last executing test programs: 1.843233651s ago: executing program 4 (id=213): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.628255627s ago: executing program 4 (id=219): r0 = socket$caif_seqpacket(0x25, 0x5, 0x5) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f00000002c0)="44d90d6ba6702c374cdf641226531c0b23c3ef978dd67c147036d3d0d34a7523f5193b4b7e3b6cd460bba473393a6558324958c49f0a6c6442ebe042df974bdc3348ab0fb6570bda1411588366f63389f580b2cd530993075db19431c08bdd099626ce6166650db6d6cdbc4a63e27f79a5261f2de645b7155aa7901369ce5cf75094ee09d96feacc744eb582ba474c63effd28d17c6549ac3b23add3935dc3f91c2ae32c463d8898bbe2a6b4b532568e9f26eb75e8a6e47d78a487088b711ed56aa44f63754a6e8be7d877de3090067abaaa61b6c5cfd70b71558fc49ce2ad718456f186e5c298760e3e1ca46a2ae5013ed2057ea23c8680", 0xf8) 1.323358861s ago: executing program 4 (id=224): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000003c80)="f5", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000019c0)="04d8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000002dc0)="bffd1de783843c877f23ccd041f679f7145c9e836214a9c9b3e04847d1b1aaaa52caea14454f250804b7a155f2146237e6cee337c01c319b81b0853488934701ccc00fcfc241f732eb75efff64c493d20e9df8e3ab0b10bb4f1e4e610cd46aef7cb72123cca44ad8874636b63231c246a9ad13abdd76de82e40323b216315c130f614fcddcf6b70059f12728c12e20696f5589d2906d562152d278885a8445254ac7e50538ae86b47c263f6eb6537591a017f8ae6878fc374a91fb997d59c390d9053d5886204b24", 0xc8}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x4, 0x8011) recvmmsg(r0, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001c80)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) 1.217111377s ago: executing program 1 (id=228): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000001000)=ANY=[@ANYBLOB="01000000020800000100000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64, @ANYRES64=0x0, @ANYBLOB="0300004001"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x200060d0) 1.130978296s ago: executing program 3 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 1.088752504s ago: executing program 2 (id=231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r2, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000000250300000000000008"], 0x80}}, 0x0) 1.049858736s ago: executing program 1 (id=232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) r2 = socket(0x400000000010, 0x3, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x480) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_bpf={{0x8}, {0x14, 0x2, [@TCA_BPF_FD={0x8, 0x6, r1}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 975.369489ms ago: executing program 0 (id=233): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x129}, &(0x7f00000001c0)=0x8) 936.320618ms ago: executing program 3 (id=234): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) 924.663529ms ago: executing program 2 (id=235): unshare(0x24060400) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000280), 0x4) 843.298073ms ago: executing program 0 (id=236): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1_virt_wifi\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x7fff, 0x1, 0xa, 0x9, 0xa4, 0xffb, 0x7, 0xb6b, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x6, 0x7, 0x4009, 0x0, 0x4, 0x400, 0x8, 0x752, 0x2, 0x3, 0x0, 0x10000, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffbff, 0x2, 0xfffffffe, 0x2, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x5908, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x4, 0x5, 0x8, 0x0, 0x2, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010141}, {0x2, 0x4a24, @remote}, {0x2, 0x4e21, @multicast1}, 0x149, 0x0, 0x0, 0x0, 0x8, 0x0, 0x21e, 0x1ff, 0x9}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 791.095281ms ago: executing program 2 (id=237): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0xfff}}, 0x3c) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[], 0x0) 767.783725ms ago: executing program 3 (id=238): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000080)=0x5) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x10, 0x0, 0x4, 0x43, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x0, 0x0, 0x6}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="6a6f8e5e", 0x4}], 0x2}, 0x0) 687.286981ms ago: executing program 1 (id=239): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xa}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000000}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x40000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x2f}, 0x94) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 630.11917ms ago: executing program 1 (id=240): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, '-'}]}, 0x24}}, 0x48000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 563.989174ms ago: executing program 2 (id=241): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005cc0)=[{&(0x7f0000001380)=ANY=[], 0x38}], 0x1, 0x0, 0x0, 0x44011}, 0x4001) 495.371421ms ago: executing program 0 (id=242): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00810000007f00000001000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32], 0x48) 469.377565ms ago: executing program 3 (id=243): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, 0x4, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) 