last executing test programs: 1.737010172s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r4, 0x8903, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r5, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f00000006c0)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd254a4a9f743c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa", 0xa9}], 0x2, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0xd9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f0000000800)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d4b7580bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xcf}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r8, @ANYBLOB="9a"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.682109829s ago: executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206c3ba615b0000000000000000000005000500020200000900020073797a32000000000c0007800500150022000000050004000000000011000300686173683a69702c706f7274000000000500010007"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000500020000000900020073797a32000000000c0007800500140006"], 0x58}}, 0x0) 1.68169478s ago: executing program 2: syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0) 1.584153567s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) 1.491427701s ago: executing program 2: r0 = socket(0x10, 0x80002, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x18, &(0x7f0000000080)={r3}, 0x8) write$binfmt_script(r1, &(0x7f0000000380), 0x208e24b) (async) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) (async) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000100)={0x1100, 0x2, 0xfffffffffffffffd, 0x10000}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.479423101s ago: executing program 4: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) 1.381032333s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000313ef3ba850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r1, &(0x7f0000000780), &(0x7f0000000900)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r3, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(r3, 0x1) 1.346189298s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x29, 0x35, 0x3f, 0x3f, 0x41, @remote, @mcast1, 0x0, 0x8, 0xa, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @empty}, &(0x7f0000000400)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@local, @remote}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x1b, 0x3ff, 0x5c, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x18, 0x9, 0x200}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0xb6, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="400003"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x1ff, 0x4, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x64, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xa3, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @local]}, @ssrr={0x89, 0xb, 0x64, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000740)={@mcast1}, &(0x7f0000000780)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r2, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000980)=[0x0, 0x0], 0x0, 0xb9, &(0x7f00000009c0), 0x0, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @broadcast, @initdev}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x6, 0x2, 0x78, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x80, 0x10, 0x0, 0x8001}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d40)={@private, @dev}, &(0x7f0000000d80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @multicast1, @initdev}, &(0x7f0000000e00)=0xc) 1.32064847s ago: executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg(r0, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8], 0x1b0}, 0x0) recvmmsg(r0, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/166, 0xa6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 1.281177571s ago: executing program 2: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60870160af3650400410038001d004031a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000240)="8b9282d9a0ed542d5599f929", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.221035924s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.19045981s ago: executing program 0: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206c3ba615b0000000000000000000005000500020200000900020073797a32000000000c0007800500150022000000050004000000000011000300686173683a69702c706f7274000000000500010007"], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206010100000000010000000000000005000500020000000900020073797a32000000000c0007800500140006"], 0x58}}, 0x0) 1.12593821s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.038866004s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket(0x1d, 0x2, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) write(r3, &(0x7f0000000dc0)="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", 0x1000) socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r4, 0x6b, 0x1, &(0x7f0000000040)=[{}, {}, {}], 0x6a) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x2, 0x300) (async) r6 = socket$packet(0x11, 0x2, 0x300) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0xfffffffffffffeab) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x88, 0x10, 0x437, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, 0x50483}, [@IFLA_PROP_LIST={0x68, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team_slave_1\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'syzkaller1\x00'}, {0x14, 0x35, 'rose0\x00'}, {0x14, 0x35, 'veth0_to_bond\x00'}]}]}, 0x88}}, 0x0) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty}}}], 0x20}}], 0x1, 0x80) (async) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @empty}}}], 0x20}}], 0x1, 0x80) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x140f, 0x400, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x8, 0x45, 'mad\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040811}, 0x18841) sendto$packet(0xffffffffffffffff, &(0x7f00000001c0)="88ba16457fbd43c1b662c7c8c1d78646a152ec0ce1313d4e51dcd3550e8c8aae2596ddb096ef301de3619eff8ba1604fb700581891701b3f7576c8016efd0f0dd3c44a273b09bcfe1649152c75c2b54ad4b8c2a846606a19ccd5aead01a36534d09143759d30164ff83c33fd", 0x6c, 0x840, 0x0, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x275a, 0x0) mmap(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0, 0x10, r11, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x40, 0x0, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004010}, 0x101) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000b80)='tlb_flush\x00', r5}, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000020000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r12}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r12}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x319) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 1.018468712s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000011000000350000000000020085000000230000009500073d000000003c8ea5932cf669ebecab19b3fd50fec5eade4bb02aa4f152b8f66388c86b074dc9bc42751ece81bdfdf8ffffffffffffff547930a8ab50e020a1a45f8d67000000000000f669011b4511ccb706ceac9856ba"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x3f02, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x8000, 0x0, 0xff9f}, 0x28) 986.563845ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x1, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r4, 0x8903, 0xfffffffffffffffe) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r5, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f00000006c0)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd254a4a9f743c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa", 0xa9}], 0x2, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0xd9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f0000000800)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d4b7580bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xcf}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r12, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r8, @ANYBLOB="9a"], 