last executing test programs: 3.187364911s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ae, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, &(0x7f0000003000)='\t', 0x1) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) 2.937527322s ago: executing program 4: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @raw_data="72493985e05d3160cc079ca8a5ee5da425d4228c6b74ec8809a9b4a13f614a912dcb09b37a98cb25d80a838fcc418fd953f85287f26e42fec7459a236c1c973f461aef8d3a4275178877f55ecc9fa57e160b5fade0710a8d2c0d2d5aed26ec5fd5072f0376cc1063512f324db234d508294692c5d37e8a1a1f08fe1c7849095fa525219657297beb26e43ae79a57f714c34904ab4d4ba2a4be7f119d21fcd77f4358d440ea881f2e809f5e07e198192cfdcc5a1aaaad534ffbc645230442331500207410efe01999"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c4363c16"}, 0x0, 0x2, {0x0}}) 2.70652428s ago: executing program 1: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="82000000070000009c000040"]) 2.69002351s ago: executing program 4: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) getgroups(0x0, 0x0) pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r6, 0x0, 0xb) splice(r8, 0x0, r7, 0x0, 0x1000, 0x0) splice(r5, 0x0, r9, 0x0, 0x80, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x0) 2.443553205s ago: executing program 2: r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x1b, &(0x7f0000000580)="6daee128fbdf1b91f45b579165bd34490ad3f0aa", 0x14) 2.066685316s ago: executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf0800008304"]) 2.032887797s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000004580)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004500)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) chmod(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 2.023460264s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0xa, &(0x7f0000000080)=""/4047, &(0x7f0000001180)=0xfcf) 1.990260478s ago: executing program 0: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001080)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 1.790341301s ago: executing program 1: clock_nanosleep(0x8, 0x4, &(0x7f0000000080)={0x77359400}, 0x0) 1.769961001s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x21ae, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) write(r0, &(0x7f0000003000)='\t', 0x1) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000300)=""/4096, 0x1000}], 0x1}}], 0x1, 0x2000, 0x0) 1.657516921s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8) getsockopt$bt_hci(r0, 0x84, 0x9, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.617742571s ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x33, 0x4, 0x0, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x9, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010100, 0xffffff14}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x2c, 0x2c, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x16}}, {@remote, 0x4}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.571178262s ago: executing program 0: read$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) personality(0x5400002) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={[0x5]}, 0x8) 1.462920175s ago: executing program 2: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x7e, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x8]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x2c, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr, 0x800}, {@broadcast, 0x52b4}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xb, 0x36, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.412389639s ago: executing program 3: userfaultfd(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080), 0x48) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d0f, &(0x7f0000000040)) 1.384349735s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 1.157173384s ago: executing program 3: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x82, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SNDCTL_DSP_SETDUPLEX(r0, 0x5016, 0x0) 1.069221207s ago: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x20}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000000040)) 1.0030096s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, 0x0, &(0x7f00000053c0)) 962.341525ms ago: executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000001080)) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x0, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) 835.740011ms ago: executing program 0: r0 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080), 0x18) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = io_uring_setup(0x4822, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$uinput_user_dev(r3, &(0x7f0000000c80)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) close_range(r2, 0xffffffffffffffff, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c", 0x28}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a00000000180000000000000017010000040000000602000000400000180000000000000017010000030000000100000000000079240809000000ac87448793609bd8299d6dfc465829b711ce28eb8f568438917ebd0699be96bd1485f6aaa8486e00000000e301f2e09aebda6eeb1c61f96b6d3f91c0f8c1ffbb85cfdd5b8b437a3720ba4cdfb681516c3a240207b6bbdfb37747cc7411886fdba55bcbfa68226644556e8117f9f9fc5be3b7095b2ab7c19b0c6fada03a7f9b9172f0cc960ee263e82e3232edea82b9736d65309e0ad2922ecbb7cde9ce78555fabb941d114e83b37255d6b43b2927696e4f4cf3b23086021fe4e33d049de5318ef3803ceacddc02734c96a9765486a9bf8d65791b000000000000000000000000000000000000000009d97cea3f950d55b265e480ff02c27bda4848c64ca7dcbcd060b9c0dea483c6069d2cdc473cfacc9052cc2c9e3ee037042fd329173c5e7c9ef8800a51332df5a08602a72a553035711cb9159757303a5e7d389786df44441dc82a9d32c56db8a8b3578cd0faabfa23fb46e22b45a464e35315d8c2dd3fae8b530cf8eb0d8dcb682772bed766be5208e61eab965c6c9a217a4e13f0085626c0408f381205251c18a8f6a44"], 0x60}], 0x1, 0x8001) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380), 