425.826802ms ago: executing program 1 (id=244): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x4c, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c8c1}, 0x0) 359.357707ms ago: executing program 2 (id=245): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000002060101000000000000000000000000050001000700000009000200"], 0x64}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 348.374837ms ago: executing program 4 (id=246): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x67b}, 0x1c) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x18, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000840) 343.875992ms ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x1c) 219.388128ms ago: executing program 3 (id=248): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 219.208159ms ago: executing program 4 (id=249): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x10003}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80000002}], 0x4, 0x0, 0x0) 183.413611ms ago: executing program 1 (id=250): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 183.168062ms ago: executing program 0 (id=251): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000580)=[{&(0x7f0000001180)="15a2da46d8347a6de4c4ef6d820c79ef4d95aec6f2c3cf29b24add008a8375f0c3d446d094ef791620e3013906350558495a4255af5695cc962310321a7004b802d6f79a44e7", 0x46}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/70, 0x46}], 0x1}, 0x4c2103a0) 109.034041ms ago: executing program 2 (id=252): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x262f41, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffff7}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 35.316739ms ago: executing program 3 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x800007d}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa8}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 6.725799ms ago: executing program 0 (id=254): r0 = socket(0x10, 0x80003, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'erspan0\x00', 0x0}) 0s ago: executing program 4 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000010028bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="6cf2040094980000140003006e657464657673696d3000000000000034001680300001"], 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 66.586470][ T5853] cgroup: Unknown subsys name 'net' [ 66.735131][ T5853] cgroup: Unknown subsys name 'cpuset' [ 66.743519][ T5853] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 68.173989][ T5853] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.548801][ T5869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.557352][ T5869] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.572724][ T5869] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.578281][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.582361][ T5869] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.588354][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.603418][ T5869] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.612671][ T5869] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.621005][ T5869] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.629308][ T5869] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.629448][ T5874] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.646119][ T5874] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.656178][ T5869] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.664799][ T5874] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.673775][ T5874] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.710440][ T5874] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.724461][ T5874] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.745595][ T5874] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.758161][ T5874] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.768326][ T5874] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.790083][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.798968][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 70.807285][ T5870] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.815947][ T5870] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.824572][ T5870] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.253175][ T5872] chnl_net:caif_netlink_parms(): no params data found [ 71.365027][ T5863] chnl_net:caif_netlink_parms(): no params data found [ 71.449693][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.456254][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.510456][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 71.539674][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.547756][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.555623][ T5872] bridge_slave_0: entered allmulticast mode [ 71.563729][ T5872] bridge_slave_0: entered promiscuous mode [ 71.591790][ T5875] chnl_net:caif_netlink_parms(): no params data found [ 71.615813][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.623222][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.630374][ T5872] bridge_slave_1: entered allmulticast mode [ 71.638779][ T5872] bridge_slave_1: entered promiscuous mode [ 71.783865][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.806463][ T5863] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.813726][ T5863] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.820862][ T5863] bridge_slave_0: entered allmulticast mode [ 71.828301][ T5863] bridge_slave_0: entered promiscuous mode [ 71.867528][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.888724][ T5863] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.896124][ T5863] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.904387][ T5863] bridge_slave_1: entered allmulticast mode [ 71.911350][ T5863] bridge_slave_1: entered promiscuous mode [ 71.944577][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.951743][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.961577][ T5864] bridge_slave_0: entered allmulticast mode [ 71.970815][ T5864] bridge_slave_0: entered promiscuous mode [ 72.031249][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.038828][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.046425][ T5864] bridge_slave_1: entered allmulticast mode [ 72.053643][ T5864] bridge_slave_1: entered promiscuous mode [ 72.063247][ T5872] team0: Port device team_slave_0 added [ 72.071694][ T5863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.086625][ T5875] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.093782][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.100989][ T5875] bridge_slave_0: entered allmulticast mode [ 72.108952][ T5875] bridge_slave_0: entered promiscuous mode [ 72.130356][ T5872] team0: Port device team_slave_1 added [ 72.138449][ T5863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.151683][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 72.168474][ T5875] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.176061][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.183846][ T5875] bridge_slave_1: entered allmulticast mode [ 72.190913][ T5875] bridge_slave_1: entered promiscuous mode [ 72.269787][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.293521][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.301084][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.328078][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.364088][ T5875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.376576][ T5875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.387553][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.412740][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.419877][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.446040][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.458592][ T5863] team0: Port device team_slave_0 added [ 72.467350][ T5863] team0: Port device team_slave_1 added [ 72.540834][ T5864] team0: Port device team_slave_0 added [ 72.549773][ T5864] team0: Port device team_slave_1 added [ 72.569592][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.576596][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.603012][ T5863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.628620][ T5875] team0: Port device team_slave_0 added [ 72.642804][ T5874] Bluetooth: hci0: command tx timeout [ 72.667023][ T5863] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.674733][ T5863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.701446][ T5863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.722489][ T5874] Bluetooth: hci2: command tx timeout [ 72.722496][ T5870] Bluetooth: hci1: command tx timeout [ 72.736998][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.744961][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.752405][ T5880] bridge_slave_0: entered allmulticast mode [ 72.759433][ T5880] bridge_slave_0: entered promiscuous mode [ 72.768394][ T5875] team0: Port device team_slave_1 added [ 72.802030][ T5874] Bluetooth: hci3: command tx timeout [ 72.803898][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.816374][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.842720][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.854739][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.861699][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.887874][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.899565][ T5874] Bluetooth: hci4: command tx timeout [ 72.907577][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.915338][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.922897][ T5880] bridge_slave_1: entered allmulticast mode [ 72.929897][ T5880] bridge_slave_1: entered promiscuous mode [ 72.949861][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.956888][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.983107][ T5875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.050278][ T5875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.057377][ T5875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.083998][ T5875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.101058][ T5872] hsr_slave_0: entered promiscuous mode [ 73.108069][ T5872] hsr_slave_1: entered promiscuous mode [ 73.131227][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.156843][ T5863] hsr_slave_0: entered promiscuous mode [ 73.163517][ T5863] hsr_slave_1: entered promiscuous mode [ 73.169513][ T5863] debugfs: 'hsr0' already exists in 'hsr' [ 73.175465][ T5863] Cannot