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 852.135212ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 840.127768ms ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) 743.227775ms ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = epoll_create(0x7) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f00000001c0)) 715.945355ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = epoll_create(0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00'}, 0x10) (async) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_fanout(r2, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080), 0x62) (async, rerun: 32) syz_emit_ethernet(0xbe, &(0x7f00000003c0)={@link_local, @broadcast, @val, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @private}, {{}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "c61c64abe82b626c6e31046c005f0764032b10cfb3c50a8ef2d7727946bacca84b917c177418f7cdd9aaffb977290bb80b23123c758eb90c21652f6b5894d7034837ad5a26523dd4f8a210fcf8bc825d"}}}}}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x248, 0x940c, 0x3002, 0x248, 0x2c0, 0x340, 0x3d8, 0x3d8, 0x340, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x248, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'vlan1\x00', {0x14, 0x0, 0x75, 0x0, 0x0, 0xfffffff9, 0x7a2}}}, @common=@inet=@set1={{0x28}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) (async) socket$inet(0x2, 0x0, 0x0) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req={0x4, 0x4, 0x8dfb, 0x10003}, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3], 0x20}}, 0x0) (async, rerun: 64) r6 = epoll_create1(0x0) (rerun: 64) epoll_create(0x7) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000180)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r6, &(0x7f00000000c0)) 620.807037ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8913, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) sendmsg$nl_generic(r7, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x100c0}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r9, 0x84, 0x7, &(0x7f0000001100), &(0x7f0000001140)=0x4) setsockopt$inet6_group_source_req(r8, 0x29, 0x2, 0x0, 0x0) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x0, 0x82011, r0, 0x0) syz_emit_ethernet(0xf87, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf51, 0x0, 0x0, @private2, @mcast2, {[@routing={0x84}], "223427d5c9a46b9fa14172170a013589317d2af31ba55431762f462a5abc3f46494ee91bfca594d52f8c3785143e92da5d2d81edc09f68f122fbf741257bf1319408347a17c89212dfe27a0fc65362487e5afe673f0954f60d9d08b61276ce0b3aa520b5f30a9f52c4aa53fc003f8570383ca63530d93b78a7875338b3d7645ef2c24ab05db63cfdcde7b3cac2248c9d1c73d0d4382b3f520ad6e9be698eaa9bf5b939ce09919c9485c4725690ee2483315829a196f85a5ae552ebe19a2d6768ce2a6bf60fbb53104c7919b7cf28fa555fc9460df11e72eddebb2fc4eb6f83b16e0d65307e4210dfc209f0c68df65b57f420fd215546b798af6b6ab7bfb2fe6bd6142f877852717370b1ca39d199c149c3ead97c4e16229ce4c08a111a0fc64651c21e9174dd72442a9ae2a42d9433c7b54c8dd4b59203f9a2e227e9b043eb430e606cf98f3428ac8511948dd553bc0728c0626fbda71bd2a1d734d605e27bdb0be93b7b91284689e31fccb70c15f2c39da9011c84d36fe4b4b36ff26e45a34685fc638dbdaa068a3d3d4f5d44b74afc0fc7956e5fcc3fe405ac6d292d1d90f257f18fe14a3192d28ed369956aa2f91f9fee773cf7fb5d90705347eeadc1af86de78a498fa1a20e5b3f481a0595769654d969299506d8ffbc172a7fb9453a8a3787e80b167936863f2cc16c1d03481bd40e1abcf87a292559771572136932bf30e48174012a1d4d5f138f93140af2ceb9c821c7966ea7592d762975b5b33ef141b6b91eb388c91b924945c3231d0f299adb5a36e0c95a17872e7ebf0bc0e33baf5c46f9e2087b77bad0794d519ce7bc8674a70f3545d020454ded22f164185df3b4f952b132947b75333993fd73a6bac5836dd5720e559bcb82a4926734c5c3b1287c5fec219a99f71eb398430001f007306e9232c269c2886357f75d935e8de054341ac36f1df1fc77fbc347d90660f4d5658cfeb9e289f70968a7c0b38ae34c4bfa46b47964e223ac34f472e3231e8c285add5713592c76c062c3477beb55b279846f04f8d6a5ce2743c6a2020f0c5164953b8dca7e57239dc8a7f507bcf77767ab0b4602437171a09c8e80f5a165c4c37eaae386cfcb927dd1a935fa717fa1608792b34bafbc20cf11a678455894ede62788309ab7a7075535847a2b48260a613e521b01d75648263ad78e6176528dbf3e6c4e4d72066e617be5387183a51dd97d2e846c5d173b51e17a4c8d78a49c914cbe44236c52c78de45b44f9d80bc6f77c75135922a84579bce77baa71311889f5b7b90c5124b8298d5e9c81c442d60df00795854d3213a1ac254c8963c109f68b3ff5451c381f6fb56c116f86b71f988d1e9f732280cbf3d4e9791fefc4bdec5dc293fb77b02d5aab6bd8cd179b7e425126b7f78c0d004bc6470ecc2bbc422bd06a6bd8f717009509e6a88b01347b7a62b9dea6f7a7446a371f422499a6e66eeb6a7b0beb4a86a61f875a9bfe0f5d5f0d0e4c85852afaea97d74ebc80d6491a8a1c998c4b5bc34b3edaeba2df902cd5e14e016720e6c3c8b15287b2471c34251e26dc442720cd5d984e30b110b7370f233f865b9ac129fdf49ff02b303d7d4f91039d3bb58a9d64d7a72d8b8eba6b45a000370d4f0e9c0d411768441372e7112e5d4e7d70a9d6b428b8b85ee6209d6f73e7b024740c052166deeb843e4ab78d1d354d75a5827ff0d49d8964e75785f3594c7299c0917b48f3b2efb81a4c3a7d6e0f1cf50efe0360963c2e3ee390ed2a4c39f42e856eced0f2ee7beacd2ecbece493e911ca0460584323ea6d4a0c00864693c979cae38f0c5841bfaeebf609d1075163c120fea0bd0207d2dd07e5e2e0a5afe3efee0ee6bb9a926a8dba7a27a82c5421a5b20bfb5dbdef532a12435fcd899f15603209831711e0dcfaaf2104b2016f087fce44848c70b65a34b9be83df2064391fc5a8d169dc1943d226e57ab5ba06c656273d4efba73a8a61aae19df4d2445f3ce7e649af1b4ffc86106c9092ddd0aafeb45653d181cb32b06a1dd41573495f15c3b8c0019ba72a2eb163dfcbdbb235322ae27d7116af506f295c2424ab9191aa8ce0e4617b212af21983f8d2b19d7fdeec881f6fa448acc7c3e133b6f281583fad4467c05801e69f6ffc1ae2e1f54655534d884c2f8f60303da33ccbe47a293643edb61c7d9fad4e3e54028bc64be8e5b1da53446869b136660b8e96ff96c48641ece275967b27b291c5c240b3399b5b901b699227735f821938bc88ded45bada2b257b1a4bcab7ed6647f2027e5680c87329e9cfdba6bde2f2a9b676be016001702bebbabb2eae3eba01d6f49ab70245a4c5ef0e136b531e1843487b3f69c5b811217d6d2f5e71b47f40c28117bd09a88bb21887a06e2cc164d4281d0df47cbd5781f1524098d89ccae32f24c5f9d86469106685fdc683ad5e873030b621dc00354e0621106da90aca69bb53848dd57251a45bc1898aca9bc84c9a8d2f8aabeed888560771c8cb03aab02620430fec8e9740880790060ccbffd5b8edaa219ca61587eff1b1b03ae8af53059f121efdec8b3ee8aba06f494a5b4575bc848d5a9773d2346f75811cb82a078fc960c9bd374555d78b1b4ba0b438ef00e8aa75810ca5efc5c70936e2cb0e515912cb7f625a2130a9ad58f29e58ae6eac5c3f15f22f0163ee6dead6947c4390b92c8dfb146fec7bfc0b37e8ff2c9de90c30f2d8b5e334107f9835bc47fbc193c60ebd5ac4e677c7fd5b6261ff96e97c185c726ec02941bc2336946f181fd2aff43f0e95f06105a049fcb8e4e3738407d6356856f533f17fae281a3be9f2050ae3d19d1b8350d424087ac9b7875824a9b7e098775b53d6ec960fc052ecd165d17a7897de75f15316a072bb9ccf6ce1ec085bb5356c271b985a437a32f12308fc927410fd444bcded9859e7b8a3cfaaf29ebfb92cc7cbfad2559bbe4f90e189e8708e93827b221869cc78fa41fd5bcb6577b7dfe4c3927dc25a58aa84419f76e71d1f3c10cbb5e52ab2bebe0d39bdffda0fa1b55fe3a03683f882a82dd58498d62b101acd710fd436aa7409fe3cf5352dffb399d560323e14d564bdb3121b89c1f43fc9a892b799cd32f7ce2ededb868920b4547735ef0bf3e148251a4f65dddb7f96b2f33734522a8cffdc51520ac98926b3406e96618cf15a042a67239e755afc70ec6a9c99f8e08ec2946e5901364d85223a63d49572519137d93b6b0798e72acf9da120e706ee73367dec1450a68def886c149bcd734469e10b933899501011cd548e99d638821d5709fde050ab382d4896ecfd7999d40ea9c690c26d396545224c8f9e19705593df2688eb592e2476a0193f7054ab6f703d41c545a80bf285bbc7cc735bd306c9ea5eb64f40752fd4c741d9b6e03cd41b636ef8f5e810047a21c0b24c6fde1f2e98f2f27730c90d93af9e7564e4e209a61ff626b666fcc4f75f7d560da688169ff0af5e674a0b89a99fb54bb438a65f953c2db0faec2ce09cec33b6d25620b5a0393ac473fed48a38beaca5223997419876d571ce969b83b5b3ae54de83dd89fd92ed2a93c087828bef49a24ed1a97778c47fdc691a94fd5b437dfe494b5c6fadf499d9d15583b0439d3d5ecb61a32a2508a6960be6009accfd1d5d75a16dbc4121c6ef07bda12646792449c18a56e7aa3893f3f0e55a8e09ca64193dd29ea24ed8614ee8e717f046dd99a8e3750506655331125a502aa89c0d7e8e30c36a4be22cd911322695144d3bf034f38ef32d49431d50da583d08a3e4c5862483cdd52d031b12c89fdaafc3334e877e464134baece883d301193a9c27311a987d4dae82a061f48182cc747cd64441e88b68e26e4975f0fdde3129a9e6af80009962581d5349676df9c73b81514b175709d9193749660f480bd4009b528c1db4f76f42b6a175126603c39a374e890f871c97b2eebb4500