last executing test programs: 2.607302407s ago: executing program 3 (id=473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0xfdef) 2.194069998s ago: executing program 3 (id=480): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) readv(r0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/163, 0xa3}, {&(0x7f0000001580)=""/4088, 0xff8}], 0x2) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.979791927s ago: executing program 3 (id=484): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.763496963s ago: executing program 0 (id=488): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 1.654457814s ago: executing program 0 (id=490): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f00000005c0)=[{0x18, 0x29, 0x37, '\x00'}], 0x18}}], 0x1, 0x4000000) 1.583666004s ago: executing program 3 (id=493): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="0003230c1100"}) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000260091"], 0xfe33) 1.342520589s ago: executing program 3 (id=496): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) connect$phonet_pipe(r0, 0x0, 0x0) 1.342258491s ago: executing program 0 (id=497): r0 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r0, 0x0, 0x3, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f00000001c0)=0x1, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10040, 0x0, 0x0) 1.327526892s ago: executing program 2 (id=498): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val={0x70}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x6400, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x2, "2915a94a11e4fb7e83969bcb5cdbf104b1e6f70749e196288c4e8cd4f9aafcaf", "d0e077bf945c40399aeb88c150a72ed1", {"3b6de13637349f05f524bbde1d772edc", "6e545f1b3d4836bdea89c2b3c01c59e4"}}}}}}}}, 0x8a) 1.160562661s ago: executing program 0 (id=501): r0 = socket(0x1, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000080)={0x0, 0x2710}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000005c0)=""/5, 0x5}], 0x1}}], 0x2, 0x0, 0x0) 1.155122358s ago: executing program 1 (id=502): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r3, @ANYBLOB='4\x00.'], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) 1.067270452s ago: executing program 4 (id=503): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000b80)={r2, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[], 0x0) 953.675037ms ago: executing program 4 (id=504): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000086dd000311000400000000006eec00be000c2f01fe8000000000000000000000000000aaff020000000000000000000000000001330022eb"], 0x10da) 952.922675ms ago: executing program 0 (id=505): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x7}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x38}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 905.972348ms ago: executing program 2 (id=506): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(0x3) 878.592498ms ago: executing program 1 (id=507): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="030300000000000000000600140008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) 706.134738ms ago: executing program 2 (id=508): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff07, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x8000000010, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 650.898476ms ago: executing program 1 (id=509): sendmsg$inet(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000000c0)="8af83b42e304bd", 0x7}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000090000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000005c0), 0x0}, 0x20) 626.707696ms ago: executing program 0 (id=510): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x5cac3000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'sit0\x00', 0x1}, 0x18) 624.316921ms ago: executing program 4 (id=511): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0xffffffff) r1 = socket$unix(0x1, 0x5, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 538.053114ms ago: executing program 1 (id=512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 490.582701ms ago: executing program 3 (id=513): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xe, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) writev(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000001580)="87", 0x1}], 0x2) 479.239777ms ago: executing program 2 (id=514): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0xc6ae, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e1e, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f5", 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}, 0x3, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) 478.220982ms ago: executing program 4 (id=515): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000)=0x5, 0x4) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010100, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 353.36806ms ago: executing program 1 (id=516): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) 335.493572ms ago: executing program 4 (id=517): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, 0x0) 224.523981ms ago: executing program 2 (id=518): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r1, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}, 0x4, 0x700000000000000}, 0x0) 187.937885ms ago: executing program 1 (id=519): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x18, 0xf, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x78}}, 0x0) 81.726762ms ago: executing program 4 (id=520): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @local, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x10, 0x6071, 0x0, 0xe7, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x9, 0xcc5}]}}}}}}}, 0x0) 0s ago: executing program 2 (id=521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x4, 0x2, 0x0, 0x1, 0x2}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x3, 0x890e, 0x1000, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.31' (ED25519) to the list of known hosts. [ 68.238092][ T5815] cgroup: Unknown subsys name 