787][ T7940] vlan2: entered promiscuous mode [ 127.057151][ T7940] ip_vti0: left promiscuous mode [ 127.062308][ T7942] syz-executor.2[7942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.062451][ T7942] syz-executor.2[7942] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.354052][ T7954] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 127.512161][ T7959] syz-executor.0[7959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.512309][ T7959] syz-executor.0[7959] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 127.828504][ T7969] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 127.863045][ T7969] batman_adv: batadv0: Adding interface: gretap1 [ 127.881416][ T7969] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.938985][ T7969] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 128.257080][ T7976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.574854][ T7989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.549241][ T8022] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 129.557732][ T8022] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 129.609142][ T8022] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 129.617281][ T8022] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 129.655287][ T8025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.683973][ T8022] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 129.712698][ T8022] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 129.908667][ T8022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.926623][ T8031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.304919][ T8039] ------------[ cut here ]------------ [ 130.310900][ T8039] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 130.339999][ T8039] WARNING: CPU: 1 PID: 8039 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 130.351349][ T8039] Modules linked in: 2024/05/30 01:38:54 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 130.355306][ T8039] CPU: 1 PID: 8039 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 130.365556][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 130.375957][ T8039] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 130.383467][ T8039] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 28 e1 8c 48 89 ee e8 0e f9 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 130.403274][ T8039] RSP: 0018:ffffc90013927318 EFLAGS: 00010246 [ 130.409473][ T8039] RAX: 1c8677a5db032e00 RBX: 1ffff1100a98129e RCX: 0000000000040000 [ 130.417479][ T8039] RDX: ffffc90009939000 RSI: 00000000000043d4 RDI: 00000000000043d5 [ 130.425563][ T8039] RBP: ffff888054c08130 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 130.433767][ T8039] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: dffffc0000000000 [ 130.442014][ T8039] R13: 0000000002000000 R14: ffff888054c08ca0 R15: ffff888054c094f0 [ 130.450102][ T8039] FS: 00007fc852d696c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 130.459154][ T8039] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 130.465779][ T8039] CR2: 00007fbda65adca0 CR3: 0000000061dc2000 CR4: 00000000003506f0 [ 130.474236][ T8039] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 130.482579][ T8039] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 130.490765][ T8039] Call Trace: [ 130.494092][ T8039] [ 130.497047][ T8039] ? __warn+0x163/0x4e0 [ 130.501336][ T8039] ? ieee80211_link_info_change_notify+0x273/0x330 [ 130.507971][ T8039] ? report_bug+0x2b3/0x500 [ 130.512538][ T8039] ? ieee80211_link_info_change_notify+0x273/0x330 [ 130.519242][ T8039] ? handle_bug+0x3e/0x70 [ 130.523602][ T8039] ? exc_invalid_op+0x1a/0x50 [ 130.528405][ T8039] ? asm_exc_invalid_op+0x1a/0x20 [ 130.533482][ T8039] ? __warn_printk+0x292/0x360 [ 130.538341][ T8039] ? ieee80211_link_info_change_notify+0x273/0x330 [ 130.544898][ T8039] ? ieee80211_link_info_change_notify+0x272/0x330 [ 130.551574][ T8039] ieee80211_set_mcast_rate+0x46/0x60 [ 130.557000][ T8039] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 130.563218][ T8039] nl80211_set_mcast_rate+0xaff/0xeb0 [ 130.568728][ T8039] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 130.575036][ T8039] genl_rcv_msg+0xb14/0xec0 [ 130.579871][ T8039] ? mark_lock+0x9a/0x350 [ 130.584323][ T8039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.589502][ T8039] ? __pfx_lock_acquire+0x10/0x10 [ 130.594569][ T8039] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 130.600078][ T8039] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 130.606014][ T8039] ? __pfx_nl80211_post_doit+0x10/0x10 [ 130.611627][ T8039] ? __pfx___might_resched+0x10/0x10 [ 130.616960][ T8039] netlink_rcv_skb+0x1e3/0x430 [ 130.621828][ T8039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 130.626901][ T8039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 130.632315][ T8039] genl_rcv+0x28/0x40 [ 130.636329][ T8039] netlink_unicast+0x7ea/0x980 [ 130.637232][ T8054] IPv6: sit1: Disabled Multicast RS [ 130.641218][ T8039] ? __pfx_netlink_unicast+0x10/0x10 [ 130.641300][ T8039] ? __virt_addr_valid+0x183/0x520 [ 130.641330][ T8039] ? __check_object_size+0x49c/0x900 [ 130.641354][ T8039] ? bpf_lsm_netlink_send+0x9/0x10 [ 130.667576][ T8039] netlink_sendmsg+0x8db/0xcb0 [ 130.672512][ T8039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.678228][ T8039] ? __import_iovec+0x536/0x820 [ 130.683136][ T8039] ? aa_sock_msg_perm+0x91/0x160 [ 130.688453][ T8039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 130.693779][ T8039] ? security_socket_sendmsg+0x87/0xb0 [ 130.699693][ T8039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.705030][ T8039] __sock_sendmsg+0x221/0x270 [ 130.709871][ T8039] ____sys_sendmsg+0x525/0x7d0 [ 130.714687][ T8039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 130.720111][ T8039] __sys_sendmsg+0x2b0/0x3a0 [ 130.724747][ T8039] ? __pfx___sys_sendmsg+0x10/0x10 [ 130.730072][ T8039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 130.736445][ T8039] ? do_syscall_64+0x100/0x230 [ 130.741312][ T8039] ? do_syscall_64+0xb6/0x230 [ 130.746027][ T8039] do_syscall_64+0xf3/0x230 [ 130.750678][ T8039] ? clear_bhb_loop+0x35/0x90 [ 130.755393][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.761489][ T8039] RIP: 0033:0x7fc85207cee9 [ 130.765960][ T8039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 130.786061][ T8039] RSP: 002b:00007fc852d690c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.794831][ T8039] RAX: ffffffffffffffda RBX: 00007fc8521b3fa0 RCX: 00007fc85207cee9 [ 130.803120][ T8039] RDX: 0000000004040010 RSI: 0000000020000140 RDI: 0000000000000003 [ 130.811258][ T8039] RBP: 00007fc8520c947f R08: 0000000000000000 R09: 0000000000000000 [ 130.819345][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.827914][ T8039] R13: 000000000000000b R14: 00007fc8521b3fa0 R15: 00007fff4f9f59c8 [ 130.835947][ T8039] [ 130.839062][ T8039] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 130.846362][ T8039] CPU: 1 PID: 8039 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 130.856364][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 130.866441][ T8039] Call Trace: [ 130.869736][ T8039] [ 130.872679][ T8039] dump_stack_lvl+0x241/0x360 [ 130.877381][ T8039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.882603][ T8039] ? __pfx__printk+0x10/0x10 [ 130.887220][ T8039] ? _printk+0xd5/0x120 [ 130.891407][ T8039] ? vscnprintf+0x5d/0x90 [ 130.895760][ T8039] panic+0x349/0x860 [ 130.899693][ T8039] ? __warn+0x172/0x4e0 [ 130.903889][ T8039] ? __pfx_panic+0x10/0x10 [ 130.908345][ T8039] ? show_trace_log_lvl+0x4e6/0x520 [ 130.913602][ T8039] __warn+0x346/0x4e0 [ 130.917621][ T8039] ? ieee80211_link_info_change_notify+0x273/0x330 [ 130.924165][ T8039] report_bug+0x2b3/0x500 [ 130.928540][ T8039] ? ieee80211_link_info_change_notify+0x273/0x330 [ 130.935105][ T8039] handle_bug+0x3e/0x70 [ 130.939301][ T8039] exc_invalid_op+0x1a/0x50 [ 130.943836][ T8039] asm_exc_invalid_op+0x1a/0x20 [ 130.948717][ T8039] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 130.955875][ T8039] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 28 e1 8c 48 89 ee e8 0e f9 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 130.975489][ T8039] RSP: 0018:ffffc90013927318 EFLAGS: 00010246 [ 130.981565][ T8039] RAX: 1c8677a5db032e00 RBX: 1ffff1100a98129e RCX: 0000000000040000 [ 130.989541][ T8039] RDX: ffffc90009939000 RSI: 00000000000043d4 RDI: 00000000000043d5 [ 130.997521][ T8039] RBP: ffff888054c08130 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 131.005496][ T8039] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: dffffc0000000000 [ 131.013468][ T8039] R13: 0000000002000000 R14: ffff888054c08ca0 R15: ffff888054c094f0 [ 131.021452][ T8039] ? __warn_printk+0x292/0x360 [ 131.026584][ T8039] ? ieee80211_link_info_change_notify+0x272/0x330 [ 131.033097][ T8039] ieee80211_set_mcast_rate+0x46/0x60 [ 131.038476][ T8039] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 131.044551][ T8039] nl80211_set_mcast_rate+0xaff/0xeb0 [ 131.049938][ T8039] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 131.055852][ T8039] genl_rcv_msg+0xb14/0xec0 [ 131.060357][ T8039] ? mark_lock+0x9a/0x350 [ 131.064698][ T8039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.069760][ T8039] ? __pfx_lock_acquire+0x10/0x10 [ 131.074792][ T8039] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 131.080170][ T8039] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 131.086084][ T8039] ? __pfx_nl80211_post_doit+0x10/0x10 [ 131.091560][ T8039] ? __pfx___might_resched+0x10/0x10 [ 131.096859][ T8039] netlink_rcv_skb+0x1e3/0x430 [ 131.101632][ T8039] ? __pfx_genl_rcv_msg+0x10/0x10 [ 131.106676][ T8039] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 131.111986][ T8039] genl_rcv+0x28/0x40 [ 131.115976][ T8039] netlink_unicast+0x7ea/0x980 [ 131.120763][ T8039] ? __pfx_netlink_unicast+0x10/0x10 [ 131.126052][ T8039] ? __virt_addr_valid+0x183/0x520 [ 131.131171][ T8039] ? __check_object_size+0x49c/0x900 [ 131.136471][ T8039] ? bpf_lsm_netlink_send+0x9/0x10 [ 131.141591][ T8039] netlink_sendmsg+0x8db/0xcb0 [ 131.146372][ T8039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.151659][ T8039] ? __import_iovec+0x536/0x820 [ 131.156511][ T8039] ? aa_sock_msg_perm+0x91/0x160 [ 131.161458][ T8039] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 131.166744][ T8039] ? security_socket_sendmsg+0x87/0xb0 [ 131.172207][ T8039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.177491][ T8039] __sock_sendmsg+0x221/0x270 [ 131.182174][ T8039] ____sys_sendmsg+0x525/0x7d0 [ 131.186960][ T8039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.192267][ T8039] __sys_sendmsg+0x2b0/0x3a0 [ 131.196873][ T8039] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.202026][ T8039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 131.208362][ T8039] ? do_syscall_64+0x100/0x230 [ 131.213128][ T8039] ? do_syscall_64+0xb6/0x230 [ 131.217805][ T8039] do_syscall_64+0xf3/0x230 [ 131.222313][ T8039] ? clear_bhb_loop+0x35/0x90 [ 131.226995][ T8039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.232890][ T8039] RIP: 0033:0x7fc85207cee9 [ 131.237309][ T8039] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 131.256919][ T8039] RSP: 002b:00007fc852d690c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.265341][ T8039] RAX: ffffffffffffffda RBX: 00007fc8521b3fa0 RCX: 00007fc85207cee9 [ 131.273316][ T8039] RDX: 0000000004040010 RSI: 0000000020000140 RDI: 0000000000000003 [ 131.281286][ T8039] RBP: 00007fc8520c947f R08: 0000000000000000 R09: 0000000000000000 [ 131.289254][ T8039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.297226][ T8039] R13: 000000000000000b R14: 00007fc8521b3fa0 R15: 00007fff4f9f59c8 [ 131.305217][ T8039] [ 131.308467][ T8039] Kernel Offset: disabled [ 131.312864][ T8039] Rebooting in 86400 seconds..