last executing test programs: 1.191498522s ago: executing program 1 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082900fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.15749478s ago: executing program 4 (id=1919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000070a050000000000000000000a0040010900010073797a31000000000900020073797a32000000000c000340"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x4004014) 1.139164136s ago: executing program 0 (id=1920): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) 1.054344053s ago: executing program 2 (id=1921): unshare(0x400) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(r1, r0, 0x0, 0x7) 995.713748ms ago: executing program 0 (id=1922): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80800) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 985.423496ms ago: executing program 4 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 976.608183ms ago: executing program 1 (id=1924): r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendto(r0, 0x0, 0x0, 0x4000810, &(0x7f00000008c0)=@nl=@unspec={0x0, 0x700, 0x0, 0xfdff}, 0x80) 926.552911ms ago: executing program 2 (id=1925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) 854.25141ms ago: executing program 4 (id=1926): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0xec, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0xcc, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0x2, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @local}]}, @AF_INET={0x30, 0x2, 0x0, 0x1, {0x4, 0x1, 0x0, 0x1, [{0x3}, {0x8}, {0x4}, {0x8}, {0x8}]}}, @AF_INET={0x18, 0x2, 0x0, 0x1, {0x14, 0x1, 0x0, 0x1, [{0x11}, {0x8}]}}, @AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_INET6={0x0, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_TOKEN={0x0, 0x7, @dev}, @IFLA_INET6_TOKEN={0x0, 0x7, @mcast2}, @IFLA_INET6_TOKEN={0x0, 0x7, @rand_addr=' \x01\x00'}, @IFLA_INET6_TOKEN={0x0, 0x7, @private1}, @IFLA_INET6_ADDR_GEN_MODE, @IFLA_INET6_ADDR_GEN_MODE]}, @AF_MPLS={0x4}]}]}, 0xec}}, 0x0) 847.787244ms ago: executing program 0 (id=1927): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000100)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@igmp={{0xd, 0x4, 0x1, 0x6, 0x14, 0x68, 0x0, 0xff, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}, {[@rr={0x7, 0x1f, 0x8b, [@private=0xa010102, @multicast2, @rand_addr=0x64010102, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @multicast2]}]}}, {0x14, 0x1, 0x0, @local}}}, 0x4a) 824.863473ms ago: executing program 1 (id=1928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff56}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r1) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="31032abd7000fbdbdf250b"], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 726.081469ms ago: executing program 3 (id=1929): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x4e21, 0x0, 0xa}, {0x76, 0x328, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x73a, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x2, 0x2}, {{@in=@empty, 0xffffffff, 0x32}, 0x2, @in6=@local, 0x1504, 0x4, 0x3, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 714.550027ms ago: executing program 2 (id=1930): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x1, 0x88, 0x5, {}, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x1, 0x1}, 0x1, 0x3}}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000800) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x2, 0x890, 0x5, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x30, 0x2, 0x0, 0x0, "ed123b3e9d19472738566ae7b93330fbba371b4d9ee6d5e062e7c412578f7825acea5cfd3b8a153e3ca2be105f7cd4190be1d3813630d3964cad9b502c74cf6f"}}, 0x80}, 0x1, 0x0, 0x0, 0x20080810}, 0x80) 633.275906ms ago: executing program 3 (id=1931): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in6={{0xa, 0x4e22, 0x7, @empty}}, 0x6, 0xffff, 0x81, 0x693fffd, 0xf0, 0x9}, &(0x7f0000000380)=0x9c) 629.812622ms ago: executing program 4 (id=1932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004780)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="32a4", 0x2}], 0x1, 0x0, 0x0, 0x4800}], 0x1, 0x80) 573.920001ms ago: executing program 1 (id=1933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x3, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 474.536087ms ago: executing program 0 (id=1934): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x8, @remote, 0xf}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff810000400e227f000001925aa80020007b00090080007f000006e809000000ff0000e03ac71002000000ffffffff0000000200"/88, 0x58}], 0x1) 473.791894ms ago: executing program 3 (id=1935): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000004d00)='f', 0x1}], 0x1}}], 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r2, 0x1}, 0x8) 461.044985ms ago: executing program 4 (id=1936): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000780)) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000240)=ANY=[], 0xc) 439.015987ms ago: executing program 2 (id=1937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 319.750511ms ago: executing program 1 (id=1938): socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast, @loopback}, "bf7c08000000b16c"}}}}}, 0x0) 319.460523ms ago: executing program 0 (id=1939): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 305.736114ms ago: executing program 2 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000001c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "a59c00", "71061734a02cbe0647238c81f23ec29398c67f271139db7c2f9f13cb25109968"}}}}}}}, 0x6e) 302.596279ms ago: executing program 3 (id=1941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000600b500c9020000060012000000fb8c0a000600ffffffffffff00001c0081"], 0x60}}, 0x0) 179.184694ms ago: executing program 3 (id=1942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="b70000000000000007000000000000009500e200000000001e5286574356940658273ad1326fc65be4b1037a74cfb5af100fc4e94d123d9b22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe68fe46421a161eedd1a5cee316f68f7617859f06c8efd5da6abe446649c322209b1af93c6c999058168ad0a70992124d19c7c9cc22ff9a6b1a058039ab938480e8697f8715bcb18e1fd0773909464a783148e0e7b604a6c47b33c43a3ffff92ec8bbde1af40f29cfcf0836a70a2f6b1192ab8f24ca363492393e1c2a3b190180caafbf8cfca720074bdcc7cbd978efd8404a1c700000000d97899514e64e36cad5eba82010b2d149ac02e5f07000000000000000000000000000000000000000000009d5df0e0dbb9821d9c5402474d5866ce5eb60188d83ac741b45aeacac594cf09de9b460f48b96ae8a0eead478e46c8ca3e4c5d2b3cb4ad48c830e8003c45f5b2dcbf36b7e8be59ca4b46266cf75bea8a22ab71895d954dc6d28864144c73391770690a9301cde97565d509effc252599b26555355d7955f551df82ea475a711ec56d00000000a89c7533c9955fd63cd00cb83d1228"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x6}]}, 0x10) 114.544622ms ago: executing program 1 (id=1943): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x98, r1, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4b, 0xe, {{{}, {}, @broadcast, @device_a, @random="f744783da2a9"}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6c, 0xa5}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x21, 0x68}}, @void}}, @NL80211_ATTR_IE={0x4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HIDDEN_SSID={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x98}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 95.116191ms ago: executing program 0 (id=1944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052", 0x33}, {&(0x7f0000000280)="0000000000000076a3f386dbe93b81", 0xf}], 0x2) 14.205875ms ago: executing program 3 (id=1945): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) 13.039131ms ago: executing program 2 (id=1946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf04000000e4ffffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="040013000a0006000802110000010000060010008005000006001200010000000400ac000500c2"], 0x48}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 0s ago: executing program 4 (id=1947): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffff010000000000000000850000002c00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r1, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd82, &(0x7f0000000880)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tipc_packet={0x5, 0x6, '@QL', 0xd4c, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[@dstopts={0x32}, @hopopts={0x0, 0x11, '\x00', [@pad1, @pad1, @hao={0xc9, 0x10, @mcast2}, @jumbo={0xc2, 0x4, 0x8001}, @pad1, @generic={0x40, 0x66, "cc08734dc4110c8c659d5b444b40da312ad2db693fa840202ffbe610bc36972e347651079fb40fb4e11cb67ae398e8aeeb2f37397e7b69e91df45eff92a0cceecbc91d752a098dd7127de990c7b21ffa842ccfb97f5c8d5d15e4d93560c25252a8177ddc0345"}]}, @dstopts={0x21, 0x176, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @enc_lim, @generic={0x2, 0xb9a, "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"}]}], @name_distributor={{0xec, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x4, 0x0, 0x4e21, 0x4e21, 0x0, 0x1}, [{0x5, 0x3, 0x5be2, 0x10000, 0x6, 0x0, 0xa, 0x400}, {0x3, 0x3, 0x6, 0x9, 0x9, 0x1, 0x2, 0xcf59}, {0x0, 0x5, 0x401, 0x8000, 0x3, 0x5, 0x5, 0x3}, {0x400, 0x849, 0x5, 0x1ff, 0x3ff, 0x9, 0xf, 0x800}, {0x80000001, 0x8, 0x7ff, 0x8000, 0x3, 0xa7, 0x1, 0x5}, {0x9, 0x800, 