'net' [ 68.366833][ T5815] cgroup: Unknown subsys name 'cpuset' [ 68.375201][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.798180][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.237628][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.244046][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.860819][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.874000][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.882189][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.892871][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.913964][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.922366][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.931168][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.938508][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.948485][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.948653][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.964217][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.973300][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.981139][ T5152] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.995127][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.996820][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.012164][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.012426][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.022688][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.033668][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.034486][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 72.048577][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.048578][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.049418][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.068910][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.080668][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.587035][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 72.695914][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 72.807488][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 72.923636][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 72.935372][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.942644][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.950378][ T5830] bridge_slave_0: entered allmulticast mode [ 72.957579][ T5830] bridge_slave_0: entered promiscuous mode [ 72.970702][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 73.010991][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.018107][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.025306][ T5830] bridge_slave_1: entered allmulticast mode [ 73.032133][ T5830] bridge_slave_1: entered promiscuous mode [ 73.154778][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.164746][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.171914][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.179299][ T5825] bridge_slave_0: entered allmulticast mode [ 73.186421][ T5825] bridge_slave_0: entered promiscuous mode [ 73.214500][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.223766][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.231233][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.238902][ T5825] bridge_slave_1: entered allmulticast mode [ 73.245851][ T5825] bridge_slave_1: entered promiscuous mode [ 73.257242][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.264463][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.271671][ T5835] bridge_slave_0: entered allmulticast mode [ 73.278680][ T5835] bridge_slave_0: entered promiscuous mode [ 73.331610][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.338813][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.346289][ T5835] bridge_slave_1: entered allmulticast mode [ 73.353100][ T5835] bridge_slave_1: entered promiscuous mode [ 73.371496][ T5830] team0: Port device team_slave_0 added [ 73.407538][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.414988][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.422084][ T5839] bridge_slave_0: entered allmulticast mode [ 73.429329][ T5839] bridge_slave_0: entered promiscuous mode [ 73.438267][ T5830] team0: Port device team_slave_1 added [ 73.446079][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.476047][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.484032][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.491267][ T5839] bridge_slave_1: entered allmulticast mode [ 73.498389][ T5839] bridge_slave_1: entered promiscuous mode [ 73.518284][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.527528][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.534760][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.541941][ T5831] bridge_slave_0: entered allmulticast mode [ 73.548999][ T5831] bridge_slave_0: entered promiscuous mode [ 73.561181][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.599959][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.607248][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.614830][ T5831] bridge_slave_1: entered allmulticast mode [ 73.621632][ T5831] bridge_slave_1: entered promiscuous mode [ 73.630360][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.661842][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.669094][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.695398][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.739775][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.749570][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.756727][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.783508][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.799580][ T5825] team0: Port device team_slave_0 added [ 73.816876][ T5835] team0: Port device team_slave_0 added [ 73.824698][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.840531][ T5825] team0: Port device team_slave_1 added [ 73.848239][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.859445][ T5835] team0: Port device team_slave_1 added [ 73.891988][ T5839] team0: Port device team_slave_0 added [ 