create hsr debugfs directory [ 73.184090][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.283486][ T5864] hsr_slave_0: entered promiscuous mode [ 73.290035][ T5864] hsr_slave_1: entered promiscuous mode [ 73.296340][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 73.302348][ T5864] Cannot create hsr debugfs directory [ 73.331753][ T5875] hsr_slave_0: entered promiscuous mode [ 73.338516][ T5875] hsr_slave_1: entered promiscuous mode [ 73.345054][ T5875] debugfs: 'hsr0' already exists in 'hsr' [ 73.350883][ T5875] Cannot create hsr debugfs directory [ 73.392839][ T5880] team0: Port device team_slave_0 added [ 73.436513][ T5880] team0: Port device team_slave_1 added [ 73.545524][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.552766][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.579154][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.640325][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.647350][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.673821][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.908777][ T5880] hsr_slave_0: entered promiscuous mode [ 73.916102][ T5880] hsr_slave_1: entered promiscuous mode [ 73.922724][ T5880] debugfs: 'hsr0' already exists in 'hsr' [ 73.928473][ T5880] Cannot create hsr debugfs directory [ 74.062165][ T5863] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.076373][ T5863] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.107226][ T5863] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.135770][ T5863] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.242130][ T5872] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.257286][ T5872] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.268089][ T5872] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.293199][ T5872] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.380075][ T5875] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.391603][ T5875] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.413462][ T5875] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.424565][ T5875] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.531608][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.562566][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.574345][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.626142][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.646094][ T5863] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.688324][ T5880] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.699533][ T5880] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.721519][ T5872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.723907][ T5874] Bluetooth: hci0: command tx timeout [ 74.738389][ T5880] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.748439][ T5880] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.802791][ T5874] Bluetooth: hci1: command tx timeout [ 74.802817][ T5870] Bluetooth: hci2: command tx timeout [ 74.809900][ T5863] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.850033][ T5872] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.863941][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.871201][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.882110][ T5870] Bluetooth: hci3: command tx timeout [ 74.889230][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.896415][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.927423][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.934599][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.949975][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.957185][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.965517][ T5870] Bluetooth: hci4: command tx timeout [ 75.049744][ T5875] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.125678][ T5875] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.139639][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.146821][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.161664][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.207604][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.214901][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.234154][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.265559][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.280476][ T1103] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.287661][ T1103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.371292][ T1103] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.378483][ T1103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.412794][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.453987][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.461166][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.505924][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.513115][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.677550][ T5872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.787731][ T5863] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.844425][ T5872] veth0_vlan: entered promiscuous mode [ 75.873492][ T5872] veth1_vlan: entered promiscuous mode [ 75.985645][ T5863] veth0_vlan: entered promiscuous mode [ 76.030742][ T5872] veth0_macvtap: entered promiscuous mode [ 76.053616][ T5875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.065462][ T5863] veth1_vlan: entered promiscuous mode [ 76.085097][ T5872] veth1_macvtap: entered promiscuous mode [ 76.151811][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.179575][ T5872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.210493][ T5863] veth0_macvtap: entered promiscuous mode [ 76.249787][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.279031][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.288209][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309223][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.316814][ T5863] veth1_macvtap: entered promiscuous mode [ 76.324519][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.357353][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.376099][ T5875] veth0_vlan: entered promiscuous mode [ 76.428899][ T5875] veth1_vlan: entered promiscuous mode [ 76.441456][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.456065][ T5863] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.486759][ T2913] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.528686][ T2913] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.541778][ T2913] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.597133][ T2913] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.636504][ T5875] veth0_macvtap: entered promiscuous mode [ 76.673602][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.681554][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.704839][ T5875] veth1_macvtap: entered promiscuous mode [ 76.721405][ T5880] veth0_vlan: entered promiscuous mode [ 76.788665][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.803999][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.809156][ T5870] Bluetooth: hci0: command tx timeout [ 76.818603][ T5880] veth1_vlan: entered promiscuous mode [ 76.883106][ T5870] Bluetooth: hci2: command tx timeout [ 76.886060][ T5874] Bluetooth: hci1: command tx timeout [ 76.910699][ T5872] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.920477][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.970580][ T5874] Bluetooth: hci3: command tx timeout [ 76.976523][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.989248][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.008176][ T5864] veth0_vlan: entered promiscuous mode [ 77.028624][ T5875] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.042328][ T5874] Bluetooth: hci4: command tx timeout [ 77.059527][ T5880] veth0_macvtap: entered promiscuous mode [ 77.105500][ T5880] veth1_macvtap: entered promiscuous mode [ 77.132002][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.159259][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.159808][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.177464][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.183488][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.203739][ T5864] veth1_vlan: entered promiscuous mode [ 77.223004][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.267472][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281102][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312148][ T5864] veth0_macvtap: entered promiscuous mode [ 77.374681][ T2964] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.412590][ T2964] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.444776][ T5864] veth1_macvtap: entered promiscuous mode [ 77.459903][ T3492] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.468835][ T5984] Zero length message leads to an empty skb [ 77.547865][ T5987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9'. [ 77.575961][ T3492] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.643083][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.701058][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.789399][ T3492] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.852467][ T3492] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.872451][ T3492] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897650][ T3492] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.925884][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.943338][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.062177][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.070066][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.079267][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.107334][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.204662][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.228854][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.272795][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.286261][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.379453][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.420995][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.893222][ T5874] Bluetooth: hci0: command tx timeout [ 78.900512][ T6043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5'. [ 78.962350][ T5874] Bluetooth: hci2: command tx timeout [ 78.968367][ T5870] Bluetooth: hci1: command tx timeout [ 79.042203][ T5874] Bluetooth: hci3: command tx timeout [ 79.122519][ T5874] Bluetooth: hci4: command tx timeout [ 79.727733][ T6080] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.730385][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.3.31'. [ 79.861468][ T6076] can: request_module (can-proto-4) failed. [ 80.159143][ T6099] netlink: 16 bytes leftover after parsing attributes in process `syz.0.35'. [ 80.352274][ T6111] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.416520][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.465475][ T982] IPVS: starting estimator thread 0... [ 80.485415][ T6112] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 80.512091][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.541751][ T6120] netlink: 248 bytes leftover after parsing attributes in process `syz.1.41'. [ 80.541878][ T6112] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 80.577999][ T6111] netlink: 236 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.586137][ T6125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.42'. [ 80.591186][ T6120] NCSI netlink: No device for ifindex 0 [ 80.599701][ T6118] IPVS: using max 30 ests per chain, 72000 per kthread [ 80.630130][ T6123] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.641277][ T6112] netlink: 'syz.2.38': attribute type 2 has an invalid length. [ 80.641588][ T6111] netlink: 236 bytes leftover after parsing attributes in process `syz.2.38'. [ 80.669579][ T6114] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 80.677980][ T6114] netlink: 'syz.2.38': attribute type 1 has an invalid length. [ 80.692166][ T6125] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 80.769706][ T6114] netlink: 'syz.2.38': attribute type 2 has an invalid length. [ 80.932427][ T6138] syz.4.46 uses obsolete (PF_INET,SOCK_PACKET) [ 80.984626][ T6138] veth1_macvtap: entered allmulticast mode [ 82.355621][ T6206] Unsupported ieee802154 address type: 0 [ 82.936399][ T6230] __nla_validate_parse: 6 callbacks suppressed [ 82.936418][ T6230] netlink: 60 bytes leftover after parsing attributes in process `syz.4.70'. [ 83.058368][ T6246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 83.332493][ T6262] netlink: 'syz.2.78': attribute type 1 has an invalid length. [ 83.340267][ T6262] netlink: 'syz.2.78': attribute type 3 has an invalid length. [ 83.357233][ T6262] netlink: 224 bytes leftover after parsing attributes in process `syz.2.78'. [ 83.498438][ T6275] netlink: 'syz.2.81': attribute type 2 has an invalid length. [ 83.518238][ T6272] netlink: 10 bytes leftover after parsing attributes in process `syz.0.80'. [ 83.531711][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 83.541391][ T6272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.80'. [ 83.740912][ T6284] bridge1: entered allmulticast mode [ 84.040755][ T6302] IPv6: sit1: Disabled Multicast RS [ 84.057593][ T6302] sit1: entered allmulticast mode [ 84.194406][ T6312] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 84.206287][ T6306] tipc: Enabling of bearer rejected, failed to enable media [ 84.217823][ T6309] netlink: 224 bytes leftover after parsing attributes in process `syz.0.90'. [ 84.229103][ T6312] netlink: 28 bytes leftover after parsing attributes in process `syz.2.92'. [ 84.249978][ T6312] ipvlan0: entered promiscuous mode [ 84.264399][ T6312] ipvlan0: entered allmulticast mode [ 84.278601][ T6312] veth0_vlan: entered allmulticast mode [ 84.388570][ T6310] netlink: 212316 bytes leftover after parsing attributes in process `syz.3.89'. [ 84.442783][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.93'. [ 84.818807][ T6344] only policy match revision 0 supported [ 84.818827][ T6344] unable to load match [ 84.945180][ T6350] block nbd0: not configured, cannot reconfigure [ 85.117282][ T6355] tipc: Enabling of bearer rejected, failed to enable media [ 86.416374][ T6410] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 86.635161][ T6412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.820199][ T10] cfg80211: failed to load regulatory.db [ 87.554375][ T6469] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 87.589839][ T6469] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 87.639105][ T6472] unknown channel width for channel at 909000KHz? [ 87.794187][ T6481] validate_nla: 2 callbacks suppressed [ 87.794206][ T6481] netlink: 'syz.1.138': attribute type 29 has an invalid length. [ 87.829535][ T6481] netlink: 'syz.1.138': attribute type 29 has an invalid length. [ 87.938148][ T6486] unsupported nla_type 58 [ 88.115802][ T6498] __nla_validate_parse: 8 callbacks suppressed [ 88.115820][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 88.154669][ T6498] netlink: 28 bytes leftover after parsing attributes in process `syz.3.143'. [ 88.176285][ T6502] warning: `syz.4.