0x5, 0x6, 0x5, 0x80000001, 0xf, 0x7}, {0xb, 0x5, 0xc4a, 0x2, 0x3, 0x2, 0xa, 0x7}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 82.084882][ T5813] cgroup: Unknown subsys name 'net' [ 82.216513][ T5813] cgroup: Unknown subsys name 'cpuset' [ 82.225401][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.851315][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.368713][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.377492][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.385804][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.394051][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.402319][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.481479][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.492694][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.500716][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.509043][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.517599][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.572335][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.580593][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.588268][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.597960][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.605735][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.658696][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.667339][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.677661][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.685883][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.694505][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.703204][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.719077][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.730804][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.739601][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.749695][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.337721][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.364989][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 87.673976][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 87.691182][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.760528][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.769043][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.777255][ T5823] bridge_slave_0: entered allmulticast mode [ 87.784796][ T5823] bridge_slave_0: entered promiscuous mode [ 87.799151][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.806393][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.813686][ T5823] bridge_slave_1: entered allmulticast mode [ 87.821186][ T5823] bridge_slave_1: entered promiscuous mode [ 87.859877][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.895717][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.903289][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.910531][ T5827] bridge_slave_0: entered allmulticast mode [ 87.918138][ T5827] bridge_slave_0: entered promiscuous mode [ 87.973278][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.980422][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.988229][ T5827] bridge_slave_1: entered allmulticast mode [ 87.995639][ T5827] bridge_slave_1: entered promiscuous mode [ 88.035802][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.085826][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.116604][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.174641][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.213460][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.220579][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.228189][ T5834] bridge_slave_0: entered allmulticast mode [ 88.236473][ T5834] bridge_slave_0: entered promiscuous mode [ 88.263361][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.270615][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.278044][ T5830] bridge_slave_0: entered allmulticast mode [ 88.285527][ T5830] bridge_slave_0: entered promiscuous mode [ 88.295135][ T5823] team0: Port device team_slave_0 added [ 88.300852][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.308223][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.315467][ T5830] bridge_slave_1: entered allmulticast mode [ 88.323155][ T5830] bridge_slave_1: entered promiscuous mode [ 88.342487][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.349633][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.357040][ T5834] bridge_slave_1: entered allmulticast mode [ 88.364563][ T5834] bridge_slave_1: entered promiscuous mode [ 88.400617][ T5823] team0: Port device team_slave_1 added [ 88.461464][ T5827] team0: Port device team_slave_0 added [ 88.482874][ T5837] Bluetooth: hci0: command tx timeout [ 88.485263][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.512045][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.519343][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.526648][ T5833] bridge_slave_0: entered allmulticast mode [ 88.533972][ T5833] bridge_slave_0: entered promiscuous mode [ 88.544001][ T5827] team0: Port device team_slave_1 added [ 88.549724][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.556985][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.564289][ T5837] Bluetooth: hci1: command tx timeout [ 88.570524][ T5833] bridge_slave_1: entered allmulticast mode [ 88.578828][ T5833] bridge_slave_1: entered promiscuous mode [ 88.586851][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.593941][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.620177][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.634936][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.644164][ T5837] Bluetooth: hci2: command tx timeout [ 88.662587][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.698849][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.705971][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.732018][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.757959][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.802594][ T52] Bluetooth: hci3: command tx timeout [ 88.802601][ T5836] Bluetooth: hci4: command tx timeout [ 88.826130][ T5830] team0: Port device team_slave_0 added [ 88.845345][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.852578][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.878789][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.893244][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.905632][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.916817][ T5830] team0: Port device team_slave_1 added [ 88.924814][ T5834] team0: Port device team_slave_0 added [ 88.942979][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.949972][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.976215][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.014087][ T5834] team0: Port device team_slave_1 added [ 89.082837][ T5823] hsr_slave_0: entered promiscuous mode [ 89.089301][ T5823] hsr_slave_1: entered promiscuous mode [ 89.097327][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.104583][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.131097][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.146393][ T5833] team0: Port device team_slave_0 added [ 89.167754][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.174812][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.201143][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.213013][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.219987][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.246297][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.266742][ T5833] team0: Port device team_slave_1 added [ 89.273703][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.280657][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.306993][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.453802][ T5827] hsr_slave_0: entered promiscuous mode [ 89.460312][ T5827] hsr_slave_1: entered promiscuous mode [ 89.466984][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 89.472870][ T5827] Cannot create hsr debugfs directory [ 89.479160][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.486302][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.512654][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.555875][ T5834] hsr_slave_0: entered promiscuous mode [ 89.562752][ T5834] hsr_slave_1: entered promiscuous mode [ 89.568871][ T5834] debugfs: 'hsr0' already exists in 'hsr' [ 89.574696][ T5834] Cannot create hsr debugfs directory [ 89.582282][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.589260][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.615637][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.645367][ T5830] hsr_slave_0: entered promiscuous mode [ 89.652096][ T5830] hsr_slave_1: entered promiscuous mode [ 89.658230][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 89.664206][ T5830] Cannot create hsr debugfs directory [ 89.887372][ T5833] hsr_slave_0: entered promiscuous mode [ 89.893885][ T5833] hsr_slave_1: entered promiscuous mode [ 89.900085][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 89.906134][ T5833] Cannot create hsr debugfs directory [ 