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0) preadv(r5, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001240)=""/249, 0xf9}], 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001140)=@base={0x0, 0x4, 0xf00, 0x8}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}, 0x38) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x4, 0xfc}, 0x8) 738.133379ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x2, &(0x7f0000000980)=ANY=[], &(0x7f0000000ac0)=0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) 498.837201ms ago: executing program 4: openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x0, 0x45}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) 405.863214ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="3610000000000000180a02000000000000000000000000009500000000000000506ac2cbfb3b0db5b127b9e2fab4d2500302ed113caaebbba87936aa4aeda25f98"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195}, 0x23) 315.897425ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 252.057353ms ago: executing program 1: read$dsp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) personality(0x5400002) ppoll(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)={[0x5]}, 0x8) 229.878521ms ago: executing program 3: socket$packet(0x11, 0x2, 0x300) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 148.398157ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x18, 0x2a, 0x9, 0x0, 0x0, {0x4, 0x0, 0x2c00}, [@nested={0x4, 0xd}]}, 0x18}}, 0x0) 0s ago: executing program 1: close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003e) fcntl$setsig(r0, 0xa, 0x21) r1 = openat(r0, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0xfea7) copy_file_range(r2, &(0x7f00000001c0), r1, 0x0, 0xffffffffa003e45c, 0x10000000000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. 2024/05/31 18:47:08 fuzzer started 2024/05/31 18:47:08 dialing manager at 10.128.0.169:30000 [ 70.871571][ T5106] cgroup: Unknown subsys name 'net' [ 71.073606][ T5106] cgroup: Unknown subsys name 'rlimit' [ 71.641290][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.648077][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 2024/05/31 18:47:10 starting 5 executor processes [ 72.494620][ T5112] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.679936][ T5132] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.684059][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.695575][ T5133] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.696754][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.709733][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.710919][ T5132] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.722983][ T5134] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.725532][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.732109][ T5134] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.740102][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.753241][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.754090][ T5134] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.761748][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.767956][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.775525][ T5132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.782584][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.789685][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.797812][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.803194][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.810620][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.817068][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.824060][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.833249][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.845172][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.859240][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.861484][ T5132] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.867972][ T5137] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.874409][ T5132] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.884009][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.887900][ T5132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.559399][ T5139] chnl_net:caif_netlink_parms(): no params data found [ 74.573135][ T5138] chnl_net:caif_netlink_parms(): no params data found [ 74.633367][ T5141] chnl_net:caif_netlink_parms(): no params data found [ 74.708111][ T5142] chnl_net:caif_netlink_parms(): no params data found [ 74.851113][ T5140] chnl_net:caif_netlink_parms(): no params data found [ 74.948306][ T5139] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.956256][ T5139] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.967254][ T5139] bridge_slave_0: entered allmulticast mode [ 74.974512][ T5139] bridge_slave_0: entered promiscuous mode [ 74.983947][ T5138] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.991829][ T5138] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.999200][ T5138] bridge_slave_0: entered allmulticast mode [ 75.006203][ T5138] bridge_slave_0: entered promiscuous mode [ 75.021241][ T5138] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.028448][ T5138] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.035705][ T5138] bridge_slave_1: entered allmulticast mode [ 75.042949][ T5138] bridge_slave_1: entered promiscuous mode [ 75.082739][ T5139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.090023][ T5139] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.098085][ T5139] bridge_slave_1: entered allmulticast mode [ 75.105124][ T5139] bridge_slave_1: entered promiscuous mode [ 75.137112][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.144352][ T5141] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.151622][ T5141] bridge_slave_0: entered allmulticast mode [ 75.159298][ T5141] bridge_slave_0: entered