73.909346][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.931044][ T5839] team0: Port device team_slave_1 added [ 73.987137][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.994227][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.022068][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.044284][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.051244][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.077213][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.108871][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.116566][ T5836] Bluetooth: hci4: command tx timeout [ 74.116895][ T5832] Bluetooth: hci1: command tx timeout [ 74.122391][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.128065][ T5843] Bluetooth: hci0: command tx timeout [ 74.128220][ T5838] Bluetooth: hci3: command tx timeout [ 74.165278][ T5152] Bluetooth: hci2: command tx timeout [ 74.170960][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.183435][ T5831] team0: Port device team_slave_0 added [ 74.189716][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.196775][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.223058][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.239800][ T5830] hsr_slave_0: entered promiscuous mode [ 74.246159][ T5830] hsr_slave_1: entered promiscuous mode [ 74.253037][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.260127][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.286392][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.305491][ T5831] team0: Port device team_slave_1 added [ 74.318402][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.325707][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.351663][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.440951][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.448083][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.474372][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.495376][ T5835] hsr_slave_0: entered promiscuous mode [ 74.501572][ T5835] hsr_slave_1: entered promiscuous mode [ 74.508098][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 74.513877][ T5835] Cannot create hsr debugfs directory [ 74.539119][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.546451][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.572503][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.604718][ T5825] hsr_slave_0: entered promiscuous mode [ 74.610909][ T5825] hsr_slave_1: entered promiscuous mode [ 74.617199][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 74.622916][ T5825] Cannot create hsr debugfs directory [ 74.633284][ T5839] hsr_slave_0: entered promiscuous mode [ 74.639486][ T5839] hsr_slave_1: entered promiscuous mode [ 74.645694][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 74.651416][ T5839] Cannot create hsr debugfs directory [ 74.805853][ T5831] hsr_slave_0: entered promiscuous mode [ 74.812179][ T5831] hsr_slave_1: entered promiscuous mode [ 74.818733][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 74.824565][ T5831] Cannot create hsr debugfs directory [ 75.156931][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.181137][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.202188][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.214685][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.267077][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.280915][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.301471][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.313776][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.366214][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.390971][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.407932][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.419825][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.498283][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.511233][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.538146][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.547938][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.609571][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.646582][ T5825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.661979][ T5825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.672195][ T5825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.687862][ T5825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.736297][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.766340][ T3863] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.773575][ T3863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.807421][ T3515] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.814634][ T3515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.855751][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.922732][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.947149][ T1155] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.954293][ T1155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.967288][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.989583][ T1155] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.996693][ T1155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.032547][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.048883][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.106714][ T3515] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.113860][ T3515] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.129133][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.152502][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.159704][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.180145][ T3953] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.187307][ T3953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.197621][ T5838] Bluetooth: hci3: command tx timeout [ 76.197678][ T5843] Bluetooth: hci0: command tx timeout [ 76.203022][ T5836] Bluetooth: hci4: command tx timeout [ 76.209095][ T5152] Bluetooth: hci2: command tx timeout [ 76.219500][ T5832] Bluetooth: hci1: command