90.298108][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.317635][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.343605][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.359832][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.421688][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.435990][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.455602][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.489987][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.556265][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.563215][ T52] Bluetooth: hci0: command tx timeout [ 90.589375][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.600473][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.612537][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.647781][ T52] Bluetooth: hci1: command tx timeout [ 90.707804][ T5827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.719781][ T5827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.728431][ T52] Bluetooth: hci2: command tx timeout [ 90.748354][ T5827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.779200][ T5827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.857096][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.871655][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.882844][ T52] Bluetooth: hci4: command tx timeout [ 90.888502][ T5837] Bluetooth: hci3: command tx timeout [ 90.903784][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.929616][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.975931][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.988441][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.076704][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.095772][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.116639][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.123891][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.139665][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.146894][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.168549][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.175694][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.200664][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.207852][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.286117][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.299618][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.374556][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.386618][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.404189][ T5823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.444491][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.451684][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.484912][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.492581][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.537927][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.545219][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.571180][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.578400][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.603350][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.687913][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.720269][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.727491][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.821306][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.828520][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.875068][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.928855][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.020190][ T9] cfg80211: failed to load regulatory.db [ 92.158326][ T5823] veth0_vlan: entered promiscuous mode [ 92.220073][ T5830] veth0_vlan: entered promiscuous mode [ 92.251386][ T5823] veth1_vlan: entered promiscuous mode [ 92.279342][ T5830] veth1_vlan: entered promiscuous mode [ 92.335868][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.396045][ T5830] veth0_macvtap: entered promiscuous mode [ 92.405292][ T5823] veth0_macvtap: entered promiscuous mode [ 92.426583][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.437411][ T5830] veth1_macvtap: entered promiscuous mode [ 92.446767][ T5823] veth1_macvtap: entered promiscuous mode [ 92.506617][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.544377][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.556060][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.602838][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.617446][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.626769][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.639812][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.653167][ T5834] veth0_vlan: entered promiscuous mode [ 92.653299][ T5837] Bluetooth: hci0: command tx timeout [ 92.689803][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.698951][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.724024][ T5837] Bluetooth: hci1: command tx timeout [ 92.762278][ T392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.785753][ T5834] veth1_vlan: entered promiscuous mode [ 92.812989][ T5837] Bluetooth: hci2: command tx timeout [ 92.825763][ T392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.892490][ T392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.918443][ T392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.946515][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.955617][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.964398][ T5837] Bluetooth: hci3: command tx timeout [ 92.969846][ T5837] Bluetooth: hci4: command tx timeout [ 93.007102][ T5834] veth0_macvtap: entered promiscuous mode [ 93.017425][ T5827] veth0_vlan: entered promiscuous mode [ 93.037524][ T5827] veth1_vlan: entered promiscuous mode [ 93.049814][ T5834] veth1_macvtap: entered promiscuous mode [ 93.078121][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.085264][ T5833] veth0_vlan: entered promiscuous mode [ 93.100462][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.131390][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.152558][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.175323][ T5833] veth1_vlan: entered promiscuous mode [ 93.184730][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.193726][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.209600][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.256545][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.275001][ T5827] veth0_macvtap: entered promiscuous mode [ 93.275857][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.291958][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.316200][ T5827] veth1_macvtap: entered promiscuous mode [ 93.331063][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.344488][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.360334][ T5833] veth0_macvtap: entered promiscuous mode [ 93.405861][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.478493][ T5833] veth1_macvtap: entered promiscuous mode [ 93.496159][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.528436][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.604009][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.611352][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641889][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.650676][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.723381][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.860319][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.876804][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.887601][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.965258][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.018959][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.034883][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.052638][ T392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.061070][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.069726][ T392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.092908][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.146482][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.258409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.280822][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.400076][ T5960] vlan2: entered allmulticast mode [ 94.438524][ T5960] bridge0: port 3(vlan2) entered blocking state [ 94.452186][ T5960] bridge0: port 3(vlan2) entered disabled state [ 94.498571][ T5964] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.504010][ T5960] vlan2: entered promiscuous mode [ 94.650835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.668666][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.723280][ T5837] Bluetooth: hci0: command tx timeout [ 94.802430][ T5837] Bluetooth: hci1: command tx timeout [ 94.855209][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.863599][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.885312][ T5837] Bluetooth: hci2: command tx timeout [ 95.045446][ T5837] Bluetooth: hci3: command tx timeout [ 95.045460][ T52] Bluetooth: hci4: command tx timeout [ 95.070099][ T5982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 95.848806][ T6008] syzkaller1: entered promiscuous mode [ 95.872732][ T6008] syzkaller1: entered allmulticast mode [ 95.959611][ T6012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.32'. [ 96.306044][ T6017] syz.1.35 uses obsolete (PF_INET,SOCK_PACKET) [ 96.825697][ T6033] tipc: Started in network mode [ 96.831066][ T6033] tipc: Node identity 4, cluster identity 4711 [ 96.844202][ T6033] tipc: Node number set to 4 [ 98.724772][ T6082] Illegal XDP return value 4294967274 on prog (id 17) dev syz_tun, expect packet loss! [ 99.635389][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.377880][ T6202] ip6gretap0: entered promiscuous mode [ 101.386533][ T6202] macsec1: entered promiscuous mode [ 101.393184][ T6202] macsec1: entered allmulticast mode [ 101.398753][ T6202] ip6gretap0: entered allmulticast mode [ 101.626260][ T6211] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.108'. [ 102.546519][ T6254] syzkaller1: entered promiscuous mode [ 102.565674][ T6254] syzkaller1: entered allmulticast mode [ 102.758004][ T5934] IPVS: starting estimator thread 0... [ 102.769386][ T6265] tipc: Enabled bearer , priority 10 [ 102.862001][ T6266] IPVS: using max 27 ests per chain, 64800 per kthread [ 103.365676][ T6287] Bluetooth: MGMT ver 1.23 [ 103.630917][ T6297] syzkaller1: entered promiscuous mode [ 103.654403][ T6297] syzkaller1: entered allmulticast mode [ 104.120657][ T6314] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 104.266538][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880239eb000: rx timeout, send abort [ 104.276196][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880239eb000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 104.580176][ T6325] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 104.600708][ T6325] netlink: 'syz.1.158': attribute type 2 has an invalid length. [ 104.623047][ T6325] netlink: 23 bytes leftover after parsing attributes in process `syz.1.158'. [ 104.842965][ T6331] Bluetooth: MGMT ver 1.23 [ 105.312296][ T6342] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.325886][ T6344] netlink: 'syz.0.165': attribute type 29 has an invalid length. [ 105.369767][ T6344] netlink: 'syz.0.165': attribute type 29 has an invalid length. [ 105.421362][ T6347] netlink: 500 bytes leftover after parsing attributes in process `syz.0.165'. [ 106.203115][ T6368] erspan0: entered promiscuous mode [ 106.212704][ T6369] Bluetooth: MGMT ver 1.23 [ 106.246312][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 106.652376][ T6380] batadv_slave_1: entered promiscuous mode [ 106.670834][ T6379] batadv_slave_1: left promiscuous mode [ 108.392401][ T6416] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 108.473107][ T6419] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 108.801220][ T6416] team0: Port device dummy0 added [ 108.843621][ T6419] team0: Port device dummy0 removed [ 108.858724][ T6419] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 109.562748][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 109.609744][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.209'. [ 109.841508][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.213'. [ 110.048938][ T6454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 110.091815][ T6454] netlink: 'syz.1.217': attribute type 2 has an invalid length. [ 110.183126][ T6460] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.218'. [ 110.201463][ T6457] syz_tun: entered allmulticast mode [ 110.243764][ T6457] netlink: 'syz.3.220': attribute type 39 has an invalid length. [ 110.328218][ T6457] syz_tun (unregistering): left allmulticast mode [ 111.010001][ T6489] Bluetooth: MGMT ver 1.23 [ 111.060885][ T6491] netlink: 23 bytes leftover after parsing attributes in process `syz.2.236'. [ 111.118707][ T6493] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.235'. [ 111.924670][ T6521] syzkaller1: entered promiscuous mode [ 111.966624][ T6521] syzkaller1: entered allmulticast mode [ 112.100397][ T6529] netlink: 32 bytes leftover after parsing attributes in process `syz.0.254'. [ 112.177681][ T6527] syzkaller1: entered promiscuous mode [ 112.198292][ T6527] syzkaller1: entered allmulticast mode [ 112.494828][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 113.298233][ T6573] netlink: 64 bytes leftover after parsing attributes in process `syz.4.274'. [ 113.593938][ T6584] bond0: ARP target 170.170.170.170 is already present [ 113.600886][ T6584] bond0: option arp_ip_target: invalid value (2863311530) [ 113.716777][ T6588] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 113.922005][ T6594] Zero length message leads to an empty skb [ 114.962161][ T6641] __nla_validate_parse: 3 callbacks suppressed [ 114.962181][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.304'. [ 115.019488][ T6641] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.027713][ T6641] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.258907][ T6651] warning: `syz.2.307' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.735794][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.319'. [ 115.756979][ T6673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.841369][ T6673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.889270][ T5934] IPVS: starting estimator thread 0... [ 116.992300][ T6714] IPVS: using max 26 ests per chain, 62400 per kthread [ 117.364756][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.345'. [ 117.376823][ T6735] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.384609][ T6735] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.620560][ T6773] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.363'. [ 119.971258][ T6823] block nbd2: NBD_DISCONNECT [ 120.810957][ T6846] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 120.812198][ T6844] IPVS: stopping master sync thread 6846 ... [ 121.055799][ T6855] syzkaller1: entered promiscuous mode [ 121.070563][ T6855] syzkaller1: entered allmulticast mode [ 121.240921][ T6866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.404'. [ 121.250970][ T6866] netlink: 'syz.4.404': attribute type 7 has an invalid length. [ 121.266653][ T6866] netlink: 'syz.4.404': attribute type 8 has an invalid length. [ 121.291874][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.404'. [ 121.314911][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.405'. [ 121.477458][ T6874] syzkaller1: entered promiscuous mode [ 121.497253][ T6874] syzkaller1: entered allmulticast mode [ 121.838540][ T6891] syzkaller1: entered promiscuous mode [ 121.857839][ T6891] syzkaller1: entered allmulticast mode [ 123.895245][ T6961] netlink: 'syz.4.445': attribute type 29 has an invalid length. [ 123.929277][ T6961] netlink: 'syz.4.445': attribute type 29 has an invalid length. [ 123.946303][ T6965] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 123.955915][ T6961] netlink: 44 bytes leftover after parsing attributes in process `syz.4.445'. [ 123.965518][ T6965] netlink: 'syz.3.447': attribute type 3 has an invalid length. [ 123.974410][ T6965] netlink: 'syz.3.447': attribute type 1 has an invalid length. [ 123.991886][ T6965] netlink: 140 bytes leftover after parsing attributes in process `syz.3.447'. [ 125.693122][ T7031] netlink: 'syz.2.479': attribute type 4 has an invalid length. [ 125.704640][ T7033] batadv_slave_0: entered promiscuous mode [ 125.736573][ T7033] batadv_slave_0: left promiscuous mode [ 125.981401][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.486'. [ 126.443790][ T7069] netlink: 'syz.1.496': attribute type 1 has an invalid length. [ 127.012667][ T7090] netlink: 'syz.2.506': attribute type 11 has an invalid length. [ 127.029288][ T7092] netlink: 'syz.0.507': attribute type 9 has an invalid length. [ 127.061167][ T7092] netlink: 8 bytes leftover after parsing attributes in process `syz.0.507'. [ 127.094246][ T7092] hsr0: entered promiscuous mode [ 127.100165][ T7092] macvlan2: entered promiscuous mode [ 127.106455][ T7092] macvlan2: entered allmulticast mode [ 127.113531][ T7092] hsr0: entered allmulticast mode [ 127.118807][ T7092] hsr_slave_0: entered allmulticast mode [ 127.146603][ T7092] hsr_slave_1: entered allmulticast mode [ 127.381658][ T7103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.512'. [ 127.614940][ T7109] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 128.102178][ T7129] syzkaller1: entered promiscuous mode [ 128.107737][ T7129] syzkaller1: entered allmulticast mode [ 128.777193][ T7167] netlink: 116 bytes leftover after parsing attributes in process `syz.0.538'. [ 129.233859][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 129.258771][ T7188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.547'. [ 130.070935][ T7221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.222050][ T7221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.372030][ T7225] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 130.673899][ T7237] netlink: 'syz.2.568': attribute type 11 has an invalid length. [ 130.732659][ T7237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.568'. [ 130.876750][ T7247] syzkaller1: entered promiscuous mode [ 130.921552][ T7247] syzkaller1: entered allmulticast mode [ 131.541390][ T7279] netlink: 20 bytes leftover after parsing attributes in process `syz.4.586'. [ 132.061423][ T7297] netlink: 48 bytes leftover after parsing attributes in process `syz.1.595'. [ 