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.130097][ T6544] netlink: 20 bytes leftover after parsing attributes in process `syz.0.165'. [ 89.333855][ T6552] netlink: 148 bytes leftover after parsing attributes in process `syz.0.169'. [ 89.793965][ T6561] netlink: 'syz.3.173': attribute type 29 has an invalid length. [ 89.808173][ T6561] netlink: 'syz.3.173': attribute type 29 has an invalid length. [ 90.248988][ T6572] netlink: 64 bytes leftover after parsing attributes in process `syz.2.178'. [ 90.310203][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 90.434010][ T6578] netlink: 112 bytes leftover after parsing attributes in process `syz.1.181'. [ 90.473041][ T6581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.183'. [ 90.936468][ T6601] lo: entered promiscuous mode [ 90.948491][ T6601] lo: entered allmulticast mode [ 90.982880][ T6601] tunl0: entered promiscuous mode [ 90.988054][ T6601] tunl0: entered allmulticast mode [ 91.006204][ T6605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.194'. [ 91.010576][ T6601] gre0: entered promiscuous mode [ 91.047111][ T6601] gre0: entered allmulticast mode [ 91.077810][ T6601] gretap0: entered promiscuous mode [ 91.101948][ T6601] gretap0: entered allmulticast mode [ 91.116921][ T6601] erspan0: entered promiscuous mode [ 91.138795][ T6601] erspan0: entered allmulticast mode [ 91.159156][ T6601] ip_vti0: entered promiscuous mode [ 91.159720][ T6612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.196'. [ 91.182501][ T6601] ip_vti0: entered allmulticast mode [ 91.198132][ T6601] ip6_vti0: entered promiscuous mode [ 91.204205][ T6601] ip6_vti0: entered allmulticast mode [ 91.210784][ T6601] sit0: entered promiscuous mode [ 91.216208][ T6601] sit0: entered allmulticast mode [ 91.223747][ T6601] ip6tnl0: entered promiscuous mode [ 91.229040][ T6601] ip6tnl0: entered allmulticast mode [ 91.236242][ T6601] ip6gre0: entered promiscuous mode [ 91.241595][ T6601] ip6gre0: entered allmulticast mode [ 91.249067][ T6601] syz_tun: entered promiscuous mode [ 91.260367][ T6601] syz_tun: entered allmulticast mode [ 91.268316][ T6601] ip6gretap0: entered promiscuous mode [ 91.280923][ T6601] ip6gretap0: entered allmulticast mode [ 91.297615][ T6601] bridge0: entered promiscuous mode [ 91.308894][ T6601] bridge0: entered allmulticast mode [ 91.315450][ T6601] bond0: entered promiscuous mode [ 91.320681][ T6601] bond_slave_0: entered promiscuous mode [ 91.335189][ T6601] bond_slave_1: entered promiscuous mode [ 91.341181][ T6601] bond0: entered allmulticast mode [ 91.346922][ T6601] bond_slave_0: entered allmulticast mode [ 91.353970][ T6601] bond_slave_1: entered allmulticast mode [ 91.363066][ T6601] team0: entered promiscuous mode [ 91.368274][ T6601] team_slave_0: entered promiscuous mode [ 91.374583][ T6601] team_slave_1: entered promiscuous mode [ 91.380466][ T6601] team0: entered allmulticast mode [ 91.386537][ T6601] team_slave_0: entered allmulticast mode [ 91.392442][ T6601] team_slave_1: entered allmulticast mode [ 91.398933][ T6601] dummy0: entered promiscuous mode [ 91.404351][ T6601] dummy0: entered allmulticast mode [ 91.410998][ T6601] nlmon0: entered promiscuous mode [ 91.416488][ T6601] nlmon0: entered allmulticast mode [ 91.423294][ T6601] caif0: entered promiscuous mode [ 91.428411][ T6601] caif0: entered allmulticast mode [ 91.433959][ T6601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 91.891571][ T6634] tipc: Started in network mode [ 91.956982][ T6634] tipc: Node identity ac14140f, cluster identity 4711 [ 91.982433][ T6634] tipc: New replicast peer: 255.255.255.255 [ 91.997535][ T6634] tipc: Enabled bearer , priority 7 [ 92.403648][ T6661] sctp: [Deprecated]: syz.2.216 (pid 6661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 92.403648][ T6661] Use struct sctp_sack_info instead [ 93.124043][ T5968] tipc: Node number set to 2886997007 [ 93.326225][ T6702] syzkaller1: entered promiscuous mode [ 93.347407][ T6702] syzkaller1: entered allmulticast mode [ 93.396892][ T6704] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 93.481289][ T6704] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 93.493490][ T6704] team0: Failed to send options change via netlink (err -105) [ 93.501806][ T6704] team0: Port device netdevsim0 added [ 93.534237][ T13] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 93.784797][ T6722] __nla_validate_parse: 7 callbacks suppressed [ 93.784815][ T6722] netlink: 60 bytes leftover after parsing attributes in process `syz.2.245'. [ 93.995579][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.035446][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.119359][ T6737] tipc: Started in network mode [ 94.128467][ T49] ------------[ cut here ]------------ [ 94.134332][ T49] WARNING: CPU: 1 PID: 49 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x3ca/0x440 [ 94.144072][ T49] Modules linked in: [ 94.148325][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 94.157779][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.166941][ T6741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.255'. [ 94.168564][ T49] Workqueue: cfg80211 cfg80211_event_work [ 94.183124][ T49] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 94.189334][ T49] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 c6 e6 f6 90 0f 0b 90 eb bd e8 07 c6 e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 f7 c5 e6 f6 90 0f 0b 90 e9 de fd [ 94.209107][ T49] RSP: 0018:ffffc90000b978e0 EFLAGS: 00010293 [ 94.215350][ T49] RAX: ffffffff8ad8e849 RBX: dffffc0000000000 RCX: ffff88801e2c9e00 [ 94.224510][ T49] RDX: 0000000000000000 RSI: ffffffff8d9b8b9f RDI: ffffffff8be33880 [ 94.225610][ T6737] tipc: Node identity de18d361561e, cluster identity 3142 [ 94.233479][ T49] RBP: ffffc90000b979b0 R08: ffffffff8fa39637 R09: 1ffffffff1f472c6 [ 94.241052][ T6737] tipc: Enabled bearer , priority 0 [ 94.248398][ T49] R10: dffffc0000000000 R11: fffffbfff1f472c7 R12: ffff88805609cd90 [ 94.248418][ T49] R13: 1ffff92000172f24 R14: ffff888027943338 R15: 0000000000000006 [ 94.248431][ T49] FS: 0000000000000000(0000) GS:ffff888125d18000(0000) knlGS:0000000000000000 [ 94.248447][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.248459][ T49] CR2: 00007f8cfb3746a0 CR3: 0000000031b62000 CR4: 00000000003526f0 [ 94.248475][ T49] Call Trace: [ 94.256029][ T6741] netlink: 44 bytes leftover after parsing attributes in process `syz.4.255'. [ 94.263201][ T49] [ 94.263216][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.263249][ T49] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 94.263287][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 94.263310][ T49] cfg80211_process_wdev_events+0x38a/0x4f0 [ 94.263344][ T49] cfg80211_process_rdev_events+0xa1/0x110 [ 94.263367][ T49] cfg80211_event_work+0x31/0x70 [ 94.263390][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 94.263409][ T49] process_scheduled_works+0xae1/0x17b0 [ 94.263460][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.263497][ T49] worker_thread+0x8a0/0xda0 [ 94.263535][ T49] kthread+0x70e/0x8a0 [ 94.263558][ T49] ? __pfx_worker_thread+0x10/0x10 [ 94.320229][ T6737] syzkaller0: entered promiscuous mode [ 94.322168][ T49] ? __pfx_kthread+0x10/0x10 [ 94.322202][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.322225][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.322247][ T49] ? __pfx_kthread+0x10/0x10 [ 94.322266][ T49] ret_from_fork+0x3fc/0x770 [ 94.322289][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 94.322314][ T49] ? __switch_to_asm+0x39/0x70 [ 94.322334][ T49] ? __switch_to_asm+0x33/0x70 [ 94.322360][ T49] ? __pfx_kthread+0x10/0x10 [ 94.322380][ T49] ret_from_fork_asm+0x1a/0x30 [ 94.322418][ T49] [ 94.322438][ T49] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 94.322456][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 94.322476][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.322488][ T49] Workqueue: cfg80211 cfg80211_event_work [ 94.322512][ T49] Call Trace: [ 94.322521][ T49] [ 94.322528][ T49] dump_stack_lvl+0x99/0x250 [ 94.322548][ T49] ? __asan_memcpy+0x40/0x70 [ 94.322568][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 94.322587][ T49] ? __pfx__printk+0x10/0x10 [ 94.322623][ T49] vpanic+0x281/0x750 [ 94.322642][ T49] ? __pfx__printk+0x10/0x10 [ 94.322663][ T49] ? __pfx_vpanic+0x10/0x10 [ 94.322682][ T49] ? is_bpf_text_address+0x26/0x2b0 [ 94.322717][ T49] panic+0xb9/0xc0 [ 94.322736][ T49] ? __pfx_panic+0x10/0x10 [ 94.322771][ T49] __warn+0x31b/0x4b0 [ 94.322788][ T49] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 94.322813][ T49] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 94.322835][ T49] report_bug+0x2be/0x4f0 [ 94.322855][ T49] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 94.322874][ T49] ? __cfg80211_ibss_joined+0x3ca/0x440 [ 94.322892][ T49] ? __cfg80211_ibss_joined+0x3cc/0x440 [ 94.322908][ T49] handle_bug+0x84/0x160 [ 94.322926][ T49] exc_invalid_op+0x1a/0x50 [ 94.322942][ T49] asm_exc_invalid_op+0x1a/0x20 [ 94.322959][ T49] RIP: 0010:__cfg80211_ibss_joined+0x3ca/0x440 [ 94.322980][ T49] Code: 00 00 00 75 69 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 c6 e6 f6 90 0f 0b 90 eb bd e8 07 c6 e6 f6 90 <0f> 0b 90 4c 8b 6c 24 18 eb ad e8 f7 c5 e6 f6 90 0f 0b 90 e9 de fd [ 94.322993][ T49] RSP: 0018:ffffc90000b978e0 EFLAGS: 00010293 [ 94.323009][ T49] RAX: ffffffff8ad8e849 RBX: dffffc0000000000 RCX: ffff88801e2c9e00 [ 94.323021][ T49] RDX: 0000000000000000 RSI: ffffffff8d9b8b9f RDI: ffffffff8be33880 [ 94.323031][ T49] RBP: ffffc90000b979b0 R08: ffffffff8fa39637 R09: 1ffffffff1f472c6 [ 94.323043][ T49] R10: dffffc0000000000 R11: fffffbfff1f472c7 R12: ffff88805609cd90 [ 94.323055][ T49] R13: 1ffff92000172f24 R14: ffff888027943338 R15: 0000000000000006 [ 94.323075][ T49] ? __cfg80211_ibss_joined+0x3c9/0x440 [ 94.323104][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.323130][ T49] ? __pfx___cfg80211_ibss_joined+0x10/0x10 [ 94.323155][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 94.323176][ T49] cfg80211_process_wdev_events+0x38a/0x4f0 [ 94.323206][ T49] cfg80211_process_rdev_events+0xa1/0x110 [ 94.323228][ T49] cfg80211_event_work+0x31/0x70 [ 94.323249][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 94.323265][ T49] process_scheduled_works+0xae1/0x17b0 [ 94.323311][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 94.323344][ T49] worker_thread+0x8a0/0xda0 [ 94.323398][ T49] kthread+0x70e/0x8a0 [ 94.323421][ T49] ? __pfx_worker_thread+0x10/0x10 [ 94.323438][ T49] ? __pfx_kthread+0x10/0x10 [ 94.323459][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 94.323479][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 94.323499][ T49] ? __pfx_kthread+0x10/0x10 [ 94.323520][ T49] ret_from_fork+0x3fc/0x770 [ 94.323540][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 94.323567][ T49] ? __switch_to_asm+0x39/0x70 [ 94.323587][ T49] ? __switch_to_asm+0x33/0x70 [ 94.323604][ T49] ? __pfx_kthread+0x10/0x10 [ 94.323625][ T49] ret_from_fork_asm+0x1a/0x30 [ 94.323660][ T49] [ 94.328207][ T49] Kernel Offset: disabled