451d827cc15497dc5ae89edc6f47f25db7efa4b4b2afbbb2ee543e3db8d20fe93faf300247f59075921e8b2f2a025af8a1d46f274e0c6cb4be0293c7c16c88e98d7d189e9733e4c0e3b96be4aa3fa6ecf42732e0b1432d38aeaf2330d92713cd5580ce42bfe47fb98fea64783de23f456300dd193008211a5ba408d32dedbf12aa8237a6e1a2c9890a2c1011855241fea186906a5139d1c300be57dc7ff493de80010520d10fc3eda0ee9cd413e075d3dc02258fdab567a16e43edbeecc366a69d8d75512f43a2b79cbb9132cdcd00c531730d05f1eabf66613d6e7ebb8c4c3f4f7efd415d41049786352808b22a3bde40121968af39c8f00296001662adc72b7963c8bafab4a496b50f3237a29d19ad4a51a62b1c77a04c14004734189cf7ec49e3d041a1e5658d080f09df77f39782e7133968c1f39ab3ae2a5f24a60073288f3c5825dafd614a379b8b905aaf961caa14ffa38de0d632918d31e4a9291b0f0789248e232e4276840a1ed0257300e522d83111dffd424b1b33148981e3794b2b649ba9174e6697bcc96049f4f3dcc7cf4ca97e2006ec8a146014bb49184632e4fb159a34b6530e959e60a6b4e0427cc697f14cfe6bb7a662a6f5012744f3cf2307abc19c58449864d98fcfebc5d598cd32a1c38c207896468fe8da75eb1edb1d6e7cb1eab671e4e92f139c81d79f15df2a2dc075acc982dec769e2f49aad0fdf594cb590e054616e4f4582b6c4a149ae45d844903ef68d211df2a180178e178b7c7a5012ccf8a1e677586588620365e6111f5192ecfdbd97e2284128de02e08ebc13d4bb4d114faa1e6c16c51c12da2c52d68f73640ce866ce4e794b9fafdc392c91c1f824bc301b3069a02b9c86d2ffac3ed63ddee130cbc248d6a3345d3f9553db78077072d569a6633f8bdbdb1a209a8be9b6830225994f9021b57ddd6a44e8ea40b205c6cf437f45bffaef053a5916dcc6de62ee02bdb8ce3acec8ad97fc95dab1307d254790c71f32e4678957cf0121dccabe73a03c6cacbcbdaad8801b04d9836555a982c357a06e2db7e9bf62aed8cdebbb7a71a2410b929015b61f16e54bffd038996a717b9c7cc3696d8a1205e8266bf782c3a45b0e31461d6a3ed62396088833f69248b24fbf6f81dcc08b98826c3bd2325ade54f614f2d4a153e3e3527d93978483f2bfeada6b64bc43f2a725c30e843d13e6ab34cfc38d488b3ef50cd04318fac1f89905f017644cfa2de058ad399871d1316264813c2289d0b6cfeddfbca36ce93fd4a1bfc93bb74453cfbb9c6ca22320ffc9cb0a3fff046a5678c066e617cd3ac024dfead04b99877f448b78208938585c7563efe815ff0cc47da5fff521d9730ddc89f4aeceadd06f2ea6b9ae72c9407aa550a0155db3b4bc6aaa382a30552f699cb6a1af9972a8ccc483f98952dfbde3d712ea8673eacdbb77490d833fc90f0f02e7c073d2917db70831496a88defc10667dc4c1b7399191bdc7857eb090e79c332bf9f71bb5377178e6232800c93d22318dc5ab8d5dfa2f074a6c23acb61c89f2f078ec91e9817e11a4c8295c19634b5ca2df74"}}}}}, 0x0) 520.949859ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000313ef3ba850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x5, 0x8, 0x1}, 0x48) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000940)={r1, &(0x7f0000000780), &(0x7f0000000900)=@udp=r2}, 0x20) recvmmsg(r2, &(0x7f0000005640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) 426.947754ms ago: executing program 1: r0 = socket$kcm(0x10, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a076b876c1d0048007ea60870160af3650400410038001d004031a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}, {&(0x7f0000000240)="8b9282d9a0ed542d5599f929", 0xc}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 366.615398ms ago: executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendmsg(r0, &(0x7f0000006b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRES8], 0x1b0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003840)=[{&(0x7f00000004c0)=""/166, 0xa6}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 233.338532ms ago: executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000206c3ba615b0000000000000000000005000500020200000900020073797a32000000000c0007800500150022000000050004000000000011000300686173683a69702c706f7274000000000500010007"], 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) 161.41909ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 100.171472ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6_vti0\x00', 0x0, 0x29, 0x35, 0x3f, 0x3f, 0x41, @remote, @mcast1, 0x0, 0x8, 0xa, 0x1}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @remote, @empty}, &(0x7f0000000400)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000440)={@local, @remote}, &(0x7f0000000480)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x29, 0x40, 0x1b, 0x3ff, 0x5c, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x18, 0x9, 0x200}}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0xb6, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r7, @ANYBLOB="400003"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'vxcan1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000700)={'erspan0\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x8, 0x1, 0x1ff, 0x4, {{0xe, 0x4, 0x1, 0x3, 0x38, 0x64, 0x0, 0x1f, 0x2f, 0x0, @private=0xa010102, @private=0xa010101, {[@lsrr={0x83, 0x17, 0xa3, [@local, @local, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback, @local]}, @ssrr={0x89, 0xb, 0x64, [@broadcast, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000740)={@mcast1}, &(0x7f0000000780)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r2, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), &(0x7f0000000980)=[0x0, 0x0], 0x0, 0xb9, &(0x7f00000009c0), 0x0, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0x50, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000c00)={0x0, @broadcast, @initdev}, &(0x7f0000000c40)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip6gre0\x00', &(0x7f0000000c80)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x6, 0x2, 0x78, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x80, 0x10, 0x0, 0x8001}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000d40)={@private, @dev}, &(0x7f0000000d80)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000dc0)={0x0, @multicast1, @initdev}, &(0x7f0000000e00)=0xc) 74.310055ms ago: executing program 4: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0}, 0x0) 12.334607ms ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ff0100000000000000000000000000010000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ddff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) 0s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. 2024/06/01 22:08:58 fuzzer started 2024/06/01 22:08:58 dialing manager at 10.128.0.169:30016 [ 50.911917][ T5089] cgroup: Unknown subsys name 'net' [ 51.155195][ T5089] cgroup: Unknown subsys name 'rlimit' 2024/06/01 22:08:59 starting 5 executor processes [ 52.208336][ T5098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.005164][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.015413][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.023799][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.031659][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.035882][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.045895][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.047162][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.060903][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.068836][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.077573][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.085606][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.093434][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.100709][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.108508][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.118841][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.127354][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.127683][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.141878][ T5119] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.143686][ T5126] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.156399][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.157044][ T5123] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.163990][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.174012][ T5110] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.179166][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.193479][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.202156][ T5110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.202280][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.211285][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.226731][ T5110] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.256752][ T5110] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.769267][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 53.781317][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 53.842279][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 53.870505][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 54.059010][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.066947][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.074893][ T5120] bridge_slave_0: entered allmulticast mode [ 54.081631][ T5120] bridge_slave_0: entered promiscuous mode [ 54.089700][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 54.099322][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.106532][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.114156][ T5111] bridge_slave_0: entered allmulticast mode [ 54.120817][ T5111] bridge_slave_0: entered promiscuous mode [ 54.128566][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.135833][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.143545][ T5111] bridge_slave_1: entered allmulticast mode [ 54.150158][ T5111] bridge_slave_1: entered promiscuous mode [ 54.172765][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.180034][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.187399][ T5120] bridge_slave_1: entered allmulticast mode [ 54.194709][ T5120] bridge_slave_1: entered promiscuous mode [ 54.277849][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.289393][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.303620][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.322250][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.329664][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.336869][ T5115] bridge_slave_0: entered allmulticast mode [ 54.343999][ T5115] bridge_slave_0: entered promiscuous mode [ 54.361428][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.381403][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.388696][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.396028][ T5108] bridge_slave_0: entered allmulticast mode [ 54.402717][ T5108] bridge_slave_0: entered promiscuous mode [ 54.410115][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.417796][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.425161][ T5115] bridge_slave_1: entered allmulticast mode [ 54.431814][ T5115] bridge_slave_1: entered promiscuous mode [ 54.459812][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.467286][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.474506][ T5108] bridge_slave_1: entered allmulticast mode [ 54.481145][ T5108] bridge_slave_1: entered promiscuous mode [ 54.527272][ T5120] team0: Port device team_slave_0 added [ 54.535943][ T5111] team0: Port device team_slave_0 added [ 54.579404][ T5120] team0: Port device team_slave_1 added [ 54.596581][ T5111] team0: Port device team_slave_1 added [ 54.614551][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.625107][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.632033][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.658151][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.674258][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.686270][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.720337][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.729825][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.737179][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.764258][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.791500][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.798784][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.806615][ T5122] bridge_slave_0: entered allmulticast mode [ 54.813525][ T5122] bridge_slave_0: entered promiscuous mode [ 54.860898][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.868486][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.875996][ T5122] bridge_slave_1: entered allmulticast mode [ 54.882687][ T5122] bridge_slave_1: entered promiscuous mode [ 54.901618][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.908580][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.941113][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.956103][ T5108] team0: Port device team_slave_0 added [ 54.973402][ T5115] team0: Port device team_slave_0 added [ 54.990384][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.000271][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.007591][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.034147][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.047039][ T5108] team0: Port device team_slave_1 added [ 55.069679][ T5115] team0: Port device team_slave_1 added [ 55.077054][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.117440][ T5120] hsr_slave_0: entered promiscuous mode [ 55.125666][ T5120] hsr_slave_1: entered promiscuous mode [ 55.196088][ T5122] team0: Port device team_slave_0 added [ 55.202633][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.210366][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.233826][ T5116] Bluetooth: hci1: command tx timeout [ 55.237300][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.241976][ T5110] Bluetooth: hci0: command tx timeout [ 55.254112][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.265111][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.291343][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.307583][ T5111] hsr_slave_0: entered promiscuous mode [ 55.313417][ T5110] Bluetooth: hci4: command tx timeout [ 55.313521][ T53] Bluetooth: hci2: command tx timeout [ 55.319890][ T5116] Bluetooth: hci3: command tx timeout [ 55.331179][ T5111] hsr_slave_1: entered promiscuous mode [ 55.337363][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.345319][ T5111] Cannot create hsr debugfs directory [ 55.357954][ T5122] team0: Port device team_slave_1 added [ 55.364347][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.371292][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.397582][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.409253][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.416426][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.442344][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.552024][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.559180][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.585167][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.600845][ T5108] hsr_slave_0: entered promiscuous mode [ 55.609105][ T5108] hsr_slave_1: entered promiscuous mode [ 55.615277][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.622815][ T5108] Cannot create hsr debugfs directory [ 55.669926][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.676989][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.703847][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.789811][ T5115] hsr_slave_0: entered promiscuous mode [ 55.799490][ T5115] hsr_slave_1: entered promiscuous mode [ 55.805770][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.813467][ T5115] Cannot create hsr debugfs directory [ 55.854009][ T5122] hsr_slave_0: entered promiscuous mode [ 55.860202][ T5122] hsr_slave_1: entered promiscuous mode [ 55.866879][ T5122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.874648][ T5122] Cannot create hsr debugfs directory [ 56.063310][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.074127][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.121590][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.156688][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.247269][ T5108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.277289][ T5108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.296344][ T5108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.307568][ T5108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.380899][ T5111] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.392416][ T5111] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.408643][ T5111] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.419641][ T5111] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.508810][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.521480][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.534933][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.545162][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.632288][ T5122] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.646308][ T5122] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.679361][ T5122] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.705515][ T5122] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.720182][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.775388][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.816735][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.832788][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.867415][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.884529][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.891704][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.917219][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.924373][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.939400][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.946508][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.969938][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.019137][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.026319][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.037263][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.044463][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.069118][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.076280][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.119165][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.148237][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.243914][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.251068][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.281272][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.314002][ T5116] Bluetooth: hci0: command tx timeout [ 57.319438][ T5116] Bluetooth: hci1: command tx timeout [ 57.332077][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.339253][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.395333][ T53] Bluetooth: hci3: command tx timeout [ 57.395354][ T5116] Bluetooth: hci4: command tx timeout [ 57.400737][ T53] Bluetooth: hci2: command tx timeout [ 57.517264][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.551526][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.558718][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.606679][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.627058][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.634230][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.778679][ T5108] veth0_vlan: entered promiscuous mode [ 57.817160][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.877628][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.904826][ T5108] veth1_vlan: entered promiscuous mode [ 58.030112][ T5120] veth0_vlan: entered promiscuous mode [ 58.042748][ T5108] veth0_macvtap: entered promiscuous mode [ 58.067614][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.096056][ T5108] veth1_macvtap: entered promiscuous mode [ 58.119279][ T5120] veth1_vlan: entered promiscuous mode [ 58.166700][ T5111] veth0_vlan: entered promiscuous mode [ 58.188802][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.215958][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.247513][ T5111] veth1_vlan: entered promiscuous mode [ 58.260444][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.287853][ T5120] veth0_macvtap: entered promiscuous mode [ 58.309576][ T5108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320694][ T5108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.331233][ T5108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.340306][ T5108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.366641][ T5120] veth1_macvtap: entered promiscuous mode [ 58.399457][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.411021][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.424546][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.458720][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.469435][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.481019][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.527843][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.538087][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.547629][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.556642][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.580346][ T5111] veth0_macvtap: entered promiscuous mode [ 58.610300][ T5111] veth1_macvtap: entered promiscuous mode [ 58.632092][ T5122] veth0_vlan: entered promiscuous mode [ 58.670731][ T5122] veth1_vlan: entered promiscuous mode [ 58.682384][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.702781][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.728942][ T5115] veth0_vlan: entered promiscuous mode [ 58.766597][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.778056][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.788297][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.798825][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.810339][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.822357][ T5115] veth1_vlan: entered promiscuous mode [ 58.838856][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.847418][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.886937][ T5122] veth0_macvtap: entered promiscuous mode [ 58.899364][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.911889][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.923976][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.934979][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.946775][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.957799][ T5111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.970546][ T5111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.979453][ T5111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.988221][ T5111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.006656][ T5122] veth1_macvtap: entered promiscuous mode [ 59.034615][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.042442][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.105699][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.119593][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.130622][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.141336][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.151734][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.164333][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.176260][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.198467][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.231582][ T5115] veth0_macvtap: entered promiscuous mode [ 59.234429][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.248863][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.260457][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.276142][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.287170][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.298852][ T5122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.309566][ T5122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.325213][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.358586][ T5122] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.378615][ T5122] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.388176][ T5122] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.393582][ T5110] Bluetooth: hci1: command tx timeout [ 59.397299][ T53] Bluetooth: hci0: command tx timeout [ 59.402493][ T5122] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.429022][ T5115] veth1_macvtap: entered promiscuous mode [ 59.473517][ T53] Bluetooth: hci2: command tx timeout [ 59.474151][ T5110] Bluetooth: hci4: command tx timeout [ 59.478922][ T53] Bluetooth: hci3: command tx timeout [ 59.523874][ T5196] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 59.551544][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.564423][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.577861][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.607416][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.631964][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.659082][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.676430][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.687373][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.710973][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.748251][ T2404] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.751617][ T5202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 59.766352][ T2404] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.807938][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.819031][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.829320][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.840177][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.850228][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.860795][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.870931][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.881689][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.895488][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.917036][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.928846][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.939198][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.947956][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.991011][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.001377][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.011215][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.021024][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.125938][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.162849][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.204223][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.249883][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.329693][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.361573][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.682823][ T5215] geneve2: entered promiscuous mode [ 60.696784][ T5215] geneve2: entered allmulticast mode [ 60.761431][ T5224] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 61.041347][ T5239] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 61.104254][ T29] audit: type=1800 audit(1717279748.848:2): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="blkio.bfq.group_wait_time" dev="sda1" ino=1943 res=0 errno=0 [ 61.120772][ T5240] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.473775][ T5110] Bluetooth: hci1: command tx timeout [ 61.476980][ T5116] Bluetooth: hci0: command tx timeout [ 61.558076][ T5110] Bluetooth: hci4: command tx timeout [ 61.558099][ T5116] Bluetooth: hci3: command tx timeout [ 61.565459][ T5110] Bluetooth: hci2: command tx timeout [ 61.704353][ T5267] geneve2: entered promiscuous mode [ 61.720408][ T5267] geneve2: entered allmulticast mode [ 62.615660][ T5317] xt_ecn: cannot match TCP bits for non-tcp packets [ 62.691543][ T5323] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 62.707447][ T5322] geneve2: entered promiscuous mode [ 62.712685][ T5322] geneve2: entered allmulticast mode [ 63.265789][ T5350] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 63.552429][ T5363] ɶƣ0GC¦: entered promiscuous mode [ 63.896052][ T5384] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.515480][ T5410] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 64.676007][ T5419] Zero length message leads to an empty skb [ 65.027280][ T5440] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 65.689353][ T5477] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.698953][ T29] audit: type=1800 audit(1717279753.438:3): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 65.729904][ T29] audit: type=1804 audit(1717279753.438:4): pid=5479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3678647033/syzkaller.2TAcTX/21/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 66.098211][ T5494] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (8) [ 66.308575][ T5468] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.368991][ T5508] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.971330][ T5535] pimreg: entered allmulticast mode [ 67.008058][ T5534] pimreg: left allmulticast mode [ 67.009411][ T5540] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.122886][ T5543] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 67.431509][ T5560] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.529475][ T5565] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.167574][ T5589] can: request_module (can-proto-0) failed. [ 68.285285][ T5601] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 68.999922][ T5629] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.444993][ T5646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.034154][ T5667] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.612894][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.750590][ T5687] x_tables: duplicate underflow at hook 1 [ 70.783976][ T5687] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 70.825534][ T5690] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 70.833279][ T5110] Bluetooth: hci4: command tx timeout [ 71.283187][ T5703] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.611581][ T5712] Illegal XDP return value 4294967274 on prog (id 68) dev N/A, expect packet loss! [ 71.638437][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.648987][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.833529][ T5720] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.511729][ T5737] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.983928][ T5755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.356428][ T5765] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 73.420488][ T5765] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 73.570529][ T5776] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.977785][ T5793] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.291850][ T5805] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.422778][ T5809] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 74.448823][ T5809] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 74.479285][ T5809] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.488635][ T5813] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 74.500867][ T5813] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 75.191256][ T5848] __nla_validate_parse: 2 callbacks suppressed [ 75.191275][ T5848] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 75.208718][ T5845] C: renamed from lo (while UP) [ 75.245194][ T5845] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 75.582887][ T5866] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 75.692415][ T5866] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 75.768562][ T5872] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.140100][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.472146][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.505409][ T5900] C: renamed from lo (while UP) [ 76.535314][ T5900] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 76.766138][ T58] cfg80211: failed to load regulatory.db [ 76.870964][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 76.902069][ T5917] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 76.938991][ T5917] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 