132.713670][ T7327] syzkaller1: entered promiscuous mode [ 132.731916][ T7327] syzkaller1: entered allmulticast mode [ 132.966127][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.973071][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.016781][ T7343] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.615'. [ 133.144324][ T7347] batadv_slave_1: entered promiscuous mode [ 133.162505][ T7346] batadv_slave_1: left promiscuous mode [ 134.095307][ T7390] netlink: 136 bytes leftover after parsing attributes in process `syz.1.637'. [ 134.153964][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 134.215771][ T7394] gtp0: entered promiscuous mode [ 134.241367][ T7394] gtp0: entered allmulticast mode [ 134.509773][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.647'. [ 134.521365][ T7415] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.648'. [ 134.540336][ T7411] pim6reg1: entered allmulticast mode [ 135.187148][ T7446] netlink: 'syz.3.660': attribute type 3 has an invalid length. [ 135.459487][ T7454] erspan0: left promiscuous mode [ 135.486256][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.538604][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.598411][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 135.701156][ T7462] syzkaller1: entered promiscuous mode [ 135.727775][ T7462] syzkaller1: entered allmulticast mode [ 136.241140][ T7459] infiniband syz2: set down [ 136.266834][ T7490] dvmrp6: entered allmulticast mode [ 136.271797][ T7459] infiniband syz2: added ip6_vti0 [ 136.293609][ T982] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.324045][ T7459] syz2: rxe_create_cq: returned err = -12 [ 136.330143][ T7459] infiniband syz2: Couldn't create ib_mad CQ [ 136.346866][ T7459] infiniband syz2: Couldn't open port 1 [ 136.440914][ T7498] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 136.501641][ T7459] RDS/IB: syz2: added [ 136.519801][ T7459] smc: adding ib device syz2 with port count 1 [ 136.542108][ T7459] smc: ib device syz2 port 1 has no pnetid [ 136.550145][ T982] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.570173][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 136.966005][ T7518] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.694'. [ 137.217387][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 137.439422][ T7535] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.701'. [ 137.978881][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 138.028886][ T7550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.707'. [ 138.418166][ T7568] netlink: 36 bytes leftover after parsing attributes in process `syz.1.714'. [ 138.832354][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.400008][ T7459] ip6_vti0 speed is unknown, defaulting to 1000 [ 139.816151][ T7617] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 139.823003][ T7617] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 140.110237][ T7624] netlink: 'syz.1.730': attribute type 5 has an invalid length. [ 140.161357][ T7628] netlink: 16 bytes leftover after parsing attributes in process `syz.2.731'. [ 140.313814][ T7631] netlink: 'syz.1.733': attribute type 1 has an invalid length. [ 140.342103][ T7631] netlink: 'syz.1.733': attribute type 2 has an invalid length. [ 140.442897][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.736'. [ 141.955561][ T7683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.757'. [ 143.156666][ T7725] netlink: 360 bytes leftover after parsing attributes in process `syz.3.775'. [ 144.972772][ T7796] netlink: 36 bytes leftover after parsing attributes in process `syz.1.805'. [ 145.060369][ T7801] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 145.144682][ T7801] bond1: entered promiscuous mode [ 145.178079][ T7801] 8021q: adding VLAN 0 to HW filter on device bond1 [ 145.388547][ T7805] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.404966][ T7805] bond1: (slave bond2): making interface the new active one [ 145.413060][ T7805] bond2: entered promiscuous mode [ 145.420782][ T7805] bond1: (slave bond2): Enslaving as an active interface with an up link [ 146.463060][ T7874] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.838'. [ 146.677120][ T5837] Bluetooth: hci4: link tx timeout [ 146.683330][ T5837] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.693894][ T52] Bluetooth: hci4: link tx timeout [ 146.699137][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.707193][ T52] Bluetooth: hci4: link tx timeout [ 146.712491][ T52] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 146.925762][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.848'. [ 147.133570][ T7907] netlink: 'syz.2.853': attribute type 30 has an invalid length. [ 147.611533][ T7929] lo: entered allmulticast mode [ 147.652897][ T7929] lo: left allmulticast mode [ 148.722038][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 149.196314][ T7993] netlink: 104 bytes leftover after parsing attributes in process `syz.4.893'. [ 149.349881][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 149.388249][ T8001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 149.421971][ T8001] macvlan0: entered allmulticast mode [ 149.432010][ T8001] veth1_vlan: entered allmulticast mode [ 149.764602][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.906'. [ 149.990182][ T8030] netlink: 4 bytes leftover after parsing attributes in process `syz.2.911'. [ 150.686913][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.0.926'. [ 152.316872][ T8145] netlink: 'syz.2.963': attribute type 39 has an invalid length. [ 152.870396][ T8171] netlink: 'syz.0.978': attribute type 12 has an invalid length. [ 153.000215][ T8177] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.982'. [ 154.979616][ T8262] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 155.297455][ T8277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 155.448438][ T8284] bridge_slave_0: left allmulticast mode [ 155.481009][ T8286] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1031'. [ 155.487388][ T8284] bridge_slave_0: left promiscuous mode [ 155.519611][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.536299][ T8284] bridge_slave_1: left allmulticast mode [ 155.542871][ T8284] bridge_slave_1: left promiscuous mode [ 155.548776][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.584677][ T8284] bond0: (slave bond_slave_0): Releasing backup interface [ 155.618289][ T8284] bond0: (slave bond_slave_1): Releasing backup interface [ 155.645462][ T8284] team0: Port device team_slave_0 removed [ 155.671431][ T8284] team0: Port device team_slave_1 removed [ 155.683697][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 155.691237][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.701078][ T8284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 155.708956][ T8284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.719551][ T8284] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 156.178346][ T8314] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1041'. [ 156.439076][ T8316] team0 (unregistering): Port device team_slave_0 removed [ 156.453008][ T8316] team0 (unregistering): Port device team_slave_1 removed [ 156.689926][ T8334] tipc: Enabling of bearer rejected, failed to enable media [ 157.143631][ T8360] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1064'. [ 157.154957][ T8360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1064'. [ 157.179583][ T8360] vlan3: entered promiscuous mode [ 157.184962][ T8360] bond0: entered promiscuous mode [ 157.191180][ T8360] bond_slave_0: entered promiscuous mode [ 157.197665][ T8360] bond_slave_1: entered promiscuous mode [ 157.252734][ T8362] netlink: 428 bytes leftover after parsing attributes in process `syz.2.1065'. [ 157.273401][ T8362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1065'. [ 157.416419][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1069'. [ 157.621088][ T30] audit: type=1800 audit(1763554516.899:2): pid=8381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1073" name=CB dev="tmpfs" ino=1216 res=0 errno=0 [ 157.834008][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1076'. [ 157.976916][ T8389] bond0: (slave bond_slave_1): Releasing backup interface [ 158.163037][ T8406] pimreg: entered allmulticast mode [ 158.187039][ T8406] pimreg: left allmulticast mode [ 158.482912][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 159.483244][ T8457] syzkaller1: entered promiscuous mode [ 159.488870][ T8457] syzkaller1: entered allmulticast mode [ 159.961048][ T8475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1116'. [ 160.947291][ T8507] netlink: 'syz.2.1130': attribute type 4 has an invalid length. [ 161.321205][ T5887] IPVS: starting estimator thread 0... [ 161.378196][ T8533] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1137'. [ 161.421858][ T8531] IPVS: using max 27 ests per chain, 64800 per kthread [ 161.536109][ T8541] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 161.837510][ T8554] ip6_vti0 speed is unknown, defaulting to 1000 [ 162.351215][ T8566] syzkaller1: entered promiscuous mode [ 162.362097][ T8566] syzkaller1: entered allmulticast mode [ 163.928743][ T9] IPVS: starting estimator thread 