tx timeout [ 76.243177][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.276967][ T3953] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.284137][ T3953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.305221][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.361525][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.421032][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.467311][ T3472] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.474501][ T3472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.512695][ T3472] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.519870][ T3472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.592242][ T5830] veth0_vlan: entered promiscuous mode [ 76.620618][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.689063][ T5830] veth1_vlan: entered promiscuous mode [ 76.903071][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.947607][ T5830] veth0_macvtap: entered promiscuous mode [ 76.986598][ T5830] veth1_macvtap: entered promiscuous mode [ 77.042720][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.108256][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.132550][ T5831] veth0_vlan: entered promiscuous mode [ 77.147455][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.172355][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.182463][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.199107][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.208584][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.228199][ T5831] veth1_vlan: entered promiscuous mode [ 77.258625][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.294935][ T5839] veth0_vlan: entered promiscuous mode [ 77.312921][ T5835] veth0_vlan: entered promiscuous mode [ 77.339087][ T5839] veth1_vlan: entered promiscuous mode [ 77.365525][ T5835] veth1_vlan: entered promiscuous mode [ 77.402543][ T5831] veth0_macvtap: entered promiscuous mode [ 77.424470][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.428539][ T5831] veth1_macvtap: entered promiscuous mode [ 77.439752][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.489943][ T5825] veth0_vlan: entered promiscuous mode [ 77.503411][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.508989][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.514334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.548229][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.575304][ T5825] veth1_vlan: entered promiscuous mode [ 77.585636][ T5835] veth0_macvtap: entered promiscuous mode [ 77.593278][ T5839] veth0_macvtap: entered promiscuous mode [ 77.598153][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.609144][ T1155] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.626521][ T1155] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.644699][ T5835] veth1_macvtap: entered promiscuous mode [ 77.651272][ T1155] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.660416][ T1155] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.682893][ T5839] veth1_macvtap: entered promiscuous mode [ 77.787862][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.802330][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.849352][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.879722][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.908906][ T5825] veth0_macvtap: entered promiscuous mode [ 77.916273][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.925566][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.948941][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.988460][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.006787][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.032688][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.043147][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.043532][ T5825] veth1_macvtap: entered promiscuous mode [ 78.064488][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.077052][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.088233][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.137501][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.173818][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.260712][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.274786][ T5843] Bluetooth: hci2: command tx timeout [ 78.274872][ T5838] Bluetooth: hci0: command tx timeout [ 78.280602][ T5152] Bluetooth: hci4: command tx timeout [ 78.286580][ T5836] Bluetooth: hci3: command tx timeout [ 78.296769][ T5832] Bluetooth: hci1: command tx timeout [ 78.299544][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.316762][ T3953] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.326051][ T3953] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.348486][ T3953] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.360682][ T3953] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.458444][ T1155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.485292][ T1155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.546687][ T3953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.584052][ T3953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.655735][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9'. [ 78.665021][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.665041][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.831658][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.853283][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.893827][ T1155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.922385][ T1155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.993419][ T3863] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.025344][ T3863] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.291812][ T5972] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 79.341752][ T5972] team_slave_0: entered promiscuous mode [ 79.347624][ T5972] team_slave_1: entered promiscuous mode [ 79.355806][ T5972] macsec1: entered promiscuous mode [ 79.361109][ T5972] team0: entered promiscuous mode [ 79.372585][ T5972] macsec1: entered allmulticast mode [ 79.389485][ T5972] team0: entered allmulticast mode [ 79.398576][ T5972] team_slave_0: entered allmulticast mode [ 79.405339][ T5972] team_slave_1: entered allmulticast mode [ 79.632644][ T5972] team0: left allmulticast mode [ 79.644895][ T5972] team_slave_0: left allmulticast mode [ 79.670593][ T5972] team_slave_1: left allmulticast mode [ 79.679743][ T5972] team0: left promiscuous mode [ 79.692972][ T5972] team_slave_0: left promiscuous mode [ 79.698541][ T5972] team_slave_1: left promiscuous mode [ 80.354723][ T5838] Bluetooth: hci0: command tx timeout [ 80.355109][ T5843] Bluetooth: hci2: command tx timeout [ 80.360162][ T5836] Bluetooth: hci3: command tx timeout [ 80.360198][ T5832] Bluetooth: hci1: command tx timeout [ 80.366218][ T5152] Bluetooth: hci4: command tx timeout [ 80.617217][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.625159][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.003693][ T6004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.169637][ T6008] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 81.209309][ T6004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.478885][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.28'. [ 81.579728][ T6004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.867602][ T6004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.158719][ T3472] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.305734][ T3472] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.389005][ T3472] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.519932][ T3515] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.477771][ T6070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.52'. [ 83.486560][ T6065] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.586529][ T6074] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 83.606605][ T6074] netlink: 76 bytes leftover after parsing attributes in process `syz.4.53'. [ 83.667051][ T6065] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.843046][ T6065] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.066286][ T6065] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.357083][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.555155][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.619640][ T6105] syzkaller1: entered promiscuous mode [ 84.631509][ T6105] syzkaller1: entered allmulticast mode [ 84.639385][ T1310] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.710143][ T49] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.295441][ T5827] IPVS: starting estimator thread 0... [ 85.385412][ T6135] IPVS: using max 27 ests per chain, 64800 per kthread [ 85.975995][ T6165] Zero length message leads to an empty skb [ 86.688341][ T910] cfg80211: failed to load regulatory.db [ 86.990324][ T6196] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.95'. [ 87.268286][ T6199] Bluetooth: MGMT ver 1.23 [ 87.353180][ T6202] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 87.390783][ T6202] netlink: 'syz.2.98': attribute type 2 has an invalid length. [ 87.586655][ T6210] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.604492][ T6208] Illegal XDP return value 1677925459 on prog (id 20) dev syz_tun, expect packet loss! [ 88.340072][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 88.364029][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.116'. [ 90.220519][ T6283] warning: `syz.2.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.246097][ T5827] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 91.379759][ T6330] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 91.459763][ T6327] fido_id[6327]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci2/hci2:200/report_descriptor': No such file or directory [ 91.491294][ T6330] bond1 (unregistering): Released all slaves [ 91.751201][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 91.771624][ T6342] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 92.397469][ T6361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.167'. [ 92.734024][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 92.778643][ T5842] udevd[5842]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 93.645210][ T6412] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.731774][ T6406] team0 (unregistering): Port device team_slave_0 removed [ 93.773109][ T6406] team0 (unregistering): Port device team_slave_1 removed [ 93.931623][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 94.373504][ T6438] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.197'. [ 96.692769][ T6519] netlink: 'syz.3.232': attribute type 3 has an invalid length. [ 96.732305][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 96.819736][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.234'. [ 97.297750][ T6552] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 97.306788][ T6552] netlink: 'syz.2.245': attribute type 2 has an invalid length. [ 97.319978][ T6552] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 97.333212][ T6552] netlink: 'syz.2.245': attribute type 3 has an invalid length. [ 98.552564][ T6566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 99.026687][ T6589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.262'. [ 99.074098][ T6589] netlink: 'syz.0.262': attribute type 2 has an invalid length. [ 99.369447][ T6605] netlink: 'syz.2.270': attribute type 12 has an invalid length. [ 99.392548][ T6605] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 99.402986][ T6605] netlink: 148 bytes leftover after parsing attributes in process `syz.2.270'. [ 99.424135][ T6605] netlink: 'syz.2.270': attribute type 12 has an invalid length. [ 99.432464][ T6605] netlink: 'syz.2.270': attribute type 29 has an invalid length. [ 99.451111][ T6605] netlink: 148 bytes leftover after parsing attributes in process `syz.2.270'. [ 100.215969][ T6642] netlink: 36 bytes leftover after parsing attributes in process `syz.2.287'. [ 101.286433][ T6654] block nbd0: server does not support multiple connections per device. [ 101.311915][ T6654] block nbd0: shutting down sockets [ 101.694798][ T6697] Bluetooth: MGMT ver 1.23 [ 101.699621][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 102.485169][ T6682] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'. [ 103.216168][ T6754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.330'. [ 103.738174][ T10] IPVS: starting estimator thread 0... [ 103.746797][ T6768] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 103.833997][ T6775] IPVS: using max 34 ests per chain, 81600 per kthread [ 104.136578][ T6790] macvtap1: entered promiscuous mode [ 104.142180][ T6790] macvtap1: entered allmulticast mode [ 104.148045][ T6790] veth1_vlan: entered allmulticast mode [ 104.177188][ T6790] macvtap2: entered promiscuous mode [ 104.182581][ T6790] macvtap2: entered allmulticast mode [ 104.683209][ T6811] netlink: 312 bytes leftover after parsing attributes in process `syz.4.356'. [ 105.372178][ T6833] netlink: 71 bytes leftover after parsing attributes in process `syz.1.366'. [ 107.564646][ T6918] netlink: 408 bytes leftover after parsing attributes in process `syz.2.405'. [ 107.718526][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.726809][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.762458][ T6928] netlink: zone id is out of range [ 107.773869][ T6928] netlink: zone id is out of range [ 107.788521][ T6928] netlink: zone id is out of range [ 107.801846][ T6928] netlink: zone id is out of range [ 107.814995][ T6928] netlink: zone id is out of range [ 107.830728][ T6928] netlink: zone id is out of range [ 107.844527][ T6928] netlink: zone id is out of range [ 108.609659][ T6964] netlink: 428 bytes leftover after parsing attributes in process `syz.0.425'. [ 108.646815][ T6964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 108.754767][ T5905] net_ratelimit: 48 callbacks suppressed [ 108.754786][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.836779][ T106] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.946037][ T6981] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 109.164895][ T6989] trusted_key: syz.0.437 sent an empty control message without MSG_MORE. [ 109.327710][ T30] audit: type=1804 audit(1767668881.654:2): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.438" name="/newroot/84/memory.events" dev="tmpfs" ino=442 res=1 errno=0 [ 109.646070][ T527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.704068][ T7008] veth0_to_bridge: entered promiscuous mode [ 109.735403][ T7006] veth0_to_bridge: left promiscuous mode [ 109.813252][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.837207][ T5913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.902590][ T7058] netlink: 48 bytes leftover after parsing attributes in process `syz.2.467'. [ 110.916058][ T4140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.244200][ T7068] tipc: Started in network mode [ 111.249651][ T7068] tipc: Node identity ac14142f, cluster identity 4711 [ 111.260879][ T7068] tipc: New replicast peer: 0.0.0.0 [ 111.267752][ T7068] tipc: Enabled bearer , priority 10 [ 111.282704][ T7073] tipc: New replicast peer: 172.30.1.3 [ 111.715204][ T49] wlan1: Trigger new scan to find an IBSS to join [ 111.874295][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.021767][ T7102] netlink: 84 bytes leftover after parsing attributes in process `syz.2.486'. [ 112.053253][ T7102] netlink: 175 bytes leftover after parsing attributes in process `syz.2.486'. [ 112.273720][ T7114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.294561][ T7116] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.493'. [ 112.324088][ T7114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.337738][ T7114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.385341][ T10] tipc: Node number set to 2886997039 [ 112.752648][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.502'. [ 112.791354][ T7136] netlink: 48 bytes leftover after parsing attributes in process `syz.1.502'. [ 113.029681][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 113.175336][ T7149] netlink: 'syz.2.508': attribute type 12 has an invalid length. [ 113.786352][ C0] ------------[ cut here ]------------ [ 113.792026][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 113.801906][ C0] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#0: syz.0.510/7158 [ 113.812471][ C0] Modules linked in: [ 113.816572][ C0] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.510 Not tainted syzkaller #0 PREEMPT(full) [ 113.825816][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.835924][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 113.842183][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 113.861862][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010246 [ 113.867972][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 113.876004][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e0f0 [ 113.884022][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 113.892002][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888027468028 [ 113.900014][ C0] R13: 0000000000000000 R14: ffffffff8f92e0f0 R15: ffff888021fd3138 [ 113.908031][ C0] FS: 00007f7bd33ca6c0(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000 [ 113.917009][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 113.923596][ C0] CR2: 00007f838fd9fa90 CR3: 00000000789c0000 CR4: 00000000003526f0 [ 113.931621][ C0] Call Trace: [ 113.934949][ C0] [ 113.937817][ C0] rate_control_send_low+0x1a7/0x7b0 [ 113.943123][ C0] rate_control_get_rate+0x20b/0x5d0 [ 113.948470][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 113.954345][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 113.960695][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 113.964214][ T55] net_ratelimit: 2 callbacks suppressed [ 113.964228][ T55] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.966845][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 113.986064][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 113.992106][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 113.997720][ C0] ? lock_acquire+0x107/0x340 [ 114.002414][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.008040][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.013613][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 114.019234][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.024825][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 114.030279][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 114.036402][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 114.041970][ C0] __iterate_interfaces+0x2ab/0x590 [ 114.047223][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.053311][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 114.060581][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.066690][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 114.073704][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 114.078930][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 114.084815][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 114.090017][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 114.095781][ C0] ? read_tsc+0x9/0x20 [ 114.099880][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 114.105048][ C0] handle_softirqs+0x22b/0x7c0 [ 114.109823][ C0] ? __irq_exit_rcu+0x60/0x150 [ 114.114619][ C0] __irq_exit_rcu+0x60/0x150 [ 114.119222][ C0] irq_exit_rcu+0x9/0x30 [ 114.123455][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 114.129125][ C0] [ 114.132062][ C0] [ 114.135022][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.141020][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 114.147131][ C0] Code: 8b 3d 54 fe d9 0b 48 89 de 5b e9 b3 fb 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 80 92 65 8b 15 58 18 bf 10 81 e2 00 01 ff 00 [ 114.166775][ C0] RSP: 0018:ffffc90003e4f520 EFLAGS: 00000246 [ 114.172836][ C0] RAX: ffffffff81f97a04 RBX: ffffffff81f978dc RCX: 0000000000000002 [ 114.180865][ C0] RDX: ffff888024f49e80 RSI: 0000000000000001 RDI: 0000000000000002 [ 114.188872][ C0] RBP: 0000000000000001 R08: ffffea0001dcbbb7 R09: 1ffffd40003b9776 [ 114.196880][ C0] R10: dffffc0000000000 R11: fffff940003b9777 R12: dffffc0000000000 [ 114.204904][ C0] R13: dffffc0000000000 R14: ffffea0001dcbbb4 R15: 0000000000000003 [ 114.212889][ C0] ? folio_try_get+0x1c/0x340 [ 114.217649][ C0] ? folio_try_get+0x144/0x340 [ 114.222430][ C0] folio_try_get+0x144/0x340 [ 114.227055][ C0] next_uptodate_folio+0xcb/0x5d0 [ 114.232093][ C0] filemap_map_pages+0x14d7/0x1fd0 [ 114.237260][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 114.242472][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.247963][ C0] ? ___pte_offset_map+0x29/0x240 [ 114.253014][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.258496][ C0] ? do_pte_missing+0x11a9/0x3330 [ 114.263535][ C0] do_pte_missing+0x20b0/0x3330 [ 114.268440][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 114.273391][ C0] handle_mm_fault+0x1b26/0x32b0 [ 114.278356][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 114.283838][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 114.288817][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 114.294139][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 114.299164][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 114.304489][ C0] __get_user_pages+0x1650/0x29f0 [ 114.309544][ C0] populate_vma_page_range+0x29f/0x3a0 [ 114.315028][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 114.321024][ C0] ? down_read+0x274/0x2e0 [ 114.325473][ C0] ? __mm_populate+0x160/0x380 [ 114.330251][ C0] __mm_populate+0x24c/0x380 [ 114.334885][ C0] ? __pfx___mm_populate+0x10/0x10 [ 114.340028][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 114.344686][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 114.349810][ C0] ? exc_page_fault+0x71/0xd0 [ 114.354551][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 114.359429][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 114.364243][ C0] do_syscall_64+0xec/0xf80 [ 114.368765][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.374875][ C0] ? trace_irq_disable+0x37/0x100 [ 114.379918][ C0] ? clear_bhb_loop+0x60/0xb0 [ 114.384628][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.390528][ C0] RIP: 0033:0x7f7bd258f749 [ 114.394986][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.414649][ C0] RSP: 002b:00007f7bd33ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 114.423061][ C0] RAX: ffffffffffffffda RBX: 00007f7bd27e6090 RCX: 00007f7bd258f749 [ 114.431061][ C0] RDX: 000000000000000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 114.439078][ C0] RBP: 00007f7bd2613f91 R08: ffffffffffffffff R09: 000000005cac3000 [ 114.447084][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 114.455101][ C0] R13: 00007f7bd27e6128 R14: 00007f7bd27e6090 R15: 00007fff4f632c28 [ 114.463098][ C0] [ 114.466146][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 114.473427][ C0] CPU: 0 UID: 0 PID: 7158 Comm: syz.0.510 Not tainted syzkaller #0 PREEMPT(full) [ 114.482614][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.492653][ C0] Call Trace: [ 114.495919][ C0] [ 114.498751][ C0] vpanic+0x1e0/0x670 [ 114.502735][ C0] panic+0xb9/0xc0 [ 114.506467][ C0] ? __pfx_panic+0x10/0x10 [ 114.510879][ C0] __warn+0x317/0x4b0 [ 114.514846][ C0] ? __rate_control_send_low+0x524/0x800 [ 114.520466][ C0] ? __rate_control_send_low+0x524/0x800 [ 114.526106][ C0] __report_bug+0x288/0x500 [ 114.530605][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 114.535888][ C0] ? rcu_is_watching+0x15/0xb0 [ 114.540656][ C0] ? __kasan_check_byte+0x12/0x40 [ 114.545679][ C0] ? __rate_control_send_low+0x524/0x800 [ 114.551316][ C0] ? __pfx___report_bug+0x10/0x10 [ 114.556338][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 114.561623][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 114.566826][ C0] ? kernel_text_address+0xa5/0xe0 [ 114.571939][ C0] report_bug_entry+0x19a/0x290 [ 114.576786][ C0] ? __rate_control_send_low+0x5bb/0x800 [ 114.582405][ C0] ? __rate_control_send_low+0x5c0/0x800 [ 114.588027][ C0] handle_bug+0xca/0x200 [ 114.592263][ C0] exc_invalid_op+0x1a/0x50 [ 114.596760][ C0] asm_exc_invalid_op+0x1a/0x20 [ 114.601599][ C0] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 114.607829][ C0] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 114.627424][ C0] RSP: 0018:ffffc90000007638 EFLAGS: 00010246 [ 114.633484][ C0] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 114.641445][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92e0f0 [ 114.649403][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 114.657362][ C0] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888027468028 [ 114.665322][ C0] R13: 0000000000000000 R14: ffffffff8f92e0f0 R15: ffff888021fd3138 [ 114.673298][ C0] ? __rate_control_send_low+0x58d/0x800 [ 114.678935][ C0] rate_control_send_low+0x1a7/0x7b0 [ 114.684223][ C0] rate_control_get_rate+0x20b/0x5d0 [ 114.689503][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 114.695309][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 114.701630][ C0] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 114.707710][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 114.713350][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 114.719339][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.724877][ C0] ? lock_acquire+0x107/0x340 [ 114.729547][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.735090][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.740626][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 114.746165][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 114.751712][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 114.757169][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 114.763236][ C0] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 114.768786][ C0] __iterate_interfaces+0x2ab/0x590 [ 114.773980][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.780053][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 114.787243][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 114.793303][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 114.800321][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 114.805517][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 114.811315][ C0] __hrtimer_run_queues+0x51c/0xc30 [ 114.816528][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 114.822241][ C0] ? read_tsc+0x9/0x20 [ 114.826313][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 114.831421][ C0] handle_softirqs+0x22b/0x7c0 [ 114.836184][ C0] ? __irq_exit_rcu+0x60/0x150 [ 114.840949][ C0] __irq_exit_rcu+0x60/0x150 [ 114.845534][ C0] irq_exit_rcu+0x9/0x30 [ 114.849763][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 114.855387][ C0] [ 114.858312][ C0] [ 114.861231][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 114.867200][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x8/0x70 [ 114.873262][ C0] Code: 8b 3d 54 fe d9 0b 48 89 de 5b e9 b3 fb 5a 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 0c 25 08 10 80 92 65 8b 15 58 18 bf 10 81 e2 00 01 ff 00 [ 114.892866][ C0] RSP: 0018:ffffc90003e4f520 EFLAGS: 00000246 [ 114.898932][ C0] RAX: ffffffff81f97a04 RBX: ffffffff81f978dc RCX: 0000000000000002 [ 114.906895][ C0] RDX: ffff888024f49e80 RSI: 0000000000000001 RDI: 0000000000000002 [ 114.914860][ C0] RBP: 0000000000000001 R08: ffffea0001dcbbb7 R09: 1ffffd40003b9776 [ 114.922826][ C0] R10: dffffc0000000000 R11: fffff940003b9777 R12: dffffc0000000000 [ 114.930793][ C0] R13: dffffc0000000000 R14: ffffea0001dcbbb4 R15: 0000000000000003 [ 114.938765][ C0] ? folio_try_get+0x1c/0x340 [ 114.943442][ C0] ? folio_try_get+0x144/0x340 [ 114.948202][ C0] folio_try_get+0x144/0x340 [ 114.952785][ C0] next_uptodate_folio+0xcb/0x5d0 [ 114.957805][ C0] filemap_map_pages+0x14d7/0x1fd0 [ 114.962922][ C0] ? filemap_map_pages+0x160/0x1fd0 [ 114.968115][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.973570][ C0] ? ___pte_offset_map+0x29/0x240 [ 114.978594][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 114.984043][ C0] ? do_pte_missing+0x11a9/0x3330 [ 114.989054][ C0] do_pte_missing+0x20b0/0x3330 [ 114.993907][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 114.998844][ C0] handle_mm_fault+0x1b26/0x32b0 [ 115.003773][ C0] ? __pte_offset_map_lock+0x13e/0x210 [ 115.009236][ C0] ? handle_mm_fault+0xdb/0x32b0 [ 115.014174][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 115.019472][ C0] ? follow_page_pte+0x7ef/0x13e0 [ 115.024518][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 115.029821][ C0] __get_user_pages+0x1650/0x29f0 [ 115.034872][ C0] populate_vma_page_range+0x29f/0x3a0 [ 115.040331][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 115.046311][ C0] ? down_read+0x274/0x2e0 [ 115.050723][ C0] ? __mm_populate+0x160/0x380 [ 115.055482][ C0] __mm_populate+0x24c/0x380 [ 115.060070][ C0] ? __pfx___mm_populate+0x10/0x10 [ 115.065182][ C0] vm_mmap_pgoff+0x387/0x4d0 [ 115.069770][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 115.074870][ C0] ? exc_page_fault+0x71/0xd0 [ 115.079541][ C0] ? ksys_mmap_pgoff+0xf4/0x760 [ 115.084387][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 115.089144][ C0] do_syscall_64+0xec/0xf80 [ 115.093634][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.099691][ C0] ? trace_irq_disable+0x37/0x100 [ 115.104718][ C0] ? clear_bhb_loop+0x60/0xb0 [ 115.109390][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.115272][ C0] RIP: 0033:0x7f7bd258f749 [ 115.119684][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.139289][ C0] RSP: 002b:00007f7bd33ca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 115.147700][ C0] RAX: ffffffffffffffda RBX: 00007f7bd27e6090 RCX: 00007f7bd258f749 [ 115.155665][ C0] RDX: 000000000000000a RSI: 0000000000b36000 RDI: 0000200000000000 [ 115.163621][ C0] RBP: 00007f7bd2613f91 R08: ffffffffffffffff R09: 000000005cac3000 [ 115.171579][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 115.179535][ C0] R13: 00007f7bd27e6128 R14: 00007f7bd27e6090 R15: 00007fff4f632c28 [ 115.187511][ C0] [ 115.190857][ C0] Kernel Offset: disabled [ 115.195162][ C0] Rebooting in 86400 seconds..