77.174570][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.389234][ T5941] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 77.574685][ T5946] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.961162][ T5964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.211914][ T5977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.273548][ T5980] C: renamed from lo (while UP) [ 78.299072][ T5980] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 78.626517][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 79.439221][ T6050] validate_nla: 2 callbacks suppressed [ 79.439240][ T6050] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 79.972262][ T29] audit: type=1804 audit(1717279767.718:5): pid=6080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3440808637/syzkaller.C4NM9i/77/memory.events" dev="sda1" ino=1939 res=1 errno=0 [ 80.258581][ T6096] __nla_validate_parse: 7 callbacks suppressed [ 80.258600][ T6096] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 80.270797][ T6099] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 80.292340][ T6099] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 80.405288][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.611617][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.238986][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.253866][ T6142] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 81.262374][ T6142] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 81.299312][ T6149] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.699610][ T6167] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.745142][ T6167] openvswitch: netlink: Message has 4 unknown bytes. [ 81.810818][ T6173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.920892][ T6179] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.931092][ T6176] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 81.957434][ T6176] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.515876][ T6200] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 82.575043][ T6211] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 82.587799][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.633346][ T6211] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 83.622124][ T6276] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 84.454700][ T6323] validate_nla: 5 callbacks suppressed [ 84.454723][ T6323] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 84.502799][ T6323] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 84.887976][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.019953][ T6358] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 85.056907][ T6358] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 85.129752][ T6363] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 85.355777][ T6373] netlink: 'syz-executor.2': attribute type 20 has an invalid length. [ 85.686149][ T6400] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.706201][ T6397] __nla_validate_parse: 3 callbacks suppressed [ 85.706217][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.732901][ T6400] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 85.782020][ T6407] syz-executor.3[6407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.782156][ T6407] syz-executor.3[6407] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.806578][ T6406] syz-executor.3[6406] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.248438][ T6430] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.293403][ T6430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.329150][ T6430] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.360208][ T6442] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 86.368896][ T6430] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 86.386882][ T6430] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.550265][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.660414][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.027848][ T6478] bridge_slave_0: left allmulticast mode [ 87.049418][ T6478] bridge_slave_0: left promiscuous mode [ 87.075952][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.125274][ T6478] bridge_slave_1: left allmulticast mode [ 87.171717][ T6478] bridge_slave_1: left promiscuous mode [ 87.204163][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.297186][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.307251][ T6478] bond0: (slave bond_slave_0): Releasing backup interface [ 87.356693][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 87.357939][ T6478] bond0: (slave bond_slave_1): Releasing backup interface [ 87.434996][ T6478] team0: Port device team_slave_0 removed [ 87.468103][ T6478] team0: Port device team_slave_1 removed [ 87.482081][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.497361][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.521460][ T6478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.539524][ T6478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.614126][ T6486] bridge_slave_0: left allmulticast mode [ 87.621611][ T6486] bridge_slave_0: left promiscuous mode [ 87.631167][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.658127][ T6486] bridge_slave_1: left allmulticast mode [ 87.670185][ T6486] bridge_slave_1: left promiscuous mode [ 87.686542][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.705113][ T6486] bond0: (slave bond_slave_0): Releasing backup interface [ 87.737583][ T6486] bond0: (slave bond_slave_1): Releasing backup interface [ 87.793949][ T6486] team0: Port device team_slave_0 removed [ 87.821025][ T6486] team0: Port device team_slave_1 removed [ 87.832227][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.841745][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.850786][ T6486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.859735][ T6486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.989779][ T6501] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 88.128557][ T6507] ------------[ cut here ]------------ [ 88.134812][ T6507] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 88.143742][ T6507] WARNING: CPU: 1 PID: 6507 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 88.154703][ T6507] Modules linked in: [ 88.158629][ T6507] CPU: 1 PID: 6507 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 88.169210][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.179739][ T6507] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 88.187386][ T6507] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 2e 98 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 88.207296][ T6507] RSP: 0018:ffffc90012ec7318 EFLAGS: 00010246 [ 88.213785][ T6507] RAX: d273a79c6c750400 RBX: 1ffff1100da89a9e RCX: 0000000000040000 2024/06/01 22:09:35 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 88.221787][ T6507] RDX: ffffc9000b668000 RSI: 0000000000005638 RDI: 0000000000005639 [ 88.229866][ T6507] RBP: ffff88806d44c130 R08: ffffffff815847a2 R09: 1ffff1101728519a [ 88.237949][ T6507] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000 [ 88.246052][ T6507] R13: 0000000002000000 R14: ffff88806d44cca0 R15: ffff88806d44d4f0 [ 88.254101][ T6507] FS: 00007f1297f256c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 88.263651][ T6507] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 88.270260][ T6507] CR2: 0000001b32b21000 CR3: 000000007b042000 CR4: 00000000003506f0 [ 88.283570][ T6507] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 88.291569][ T6507] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 88.301076][ T6507] Call Trace: [ 88.304525][ T6507] [ 88.307473][ T6507] ? __warn+0x163/0x4e0 [ 88.311649][ T6507] ? ieee80211_link_info_change_notify+0x273/0x330 [ 88.318270][ T6507] ? report_bug+0x2b3/0x500 [ 88.322801][ T6507] ? ieee80211_link_info_change_notify+0x273/0x330 [ 88.329404][ T6507] ? handle_bug+0x3e/0x70 [ 88.333841][ T6507] ? exc_invalid_op+0x1a/0x50 [ 88.338545][ T6507] ? asm_exc_invalid_op+0x1a/0x20 [ 88.343680][ T6507] ? __warn_printk+0x292/0x360 [ 88.348473][ T6507] ? ieee80211_link_info_change_notify+0x273/0x330 [ 88.355399][ T6507] ? ieee80211_link_info_change_notify+0x272/0x330 [ 88.361931][ T6507] ieee80211_set_mcast_rate+0x46/0x60 [ 88.367360][ T6507] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 88.373499][ T6507] nl80211_set_mcast_rate+0xaff/0xeb0 [ 88.378907][ T6507] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 88.384876][ T6507] genl_rcv_msg+0xb14/0xec0 [ 88.389402][ T6507] ? mark_lock+0x9a/0x350 [ 88.393943][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.399017][ T6507] ? __pfx_lock_acquire+0x10/0x10 [ 88.404106][ T6507] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 88.409495][ T6507] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 88.415448][ T6507] ? __pfx_nl80211_post_doit+0x10/0x10 [ 88.420930][ T6507] ? __pfx___might_resched+0x10/0x10 [ 88.426349][ T6507] netlink_rcv_skb+0x1e3/0x430 [ 88.431138][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.436309][ T6507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.441630][ T6507] ? __netlink_deliver_tap+0x77e/0x7c0 [ 88.447170][ T6507] genl_rcv+0x28/0x40 [ 88.451173][ T6507] netlink_unicast+0x7ea/0x980 [ 88.456008][ T6507] ? __pfx_netlink_unicast+0x10/0x10 [ 88.461310][ T6507] ? __virt_addr_valid+0x183/0x520 [ 88.466532][ T6507] ? __check_object_size+0x49c/0x900 [ 88.471841][ T6507] ? bpf_lsm_netlink_send+0x9/0x10 [ 88.477052][ T6507] netlink_sendmsg+0x8db/0xcb0 [ 88.481851][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.487284][ T6507] ? __import_iovec+0x536/0x820 [ 88.492170][ T6507] ? aa_sock_msg_perm+0x91/0x160 [ 88.497242][ T6507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 88.502548][ T6507] ? security_socket_sendmsg+0x87/0xb0 [ 88.508095][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.513498][ T6507] __sock_sendmsg+0x221/0x270 [ 88.518204][ T6507] ____sys_sendmsg+0x525/0x7d0 [ 88.523059][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.528380][ T6507] __sys_sendmsg+0x2b0/0x3a0 [ 88.533013][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.538198][ T6507] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.544684][ T6507] ? do_syscall_64+0x100/0x230 [ 88.549472][ T6507] ? do_syscall_64+0xb6/0x230 [ 88.554230][ T6507] do_syscall_64+0xf3/0x230 [ 88.558759][ T6507] ? clear_bhb_loop+0x35/0x90 [ 88.563566][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.569483][ T6507] RIP: 0033:0x7f129727cee9 [ 88.574019][ T6507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 88.594167][ T6507] RSP: 002b:00007f1297f250c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.602608][ T6507] RAX: ffffffffffffffda RBX: 00007f12973b4070 RCX: 00007f129727cee9 [ 88.610720][ T6507] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000008 [ 88.618753][ T6507] RBP: 00007f12972c947f R08: 0000000000000000 R09: 0000000000000000 [ 88.626799][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 88.634839][ T6507] R13: 000000000000006e R14: 00007f12973b4070 R15: 00007fff67db54b8 [ 88.642849][ T6507] [ 88.645955][ T6507] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 88.653232][ T6507] CPU: 1 PID: 6507 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00104-gd8ec19857b09 #0 [ 88.663634][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 88.673678][ T6507] Call Trace: [ 88.676947][ T6507] [ 88.679869][ T6507] dump_stack_lvl+0x241/0x360 [ 88.684548][ T6507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.689741][ T6507] ? __pfx__printk+0x10/0x10 [ 88.694322][ T6507] ? _printk+0xd5/0x120 [ 88.698476][ T6507] ? vscnprintf+0x5d/0x90 [ 88.702822][ T6507] panic+0x349/0x860 [ 88.706714][ T6507] ? __warn+0x172/0x4e0 [ 88.710870][ T6507] ? __pfx_panic+0x10/0x10 [ 88.715277][ T6507] ? show_trace_log_lvl+0x4e6/0x520 [ 88.720489][ T6507] __warn+0x346/0x4e0 [ 88.724465][ T6507] ? ieee80211_link_info_change_notify+0x273/0x330 [ 88.730961][ T6507] report_bug+0x2b3/0x500 [ 88.735291][ T6507] ? ieee80211_link_info_change_notify+0x273/0x330 [ 88.741785][ T6507] handle_bug+0x3e/0x70 [ 88.745967][ T6507] exc_invalid_op+0x1a/0x50 [ 88.750469][ T6507] asm_exc_invalid_op+0x1a/0x20 [ 88.755316][ T6507] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 88.762421][ T6507] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 2e 98 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 88.782108][ T6507] RSP: 0018:ffffc90012ec7318 EFLAGS: 00010246 [ 88.788170][ T6507] RAX: d273a79c6c750400 RBX: 1ffff1100da89a9e RCX: 0000000000040000 [ 88.796135][ T6507] RDX: ffffc9000b668000 RSI: 0000000000005638 RDI: 0000000000005639 [ 88.804096][ T6507] RBP: ffff88806d44c130 R08: ffffffff815847a2 R09: 1ffff1101728519a [ 88.812063][ T6507] R10: dffffc0000000000 R11: ffffed101728519b R12: dffffc0000000000 [ 88.820029][ T6507] R13: 0000000002000000 R14: ffff88806d44cca0 R15: ffff88806d44d4f0 [ 88.828000][ T6507] ? __warn_printk+0x292/0x360 [ 88.832766][ T6507] ? ieee80211_link_info_change_notify+0x272/0x330 [ 88.839265][ T6507] ieee80211_set_mcast_rate+0x46/0x60 [ 88.844630][ T6507] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 88.850686][ T6507] nl80211_set_mcast_rate+0xaff/0xeb0 [ 88.856063][ T6507] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 88.861960][ T6507] genl_rcv_msg+0xb14/0xec0 [ 88.866459][ T6507] ? mark_lock+0x9a/0x350 [ 88.870782][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.875825][ T6507] ? __pfx_lock_acquire+0x10/0x10 [ 88.880837][ T6507] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 88.886196][ T6507] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 88.892081][ T6507] ? __pfx_nl80211_post_doit+0x10/0x10 [ 88.897532][ T6507] ? __pfx___might_resched+0x10/0x10 [ 88.902820][ T6507] netlink_rcv_skb+0x1e3/0x430 [ 88.907574][ T6507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 88.912594][ T6507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.917889][ T6507] ? __netlink_deliver_tap+0x77e/0x7c0 [ 88.923367][ T6507] genl_rcv+0x28/0x40 [ 88.927349][ T6507] netlink_unicast+0x7ea/0x980 [ 88.932117][ T6507] ? __pfx_netlink_unicast+0x10/0x10 [ 88.937393][ T6507] ? __virt_addr_valid+0x183/0x520 [ 88.942498][ T6507] ? __check_object_size+0x49c/0x900 [ 88.947775][ T6507] ? bpf_lsm_netlink_send+0x9/0x10 [ 88.952893][ T6507] netlink_sendmsg+0x8db/0xcb0 [ 88.957659][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.962940][ T6507] ? __import_iovec+0x536/0x820 [ 88.967782][ T6507] ? aa_sock_msg_perm+0x91/0x160 [ 88.972714][ T6507] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 88.977986][ T6507] ? security_socket_sendmsg+0x87/0xb0 [ 88.983440][ T6507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.988714][ T6507] __sock_sendmsg+0x221/0x270 [ 88.993386][ T6507] ____sys_sendmsg+0x525/0x7d0 [ 88.998154][ T6507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 89.003448][ T6507] __sys_sendmsg+0x2b0/0x3a0 [ 89.008028][ T6507] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.013184][ T6507] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.019517][ T6507] ? do_syscall_64+0x100/0x230 [ 89.024274][ T6507] ? do_syscall_64+0xb6/0x230 [ 89.028942][ T6507] do_syscall_64+0xf3/0x230 [ 89.033434][ T6507] ? clear_bhb_loop+0x35/0x90 [ 89.038103][ T6507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.043987][ T6507] RIP: 0033:0x7f129727cee9 [ 89.048392][ T6507] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 89.067986][ T6507] RSP: 002b:00007f1297f250c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.076394][ T6507] RAX: ffffffffffffffda RBX: 00007f12973b4070 RCX: 00007f129727cee9 [ 89.084355][ T6507] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000008 [ 89.092314][ T6507] RBP: 00007f12972c947f R08: 0000000000000000 R09: 0000000000000000 [ 89.100274][ T6507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.108231][ T6507] R13: 000000000000006e R14: 00007f12973b4070 R15: 00007fff67db54b8 [ 89.116205][ T6507] [ 89.119435][ T6507] Kernel Offset: disabled [ 89.123807][ T6507] Rebooting in 86400 seconds..