0... [ 164.016666][ T8608] xt_hashlimit: size too large, truncated to 1048576 [ 164.024620][ T8604] IPVS: using max 29 ests per chain, 69600 per kthread [ 164.259395][ T8618] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1172'. [ 164.697026][ T8634] trusted_key: syz.4.1178 sent an empty control message without MSG_MORE. [ 166.038295][ T8694] pimreg: entered allmulticast mode [ 166.126610][ T8694] pimreg: left allmulticast mode [ 166.847281][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 167.149665][ T8748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1225'. [ 167.608974][ T8767] netlink: 'syz.3.1235': attribute type 12 has an invalid length. [ 167.813111][ T8778] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1239'. [ 167.988203][ T24] IPVS: starting estimator thread 0... [ 168.101947][ T8789] IPVS: using max 31 ests per chain, 74400 per kthread [ 168.354562][ T8794] netlink: 'syz.2.1246': attribute type 1 has an invalid length. [ 169.615779][ T8856] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1276'. [ 169.836660][ T8868] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1282'. [ 169.857873][ T8869] netlink: 'syz.4.1283': attribute type 4 has an invalid length. [ 169.895651][ T8868] bond1: Invalid ad_actor_system MAC address. [ 169.911860][ T8868] bond1: option ad_actor_system: invalid value (7) [ 169.925254][ T8868] bond1 (unregistering): Released all slaves [ 170.323498][ T8894] nbd: device at index 1 is going down [ 170.576355][ T5945] udevd[5945]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 170.959558][ T8930] syzkaller1: entered promiscuous mode [ 170.971267][ T8930] syzkaller1: entered allmulticast mode [ 171.367083][ T8947] sctp: [Deprecated]: syz.4.1314 (pid 8947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.367083][ T8947] Use struct sctp_sack_info instead [ 171.968750][ T8965] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1323'. [ 172.389348][ T8985] veth0: entered promiscuous mode [ 172.396094][ T8982] veth0: left promiscuous mode [ 172.842141][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1342'. [ 173.383925][ T9026] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1353'. [ 173.717352][ T9042] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1361'. [ 173.780975][ T9046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1363'. [ 173.811883][ T9046] netlink: 'syz.1.1363': attribute type 21 has an invalid length. [ 173.865982][ T9050] netlink: 'syz.0.1365': attribute type 2 has an invalid length. [ 174.474282][ T9081] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1377'. [ 174.688458][ T9086] ieee802154 phy0 wpan0: encryption failed: -22 [ 175.036726][ T9102] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1389'. [ 175.557841][ T9120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 175.604629][ T9120] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 175.642044][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1399'. [ 175.662125][ T9125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1399'. [ 176.743209][ T9176] netlink: 'syz.1.1424': attribute type 4 has an invalid length. [ 177.150118][ T9198] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1436'. [ 177.563623][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1446'. [ 177.737343][ T9223] bond1: option ad_actor_sys_prio: invalid value (0) [ 177.750779][ T9223] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 177.774816][ T9223] bond1 (unregistering): Released all slaves [ 178.073037][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 178.250545][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1459'. [ 179.551392][ T9314] macvlan1: entered promiscuous mode [ 179.580733][ T9314] ipvlan0: entered promiscuous mode [ 179.597677][ T9314] ipvlan0: left promiscuous mode [ 179.613315][ T9314] macvlan1: left promiscuous mode [ 180.131242][ T9341] pim6reg1: entered promiscuous mode [ 180.136800][ T9341] pim6reg1: entered allmulticast mode [ 180.774239][ T9372] ªªªªªª: renamed from wg2 (while UP) [ 180.944188][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1520'. [ 181.076444][ T9387] bridge_slave_0: default FDB implementation only supports local addresses [ 181.457632][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 181.772588][ T9422] syzkaller1: entered promiscuous mode [ 181.782332][ T9422] syzkaller1: entered allmulticast mode [ 181.991959][ T9439] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1548'. [ 182.315860][ T9457] dummy0: entered promiscuous mode [ 182.321538][ T9457] dummy0: left promiscuous mode [ 182.405396][ T9465] netlink: 'syz.3.1560': attribute type 3 has an invalid length. [ 182.429773][ T9465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1560'. [ 182.810692][ T9493] netlink: 'syz.4.1571': attribute type 6 has an invalid length. [ 183.294234][ T9518] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1582'. [ 183.325805][ T9518] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 183.536571][ T9526] netlink: 'syz.3.1586': attribute type 2 has an invalid length. [ 183.767242][ T9534] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.962637][ T9545] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0xe [ 184.001674][ T9511] delete_channel: no stack [ 184.030809][ T9547] tipc: Started in network mode [ 184.037340][ T9547] tipc: Node identity ff75, cluster identity 4711 [ 184.044731][ T9547] tipc: Enabling of bearer rejected, failed to enable media [ 184.181948][ T9549] ip6_vti0 speed is unknown, defaulting to 1000 [ 184.460312][ T9570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1605'. [ 184.498417][ T9570] team_slave_0: entered promiscuous mode [ 184.504517][ T9570] team_slave_1: entered promiscuous mode [ 184.524066][ T9570] macsec1: entered promiscuous mode [ 184.536118][ T9570] team0: entered promiscuous mode [ 184.555595][ T9570] macsec1: entered allmulticast mode [ 184.572084][ T9570] team0: entered allmulticast mode [ 184.577403][ T9570] team_slave_0: entered allmulticast mode [ 184.586613][ T9570] team_slave_1: entered allmulticast mode [ 184.597490][ T9570] team0: Device macsec1 is already an upper device of the team interface [ 184.625747][ T9570] team0: left allmulticast mode [ 184.641141][ T9570] team_slave_0: left allmulticast mode [ 184.656385][ T9570] team_slave_1: left allmulticast mode [ 184.668019][ T9570] team0: left promiscuous mode [ 184.677745][ T9570] team_slave_0: left promiscuous mode [ 184.683346][ T9570] team_slave_1: left promiscuous mode [ 184.735467][ T9576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1608'. [ 184.756788][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1608'. [ 185.158864][ T9593] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1613'. [ 186.304538][ T9634] ip6_vti0 speed is unknown, defaulting to 1000 [ 187.344856][ T9673] tipc: Enabling of bearer rejected, failed to enable media [ 187.359518][ T9675] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1650'. [ 187.489621][ T9682] netlink: 566 bytes leftover after parsing attributes in process `syz.0.1652'. [ 187.509529][ T9680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1651'. [ 187.526817][ T9680] netlink: 'syz.1.1651': attribute type 5 has an invalid length. [ 187.535991][ T9680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1651'. [ 187.732268][ T9691] sctp: [Deprecated]: syz.1.1658 (pid 9691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.732268][ T9691] Use struct sctp_sack_info instead [ 187.764401][ T9691] sctp: [Deprecated]: syz.1.1658 (pid 9691) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.764401][ T9691] Use struct sctp_sack_info instead [ 187.816826][ T9] hid-generic 0005:0007:0008.0001: item fetching failed at offset 1/2 [ 187.857863][ T9] hid-generic 0005:0007:0008.0001: probe with driver hid-generic failed with error -22 [ 188.880956][ T9730] pim6reg: entered allmulticast mode [ 188.902980][ T9730] pim6reg: left allmulticast mode [ 190.167501][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1690'. [ 190.738133][ T9796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1703'. [ 190.780950][ T9796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1703'. [ 191.189419][ T9825] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1716'. [ 191.286907][ T9830] veth0: entered promiscuous mode [ 191.293288][ T9830] veth0: left promiscuous mode [ 191.481382][ T9841] netlink: 'syz.1.1724': attribute type 11 has an invalid length. [ 191.859175][ T9856] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1732'. [ 191.888700][ T9854] ip6_vti0 speed is unknown, defaulting to 1000 [ 191.907506][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 192.366582][ T9874] bond3: entered promiscuous mode [ 192.389737][ T9874] bond3: entered allmulticast mode [ 192.405846][ T9874] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.561649][ T9883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1742'. [ 192.591850][ T9883] netlink: 'syz.1.1742': attribute type 30 has an invalid length. [ 192.634188][ T9862] ip6_vti0 speed is unknown, defaulting to 1000 [ 192.653467][ T9885] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 