promiscuous mode [ 75.168081][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.175227][ T5141] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.182529][ T5141] bridge_slave_1: entered allmulticast mode [ 75.189882][ T5141] bridge_slave_1: entered promiscuous mode [ 75.210892][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.218335][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.225516][ T5142] bridge_slave_0: entered allmulticast mode [ 75.232929][ T5142] bridge_slave_0: entered promiscuous mode [ 75.285903][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.293210][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.301171][ T5142] bridge_slave_1: entered allmulticast mode [ 75.308520][ T5142] bridge_slave_1: entered promiscuous mode [ 75.335486][ T5138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.348087][ T5138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.399721][ T5139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.413546][ T5139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.444261][ T5141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.459213][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.524837][ T5138] team0: Port device team_slave_0 added [ 75.533747][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.557977][ T5141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.594760][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.602143][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.609469][ T5140] bridge_slave_0: entered allmulticast mode [ 75.616790][ T5140] bridge_slave_0: entered promiscuous mode [ 75.627958][ T5138] team0: Port device team_slave_1 added [ 75.665942][ T5139] team0: Port device team_slave_0 added [ 75.672842][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.680229][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.687588][ T5140] bridge_slave_1: entered allmulticast mode [ 75.694744][ T5140] bridge_slave_1: entered promiscuous mode [ 75.716910][ T5142] team0: Port device team_slave_0 added [ 75.725566][ T5142] team0: Port device team_slave_1 added [ 75.735320][ T5141] team0: Port device team_slave_0 added [ 75.747290][ T5141] team0: Port device team_slave_1 added [ 75.754903][ T5139] team0: Port device team_slave_1 added [ 75.851937][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.859089][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.886357][ T53] Bluetooth: hci1: command tx timeout [ 75.893566][ T5138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.907947][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.914969][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.941207][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.957178][ T5132] Bluetooth: hci3: command tx timeout [ 75.962984][ T5132] Bluetooth: hci4: command tx timeout [ 75.969161][ T5133] Bluetooth: hci0: command tx timeout [ 75.971100][ T53] Bluetooth: hci2: command tx timeout [ 75.978935][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.987215][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.014547][ T5141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.041253][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.048377][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.074386][ T5139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.089452][ T5140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.102131][ T5140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.112137][ T5138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.119590][ T5138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.145896][ T5138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.158030][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.165001][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.191568][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.203616][ T5141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.211038][ T5141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.237107][ T5141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.255851][ T5139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.263002][ T5139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.289138][ T5139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.376244][ T5140] team0: Port device team_slave_0 added [ 76.405997][ T5138] hsr_slave_0: entered promiscuous mode [ 76.413178][ T5138] hsr_slave_1: entered promiscuous mode [ 76.436785][ T5140] team0: Port device team_slave_1 added [ 76.517902][ T5141] hsr_slave_0: entered promiscuous mode [ 76.524615][ T5141] hsr_slave_1: entered promiscuous mode [ 76.532217][ T5141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.540608][ T5141] Cannot create hsr debugfs directory [ 76.605954][ T5140] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.614590][ T5140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.640772][ T5140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.659076][ T5139] hsr_slave_0: entered promiscuous mode [ 76.665498][ T5139] hsr_slave_1: entered promiscuous mode [ 76.672073][ T5139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.679783][ T5139] Cannot create hsr debugfs directory [ 76.690905][ T5142] hsr_slave_0: entered promiscuous mode [ 76.697761][ T5142] hsr_slave_1: entered promiscuous mode [ 76.704207][ T5142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.712203][ T5142] Cannot create hsr debugfs directory [ 76.743167][ T5140] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.750352][ T5140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.777352][ T5140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.936323][ T5140] hsr_slave_0: entered promiscuous mode [ 76.944259][ T5140] hsr_slave_1: entered promiscuous mode [ 76.954051][ T5140] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.961800][ T5140] Cannot create hsr debugfs directory [ 77.371897][ T5138] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.386219][ T5138] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.397880][ T5138] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.412210][ T5138] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.481987][ T5139] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.509183][ T5139] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.539098][ T5139] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.550877][ T5139] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.626441][ T5141] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.655051][ T5141] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.709620][ T5141] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.722020][ T5141] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.765178][ T5138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.805778][ T5142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.827329][ T5138] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.847146][ T5142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.861485][ T5142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.880495][ T5142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.904597][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.912050][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.956845][ T53] Bluetooth: hci1: command tx timeout [ 77.981631][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.988838][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.036924][ T53] Bluetooth: hci2: command tx timeout [ 78.042244][ T5133] Bluetooth: hci4: command tx timeout [ 78.042379][ T5137] Bluetooth: hci0: command tx timeout [ 78.048039][ T5132] Bluetooth: hci3: command tx timeout [ 78.078118][ T5140] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.088727][ T5140] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.102378][ T5140] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.131791][ T5140] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.258205][ T5141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.301647][ T5139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.341570][ T5141] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.366142][ T5179] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.373316][ T5179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.431323][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.438532][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.464836][ T5139] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.491685][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.498895][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.548750][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.555934][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.580131][ T5138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.664092][ T5140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.710370][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.765398][ T5138] veth0_vlan: entered promiscuous mode [ 78.793819][ T5140] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.837798][ T5139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.875144][ T5142] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.885373][ T5138] veth1_vlan: entered promiscuous mode [ 78.899276][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.906445][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.949911][ T5141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.964003][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.971207][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.001900][ T4842] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.009119][ T4842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.028109][ T5139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.070871][ T5138] veth0_macvtap: entered promiscuous mode [ 79.084455][ T4842] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.091677][ T4842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.132165][ T5138] veth1_macvtap: entered promiscuous mode [ 79.155608][ T5140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 79.171837][ T5140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.265362][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.304289][ T5138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.312019][ T5141] veth0_vlan: entered promiscuous mode [ 79.339208][ T5138] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.348782][ T5138] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.357857][ T5138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.369261][ T5138] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.424835][ T5141] veth1_vlan: entered promiscuous mode [ 79.442973][ T5139] veth0_vlan: entered promiscuous mode [ 79.482255][ T5140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.520670][ T5139] veth1_vlan: entered promiscuous mode [ 79.609755][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.626911][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.687469][ T1278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.695365][ T1278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.701367][ T5141] veth0_macvtap: entered promiscuous mode [ 79.721932][ T5140] veth0_vlan: entered promiscuous mode [ 79.738267][ T5141] veth1_macvtap: entered promiscuous mode [ 79.751852][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.800457][ T5139] veth0_macvtap: entered promiscuous mode [ 79.821333][ T5140] veth1_vlan: entered promiscuous mode [ 79.836417][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.862373][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.877775][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.889320][ T5141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.900045][ T5141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.912533][ T5141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.943628][ T5139] veth1_macvtap: entered promiscuous mode [ 79.983206][ T5141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.997401][ T5141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.006166][ T5141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.020969][ T5141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.037084][ T5132] Bluetooth: hci1: command tx timeout [ 80.075673][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.089018][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.099434][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.109956][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.120551][ T5132] Bluetooth: hci2: command tx timeout [ 80.126006][ T5132] Bluetooth: hci0: command tx timeout [ 80.132232][ T5133] Bluetooth: hci3: command tx timeout [ 80.136848][ T53] Bluetooth: hci4: command tx timeout [ 80.141126][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.207606][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.219509][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.229480][ T5139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.240366][ T5139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.252360][ T5139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.286250][ T5140] veth0_macvtap: entered promiscuous mode [ 80.312303][ T5139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.321791][ T5139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.330584][ T5139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.339960][ T5139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.381355][ T5140] veth1_macvtap: entered promiscuous mode [ 80.558619][ T5142] veth0_vlan: entered promiscuous mode [ 80.589833][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.595214][ T5190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 80.602836][ T2461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.628092][ T2461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.630997][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.659679][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.675413][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.686590][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.698816][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.710609][ T5140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.763977][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.805575][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.816357][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.816381][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.816394][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.816410][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.818329][ T5140] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.825861][ T5142] veth1_vlan: entered promiscuous mode [ 80.889061][ T2461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.904861][ T5140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.914491][ T2461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.915652][ T5140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.932037][ T5140] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.940977][ T5140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.083894][ T5142] veth0_macvtap: entered promiscuous mode [ 81.123498][ T2533] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.134331][ T2533] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.180649][ T5142] veth1_macvtap: entered promiscuous mode [ 81.246091][ T5198] input: syz0 as /devices/virtual/input/input5 [ 81.291177][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.334424][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.362285][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.374040][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.398235][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.409249][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.419684][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.435670][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.449012][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.577010][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.586820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 81.615260][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.638412][ T5177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.652993][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.656585][ T5177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.670725][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.692281][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.708178][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.745408][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.765634][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.783905][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.820458][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.932055][ T5142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.946474][ T5142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.955406][ T5142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.012599][ T5142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.040547][ T5198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.077863][ T5198] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 82.118815][ T5137] Bluetooth: hci1: command tx timeout [ 82.201239][ T5137] Bluetooth: hci4: command tx timeout [ 82.201264][ T53] Bluetooth: hci0: command tx timeout [ 82.206963][ T5132] Bluetooth: hci3: command tx timeout [ 82.212215][ T53] Bluetooth: hci2: command tx timeout [ 82.234416][ T5218] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.252432][ T5218] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.266181][ T5218] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.296366][ T5198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.330008][ T5198] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 82.475181][ T5198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.494883][ T5198] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 82.543317][ T5198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.579400][ T5198] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 82.624924][ T5198] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 82.662092][ T5198] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 83.065292][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.104977][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.265575][ T931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.297668][ T931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.539471][ T5231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.579772][ T5231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.692709][ T5255] netlink: 'syz-executor.3': attribute type 66 has an invalid length. [ 83.766808][ T4842] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.774771][ T4842] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.971179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 84.114489][ T5269] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.183696][ T5272] input: syz0 as /devices/virtual/input/input6 [ 84.934467][ T5285] vlan2: entered allmulticast mode [ 85.615651][ T5318] kvm: emulating exchange as write [ 86.060070][ T5337] input: syz0 as /devices/virtual/input/input7 [ 86.430955][ T2428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.588078][ T5349] ------------[ cut here ]------------ [ 86.593928][ T5349] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 86.642398][ T5349] WARNING: CPU: 1 PID: 5349 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 86.653559][ T5349] Modules linked in: [ 86.657733][ T5349] CPU: 1 PID: 5349 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 86.668331][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 86.678998][ T5349] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 86.686868][ T5349] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 fe 9e 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 86.706706][ T5349] RSP: 0018:ffffc9000483f318 EFLAGS: 00010246 [ 86.712834][ T5349] RAX: 0be7bcb3f3a10d00 RBX: 1ffff110059e2a9e RCX: 0000000000040000 [ 86.721297][ T5349] RDX: ffffc9000b121000 RSI: 0000000000004520 RDI: 0000000000004521 [ 86.729550][ T5349] RBP: ffff88802cf14130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 86.737621][ T5349] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 86.745640][ T5349] R13: 0000000002000000 R14: ffff88802cf14ca0 R15: ffff88802cf154f0 [ 86.753757][ T5349] FS: 00007f23b8eac6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 86.762792][ T5349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.769855][ T5349] CR2: 0000000020000040 CR3: 000000005d67a000 CR4: 00000000003506f0 [ 86.778048][ T5349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.786060][ T5349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.794171][ T5349] Call Trace: [ 86.797560][ T5349] [ 86.800533][ T5349] ? __warn+0x163/0x4e0 [ 86.804837][ T5349] ? ieee80211_link_info_change_notify+0x273/0x330 [ 86.811501][ T5349] ? report_bug+0x2b3/0x500 [ 86.816063][ T5349] ? ieee80211_link_info_change_notify+0x273/0x330 [ 86.822692][ T5349] ? handle_bug+0x3e/0x70 [ 86.827138][ T5349] ? exc_invalid_op+0x1a/0x50 [ 86.831868][ T5349] ? asm_exc_invalid_op+0x1a/0x20 [ 86.837422][ T5349] ? __warn_printk+0x292/0x360 [ 86.842252][ T5349] ? ieee80211_link_info_change_notify+0x273/0x330 [ 86.849108][ T5349] ? ieee80211_link_info_change_notify+0x272/0x330 [ 86.855673][ T5349] ieee80211_set_mcast_rate+0x46/0x60 [ 86.861298][ T5349] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 86.867579][ T5349] nl80211_set_mcast_rate+0xaff/0xeb0 [ 86.873101][ T5349] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 86.879164][ T5349] genl_rcv_msg+0xb14/0xec0 [ 86.883732][ T5349] ? mark_lock+0x9a/0x350 [ 86.888221][ T5349] ? __pfx_genl_rcv_msg+0x10/0x10 2024/05/31 18:47:25 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 86.893342][ T5349] ? __pfx_lock_acquire+0x10/0x10 [ 86.898513][ T5349] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 86.903939][ T5349] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 86.909955][ T5349] ? __pfx_nl80211_post_doit+0x10/0x10 [ 86.915468][ T5349] ? __pfx___might_resched+0x10/0x10 [ 86.920904][ T5349] netlink_rcv_skb+0x1e3/0x430 [ 86.925716][ T5349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 86.930867][ T5349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.936581][ T5349] ? __netlink_deliver_tap+0x77e/0x7c0 [ 86.942118][ T5349] genl_rcv+0x28/0x40 [ 86.946146][ T5349] netlink_unicast+0x7ea/0x980 [ 86.951179][ T5349] ? __pfx_netlink_unicast+0x10/0x10 [ 86.956560][ T5349] ? __virt_addr_valid+0x183/0x520 [ 86.961726][ T5349] ? __check_object_size+0x49c/0x900 [ 86.967332][ T5349] ? bpf_lsm_netlink_send+0x9/0x10 [ 86.972629][ T5349] netlink_sendmsg+0x8db/0xcb0 [ 86.977539][ T5349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.982875][ T5349] ? __import_iovec+0x536/0x820 [ 86.987955][ T5349] ? aa_sock_msg_perm+0x91/0x160 [ 86.992934][ T5349] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 86.998875][ T5349] ? security_socket_sendmsg+0x87/0xb0 [ 87.004396][ T5349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.009953][ T5349] __sock_sendmsg+0x221/0x270 [ 87.014691][ T5349] ____sys_sendmsg+0x525/0x7d0 [ 87.019577][ T5349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.024935][ T5349] __sys_sendmsg+0x2b0/0x3a0 [ 87.029652][ T5349] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.034866][ T5349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.041330][ T5349] ? do_syscall_64+0x100/0x230 [ 87.046148][ T5349] ? do_syscall_64+0xb6/0x230 [ 87.050982][ T5349] do_syscall_64+0xf3/0x230 [ 87.055571][ T5349] ? clear_bhb_loop+0x35/0x90 [ 87.060366][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.066311][ T5349] RIP: 0033:0x7f23b807cee9 [ 87.070862][ T5349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.090840][ T5349] RSP: 002b:00007f23b8eac0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.099395][ T5349] RAX: ffffffffffffffda RBX: 00007f23b81b3fa0 RCX: 00007f23b807cee9 [ 87.107505][ T5349] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 87.115524][ T5349] RBP: 00007f23b80c947f R08: 0000000000000000 R09: 0000000000000000 [ 87.123640][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.131818][ T5349] R13: 000000000000000b R14: 00007f23b81b3fa0 R15: 00007f23b82dfa98 [ 87.139952][ T5349] [ 87.143029][ T5349] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.150343][ T5349] CPU: 1 PID: 5349 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00027-g4a4be1ad3a6e #0 [ 87.160793][ T5349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 87.170883][ T5349] Call Trace: [ 87.174194][ T5349] [ 87.177151][ T5349] dump_stack_lvl+0x241/0x360 [ 87.181965][ T5349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.187207][ T5349] ? __pfx__printk+0x10/0x10 [ 87.191839][ T5349] ? _printk+0xd5/0x120 [ 87.196041][ T5349] ? vscnprintf+0x5d/0x90 [ 87.200410][ T5349] panic+0x349/0x860 [ 87.204338][ T5349] ? __warn+0x172/0x4e0 [ 87.208511][ T5349] ? __pfx_panic+0x10/0x10 [ 87.212937][ T5349] ? show_trace_log_lvl+0x4e6/0x520 [ 87.218173][ T5349] __warn+0x346/0x4e0 [ 87.222193][ T5349] ? ieee80211_link_info_change_notify+0x273/0x330 [ 87.228715][ T5349] report_bug+0x2b3/0x500 [ 87.233063][ T5349] ? ieee80211_link_info_change_notify+0x273/0x330 [ 87.239580][ T5349] handle_bug+0x3e/0x70 [ 87.243774][ T5349] exc_invalid_op+0x1a/0x50 [ 87.248302][ T5349] asm_exc_invalid_op+0x1a/0x20 [ 87.253183][ T5349] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 87.260306][ T5349] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 39 e1 8c 48 89 ee e8 fe 9e 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 87.279925][ T5349] RSP: 0018:ffffc9000483f318 EFLAGS: 00010246 [ 87.286008][ T5349] RAX: 0be7bcb3f3a10d00 RBX: 1ffff110059e2a9e RCX: 0000000000040000 [ 87.293987][ T5349] RDX: ffffc9000b121000 RSI: 0000000000004520 RDI: 0000000000004521 [ 87.301965][ T5349] RBP: ffff88802cf14130 R08: ffffffff815847a2 R09: fffffbfff1c3998c [ 87.309946][ T5349] R10: dffffc0000000000 R11: fffffbfff1c3998c R12: dffffc0000000000 [ 87.317924][ T5349] R13: 0000000002000000 R14: ffff88802cf14ca0 R15: ffff88802cf154f0 [ 87.325908][ T5349] ? __warn_printk+0x292/0x360 [ 87.330702][ T5349] ? ieee80211_link_info_change_notify+0x272/0x330 [ 87.337218][ T5349] ieee80211_set_mcast_rate+0x46/0x60 [ 87.342603][ T5349] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 87.348685][ T5349] nl80211_set_mcast_rate+0xaff/0xeb0 [ 87.354083][ T5349] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 87.360020][ T5349] genl_rcv_msg+0xb14/0xec0 [ 87.364543][ T5349] ? mark_lock+0x9a/0x350 [ 87.368896][ T5349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.373955][ T5349] ? __pfx_lock_acquire+0x10/0x10 [ 87.379074][ T5349] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 87.384456][ T5349] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 87.390363][ T5349] ? __pfx_nl80211_post_doit+0x10/0x10 [ 87.395831][ T5349] ? __pfx___might_resched+0x10/0x10 [ 87.401170][ T5349] netlink_rcv_skb+0x1e3/0x430 [ 87.405957][ T5349] ? __pfx_genl_rcv_msg+0x10/0x10 [ 87.411000][ T5349] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.416308][ T5349] ? __netlink_deliver_tap+0x77e/0x7c0 [ 87.421791][ T5349] genl_rcv+0x28/0x40 [ 87.425790][ T5349] netlink_unicast+0x7ea/0x980 [ 87.430584][ T5349] ? __pfx_netlink_unicast+0x10/0x10 [ 87.435885][ T5349] ? __virt_addr_valid+0x183/0x520 [ 87.441104][ T5349] ? __check_object_size+0x49c/0x900 [ 87.446405][ T5349] ? bpf_lsm_netlink_send+0x9/0x10 [ 87.451540][ T5349] netlink_sendmsg+0x8db/0xcb0 [ 87.456331][ T5349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.461624][ T5349] ? __import_iovec+0x536/0x820 [ 87.466486][ T5349] ? aa_sock_msg_perm+0x91/0x160 [ 87.471436][ T5349] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 87.476731][ T5349] ? security_socket_sendmsg+0x87/0xb0 [ 87.482204][ T5349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.487592][ T5349] __sock_sendmsg+0x221/0x270 [ 87.492372][ T5349] ____sys_sendmsg+0x525/0x7d0 [ 87.497174][ T5349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.502511][ T5349] __sys_sendmsg+0x2b0/0x3a0 [ 87.507115][ T5349] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.512282][ T5349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.518619][ T5349] ? do_syscall_64+0x100/0x230 [ 87.523395][ T5349] ? do_syscall_64+0xb6/0x230 [ 87.528081][ T5349] do_syscall_64+0xf3/0x230 [ 87.532592][ T5349] ? clear_bhb_loop+0x35/0x90 [ 87.537280][ T5349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.543182][ T5349] RIP: 0033:0x7f23b807cee9 [ 87.547610][ T5349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 87.567227][ T5349] RSP: 002b:00007f23b8eac0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.575671][ T5349] RAX: ffffffffffffffda RBX: 00007f23b81b3fa0 RCX: 00007f23b807cee9 [ 87.583742][ T5349] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 87.591721][ T5349] RBP: 00007f23b80c947f R08: 0000000000000000 R09: 0000000000000000 [ 87.599791][ T5349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.607790][ T5349] R13: 000000000000000b R14: 00007f23b81b3fa0 R15: 00007f23b82dfa98 [ 87.615792][ T5349] [ 87.618942][ T5349] Kernel Offset: disabled [ 87.623351][ T5349] Rebooting in 86400 seconds..