194.407612][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.414300][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.895323][ T9936] netlink: 'syz.1.1765': attribute type 29 has an invalid length. [ 194.913833][ T9936] netlink: 'syz.1.1765': attribute type 29 has an invalid length. [ 194.932678][ T9936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1765'. [ 195.828871][ T9973] netlink: 'syz.0.1781': attribute type 4 has an invalid length. [ 196.250353][ T9998] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.1794'. [ 196.651609][T10025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 196.900113][T10044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1813'. [ 197.056599][T10052] netlink: 'syz.2.1818': attribute type 4 has an invalid length. [ 197.418076][T10068] sch_fq: defrate 2 ignored. [ 197.660632][T10073] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1826'. [ 197.988153][T10096] sock: sock_set_timeout: `syz.2.1837' (pid 10096) tries to set negative timeout [ 198.377184][T10114] smc: net device bond0 applied user defined pnetid SYZ2 [ 198.432740][T10114] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1847'. [ 198.739311][T10114] smc: removing net device bond0 with user defined pnetid SYZ2 [ 198.749595][T10138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1854'. [ 198.762771][T10114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.772152][T10114] bond_slave_0: left promiscuous mode [ 198.785774][T10114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.795348][T10114] bond_slave_1: left promiscuous mode [ 198.806084][T10114] bond0 (unregistering): Released all slaves [ 198.849206][T10127] syzkaller1: entered promiscuous mode [ 198.854876][T10127] syzkaller1: entered allmulticast mode [ 199.010813][T10140] netlink: 'syz.2.1855': attribute type 3 has an invalid length. [ 199.280819][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1862'. [ 200.737490][T10239] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 200.762642][T10239] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 200.771945][T10239] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 200.799234][T10245] syzkaller1: entered promiscuous mode [ 200.811802][T10245] syzkaller1: entered allmulticast mode [ 200.972904][T10253] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 200.995554][T10253] netlink: 'syz.2.1906': attribute type 29 has an invalid length. [ 201.320744][ T30] audit: type=1800 audit(1763554560.599:3): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1913" name="memory.events" dev="tmpfs" ino=2027 res=0 errno=0 [ 201.532410][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.540325][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.581440][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.599634][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.607850][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.615577][T10279] Dead loop on virtual device ip6_vti0, fix it urgently! [ 201.829018][T10292] sctp: [Deprecated]: syz.0.1922 (pid 10292) Use of int in maxseg socket option. [ 201.829018][T10292] Use struct sctp_assoc_value instead [ 201.955024][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1926'. [ 201.966841][T10298] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1926'. [ 202.003870][T10298] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.042442][T10301] syzkaller1: entered promiscuous mode [ 202.047994][T10301] syzkaller1: entered allmulticast mode [ 202.481115][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'. [ 202.499434][T10327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1941'. [ 202.512304][T10327] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1941'. [ 202.757681][ C0] ------------[ cut here ]------------ [ 202.763275][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 202.774212][ C0] WARNING: CPU: 0 PID: 10338 at net/mac80211/rate.c:406 __rate_control_send_low+0x5e2/0x820 [ 202.784380][ C0] Modules linked in: [ 202.788356][ C0] CPU: 0 UID: 0 PID: 10338 Comm: syz.1.1943 Not tainted syzkaller #0 PREEMPT(full) [ 202.797804][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.808023][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 202.814362][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 202.834043][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 202.840165][ C0] RAX: 1a20db73602c7200 RBX: 000000000000000c RCX: ffff8880308adac0 [ 202.848211][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 202.856251][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 202.864288][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88804b348ca8 [ 202.872412][ C0] R13: 0000000000000000 R14: ffff888056f50e80 R15: ffff888056f53138 [ 202.880423][ C0] FS: 0000000000000000(0000) GS:ffff888126138000(0000) knlGS:0000000000000000 [ 202.889437][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 202.896097][ C0] CR2: 0000001b30c17ff8 CR3: 000000007c8ea000 CR4: 00000000003526f0 [ 202.904141][ C0] Call Trace: [ 202.907454][ C0] [ 202.910349][ C0] rate_control_send_low+0x1a7/0x7b0 [ 202.915715][ C0] rate_control_get_rate+0x20b/0x5d0 [ 202.921067][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 202.926966][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 202.933382][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.938806][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 202.944609][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 202.950411][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 202.956495][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 202.962144][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 202.967758][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 202.973395][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 202.978985][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 202.984631][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 202.990142][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 202.996269][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 203.001881][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 203.009223][ C0] __iterate_interfaces+0x2ab/0x590 [ 203.014458][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 203.020545][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 203.027796][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 203.033945][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 203.041029][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 203.046322][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 203.052215][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 203.057723][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 203.063780][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 203.069514][ C0] ? read_tsc+0x9/0x20 [ 203.073662][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 203.079510][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 203.084665][ C0] handle_softirqs+0x286/0x870 [ 203.089464][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 203.094262][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 203.099576][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 203.104828][ C0] __irq_exit_rcu+0xca/0x1f0 [ 203.109453][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 203.114690][ C0] irq_exit_rcu+0x9/0x30 [ 203.118941][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 203.124612][ C0] [ 203.127595][ C0] [ 203.130528][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.136591][ C0] RIP: 0010:preempt_count_sub+0x65/0x170 [ 203.142272][ C0] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 04 8f de 10 f7 df 65 01 3d fb 8e de 10 <5b> 5d c3 cc cc cc cc cc 90 e8 1d 31 f6 02 85 c0 74 39 48 c7 c0 94 [ 203.161959][ C0] RSP: 0018:ffffc90002e07300 EFLAGS: 00000293 [ 203.168080][ C0] RAX: 0000000080000002 RBX: dffffc0000000000 RCX: 0000000000000000 [ 203.176114][ C0] RDX: 0000000000000003 RSI: ffffffff8d8f756f RDI: 00000000ffffffff [ 203.184233][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230f82a [ 203.192266][ C0] R10: dffffc0000000000 R11: fffff940002eb1f9 R12: dffffc0000000000 [ 203.200284][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fffa560 [ 203.208322][ C0] ? pfn_valid+0xba/0x490 [ 203.212711][ C0] ? pfn_valid+0xba/0x490 [ 203.217063][ C0] pfn_valid+0x3bc/0x490 [ 203.221356][ C0] page_table_check_clear+0x21/0x700 [ 203.226682][ C0] ? vm_normal_page+0x10d/0x240 [ 203.231566][ C0] unmap_page_range+0x344b/0x4370 [ 203.236665][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 203.242077][ C0] ? mas_find+0xb0e/0xd30 [ 203.246420][ C0] ? unmap_vmas+0x144/0x580 [ 203.250941][ C0] unmap_vmas+0x399/0x580 [ 203.255319][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 203.260205][ C0] exit_mmap+0x240/0xb40 [ 203.264502][ C0] ? uprobe_clear_state+0x20f/0x290 [ 203.269739][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 203.274556][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 203.280300][ C0] ? __pfx_exit_aio+0x10/0x10 [ 203.285021][ C0] ? uprobe_clear_state+0x27c/0x290 [ 203.290241][ C0] __mmput+0x118/0x430 [ 203.294367][ C0] exit_mm+0x1da/0x2c0 [ 203.298482][ C0] ? __pfx_exit_mm+0x10/0x10 [ 203.303147][ C0] ? rcu_is_watching+0x15/0xb0 [ 203.308176][ C0] do_exit+0x648/0x2300 [ 203.312380][ C0] ? do_raw_spin_lock+0x121/0x290 [ 203.317439][ C0] ? __pfx_do_exit+0x10/0x10 [ 203.322096][ C0] do_group_exit+0x21c/0x2d0 [ 203.326706][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.331937][ C0] get_signal+0x1285/0x1340 [ 203.336471][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 203.342072][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 203.348361][ C0] ? __se_sys_futex+0x36f/0x400 [ 203.353387][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 203.358883][ C0] exit_to_user_mode_loop+0x72/0x130 [ 203.364230][ C0] do_syscall_64+0x2bd/0xfa0 [ 203.368851][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 203.374102][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.380186][ C0] ? clear_bhb_loop+0x60/0xb0 [ 203.384922][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.390839][ C0] RIP: 0033:0x7fadded8f749 [ 203.395280][ C0] Code: Unable to access opcode bytes at 0x7fadded8f71f. [ 203.402341][ C0] RSP: 002b:00007faddfc060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 203.410802][ C0] RAX: fffffffffffffe00 RBX: 00007faddefe5fa8 RCX: 00007fadded8f749 [ 203.418822][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faddefe5fa8 [ 203.426840][ C0] RBP: 00007faddefe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 203.434864][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.442911][ C0] R13: 00007faddefe6038 R14: 00007ffe071eca50 R15: 00007ffe071ecb38 [ 203.450957][ C0] [ 203.454046][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 203.461348][ C0] CPU: 0 UID: 0 PID: 10338 Comm: syz.1.1943 Not tainted syzkaller #0 PREEMPT(full) [ 203.470737][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 203.480818][ C0] Call Trace: [ 203.484111][ C0] [ 203.487052][ C0] dump_stack_lvl+0x99/0x250 [ 203.491666][ C0] ? __asan_memcpy+0x40/0x70 [ 203.496282][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.501508][ C0] ? __pfx__printk+0x10/0x10 [ 203.506117][ C0] vpanic+0x237/0x6d0 [ 203.510115][ C0] ? __pfx_vpanic+0x10/0x10 [ 203.514643][ C0] panic+0xb9/0xc0 [ 203.518383][ C0] ? __pfx_panic+0x10/0x10 [ 203.522834][ C0] __warn+0x31b/0x4b0 [ 203.526837][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 203.532485][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 203.538145][ C0] report_bug+0x2be/0x4f0 [ 203.542483][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 203.548124][ C0] ? __rate_control_send_low+0x5e2/0x820 [ 203.553765][ C0] ? __rate_control_send_low+0x5e4/0x820 [ 203.559406][ C0] handle_bug+0x84/0x160 [ 203.563668][ C0] exc_invalid_op+0x1a/0x50 [ 203.568185][ C0] asm_exc_invalid_op+0x1a/0x20 [ 203.573044][ C0] RIP: 0010:__rate_control_send_low+0x5e2/0x820 [ 203.579324][ C0] Code: 38 0f b6 04 28 84 c0 0f 85 d7 01 00 00 41 8b 0f 48 c7 c7 a0 97 89 8c 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 e8 5f 37 c5 f6 90 <0f> 0b 90 90 e9 70 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c [ 203.599035][ C0] RSP: 0018:ffffc90000007538 EFLAGS: 00010246 [ 203.605119][ C0] RAX: 1a20db73602c7200 RBX: 000000000000000c RCX: ffff8880308adac0 [ 203.613100][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 203.621077][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 203.629056][ C0] R10: dffffc0000000000 R11: fffffbfff1bba684 R12: ffff88804b348ca8 [ 203.637041][ C0] R13: 0000000000000000 R14: ffff888056f50e80 R15: ffff888056f53138 [ 203.645041][ C0] ? __rate_control_send_low+0x5e1/0x820 [ 203.650709][ C0] rate_control_send_low+0x1a7/0x7b0 [ 203.656010][ C0] rate_control_get_rate+0x20b/0x5d0 [ 203.661338][ C0] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 203.667194][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 203.673559][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 203.678951][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 203.685216][ C0] ieee80211_beacon_get_ap+0x1865/0x1f30 [ 203.690893][ C0] ? __pfx_ieee80211_beacon_get_ap+0x10/0x10 [ 203.696902][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 203.702476][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 203.708044][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 203.713604][ C0] __ieee80211_beacon_get+0x118e/0x1880 [ 203.719169][ C0] ? __ieee80211_beacon_get+0x36/0x1880 [ 203.724759][ C0] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 203.730376][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 203.736514][ C0] mac80211_hwsim_beacon_tx+0x3ce/0x860 [ 203.742116][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 203.749333][ C0] __iterate_interfaces+0x2ab/0x590 [ 203.754548][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 203.760635][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 203.767845][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 203.773931][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 203.780970][ C0] mac80211_hwsim_beacon+0xbb/0x180 [ 203.786183][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 203.792093][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 203.797304][ C0] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 203.803332][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 203.809068][ C0] ? read_tsc+0x9/0x20 [ 203.813156][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 203.818981][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 203.824114][ C0] handle_softirqs+0x286/0x870 [ 203.828889][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 203.833671][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 203.838974][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 203.844277][ C0] __irq_exit_rcu+0xca/0x1f0 [ 203.848879][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 203.854100][ C0] irq_exit_rcu+0x9/0x30 [ 203.858353][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 203.864023][ C0] [ 203.866961][ C0] [ 203.869909][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.875899][ C0] RIP: 0010:preempt_count_sub+0x65/0x170 [ 203.881545][ C0] Code: ff ff ff 7f 39 cf 7f 2a 81 ff ff 00 00 00 0f 93 c1 84 c0 0f 95 c0 08 c8 74 5e 65 8b 05 04 8f de 10 f7 df 65 01 3d fb 8e de 10 <5b> 5d c3 cc cc cc cc cc 90 e8 1d 31 f6 02 85 c0 74 39 48 c7 c0 94 [ 203.901174][ C0] RSP: 0018:ffffc90002e07300 EFLAGS: 00000293 [ 203.907283][ C0] RAX: 0000000080000002 RBX: dffffc0000000000 RCX: 0000000000000000 [ 203.915287][ C0] RDX: 0000000000000003 RSI: ffffffff8d8f756f RDI: 00000000ffffffff [ 203.923266][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8230f82a [ 203.931289][ C0] R10: dffffc0000000000 R11: fffff940002eb1f9 R12: dffffc0000000000 [ 203.939287][ C0] R13: 0000000000000008 R14: 0000000000000001 R15: ffff88813fffa560 [ 203.947272][ C0] ? pfn_valid+0xba/0x490 [ 203.951726][ C0] ? pfn_valid+0xba/0x490 [ 203.956070][ C0] pfn_valid+0x3bc/0x490 [ 203.960331][ C0] page_table_check_clear+0x21/0x700 [ 203.965639][ C0] ? vm_normal_page+0x10d/0x240 [ 203.970589][ C0] unmap_page_range+0x344b/0x4370 [ 203.975668][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 203.981061][ C0] ? mas_find+0xb0e/0xd30 [ 203.985399][ C0] ? unmap_vmas+0x144/0x580 [ 203.989921][ C0] unmap_vmas+0x399/0x580 [ 203.994283][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 203.999174][ C0] exit_mmap+0x240/0xb40 [ 204.003431][ C0] ? uprobe_clear_state+0x20f/0x290 [ 204.008669][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 204.013448][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 204.019192][ C0] ? __pfx_exit_aio+0x10/0x10 [ 204.023892][ C0] ? uprobe_clear_state+0x27c/0x290 [ 204.029107][ C0] __mmput+0x118/0x430 [ 204.033191][ C0] exit_mm+0x1da/0x2c0 [ 204.037287][ C0] ? __pfx_exit_mm+0x10/0x10 [ 204.041892][ C0] ? rcu_is_watching+0x15/0xb0 [ 204.046666][ C0] do_exit+0x648/0x2300 [ 204.050845][ C0] ? do_raw_spin_lock+0x121/0x290 [ 204.055889][ C0] ? __pfx_do_exit+0x10/0x10 [ 204.060507][ C0] do_group_exit+0x21c/0x2d0 [ 204.065139][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.070392][ C0] get_signal+0x1285/0x1340 [ 204.074958][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 204.080525][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 204.086703][ C0] ? __se_sys_futex+0x36f/0x400 [ 204.091617][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 204.097092][ C0] exit_to_user_mode_loop+0x72/0x130 [ 204.102388][ C0] do_syscall_64+0x2bd/0xfa0 [ 204.107089][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 204.112381][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.118457][ C0] ? clear_bhb_loop+0x60/0xb0 [ 204.123147][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.129141][ C0] RIP: 0033:0x7fadded8f749 [ 204.133565][ C0] Code: Unable to access opcode bytes at 0x7fadded8f71f. [ 204.140609][ C0] RSP: 002b:00007faddfc060e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 204.149029][ C0] RAX: fffffffffffffe00 RBX: 00007faddefe5fa8 RCX: 00007fadded8f749 [ 204.157009][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faddefe5fa8 [ 204.165002][ C0] RBP: 00007faddefe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 204.172980][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 204.180960][ C0] R13: 00007faddefe6038 R14: 00007ffe071eca50 R15: 00007ffe071ecb38 [ 204.188960][ C0] [ 204.192269][ C0] Kernel Offset: disabled [ 204.196599][ C0] Rebooting in 86400 seconds..