last executing test programs: 8.10814062s ago: executing program 1: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x5452, &(0x7f00000000c0)) eventfd2(0x0, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5450, 0x0) socket$unix(0x1, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) semctl$SETVAL(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000000)) 5.94648857s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x4004441) unshare(0x20000400) ppoll(&(0x7f0000000180)=[{r0}], 0x1, 0x0, 0x0, 0x0) 5.579128436s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mq_open(&(0x7f00000016c0)='+!+({),-\x00', 0x40, 0x0, 0x0) dup3(r0, r1, 0x0) write$P9_RSTAT(r1, 0x0, 0x0) 5.291980833s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088f7ffff", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 5.23635533s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000005c0), &(0x7f0000000b40)=""/31}, 0x20) 4.985878143s ago: executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000280)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000100)={@random="85a2fa90e207", @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}}}}}, 0x0) 4.952235049s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x8, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff0000000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 4.50665972s ago: executing program 3: r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'pim6reg1\x00', {0x2, 0x0, @multicast1}}) socket$inet6(0xa, 0x0, 0x0) 4.237549158s ago: executing program 2: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x1, 0x0, &(0x7f0000000100)="e0", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x7, 0x4) 4.108567531s ago: executing program 4: setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) socket(0x0, 0x0, 0x28) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$kcm(0x10, 0x0, 0x0) poll(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) unshare(0x20000400) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001e80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@newtclass={0x30, 0x28, 0x200, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0x0, 0x1}, {0x4, 0x2}}, [@tclass_kind_options=@c_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c000}, 0x48081) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000008c0)=@newtaction={0x70, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0x60}, {0xc}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000000000000000001236742b0000000000000000000000000000000400000000000a00800000"], 0xb8}, 0x1, 0x0, 0x0, 0xc844}, 0x20000804) 3.793561312s ago: executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{0x0}, {&(0x7f00000004c0)=""/196, 0xc4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) 3.491128025s ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10, 0x0, 0xffffffe2, &(0x7f0000000280)=[@ip_pktinfo={{0x18, 0x0, 0x8, {0x0, @rand_addr, @private}}}], 0x18}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[], 0x84}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000800)={{0x7f, 0x45, 0x4c, 0x46, 0x2d, 0x1f, 0x2, 0xc1, 0xffff, 0x2, 0x6, 0x7fffffff, 0x375, 0x40, 0xfd, 0x6, 0xc69f, 0x38, 0x1, 0x7f, 0x1, 0x1f}, [{0x5, 0xfff, 0x7, 0x0, 0x0, 0x1, 0x7, 0x101}], "69cb2db3c57dd7b7865294", ['\x00', '\x00']}, 0x283) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r6, 0x0, 0x811) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r6, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001840)={0x18, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000000)={0x7, 'pimreg0\x00', {0x1000}, 0xdad5}) 3.091172403s ago: executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="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"], 0x184}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x148, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@local}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0xf0}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000440)=@hci={0x1f, 0x0, 0x14}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000080)="27010000000105000000002fd0a7d0884ac82b9200008100", 0x18}, {&(0x7f0000000240)="2f0f0806962269fa2ec79c385fe1a5f5ffffffffffffacb1fff7", 0x1a}], 0x2}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b6000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)}, &(0x7f0000002100)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000300), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x50}, 0x1, 0x7}, 0x0) listen(0xffffffffffffffff, 0x0) syz_extract_tcp_res(&(0x7f0000000a00), 0x1ff, 0x1f) syz_emit_ethernet(0x6e, &(0x7f0000000b00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@generic={0x88e5, "91abd33cb86c10ec9c59c81a295271cd1bbfc4619410684a4cdf7a4ed15bf653d8d3e0b2b322e45409fb0fb1536cc60026971406a0426f78e049739c99873805d3fcd772abfc1a818aa6a42500c3a6206c8ea96e030000000000000082bb07e8"}}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x2, 0x12) 2.935659836s ago: executing program 0: bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)={0x114, 0x31, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x7, 0x0, 0x0, @u64}, @typed={0x14, 0x8, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 2.855788775s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000009c0)={0x40c, 0x0, 0x0, 0x0, 0x0, {}, [{{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x13c, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x40c}}, 0x80c0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000011c0)=ANY=[], 0x100}}, 0x0) 2.461224568s ago: executing program 4: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.166528799s ago: executing program 1: r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x148, 0x4c, 0x1a, 0x148, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x118, 0x148, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@local}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0xf0}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x218, 0x240, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@AUDIT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) 2.153843892s ago: executing program 2: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001500)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5}]}]}]}}]}, 0xa4}}, 0x0) 2.016033187s ago: executing program 0: unshare(0x22020400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000180), 0x4) 1.475541581s ago: executing program 1: sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x143ffd, 0x7fe2, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000180), 0x0}, 0x20) 1.256540571s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r4}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) 1.181080671s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000a40)=ANY=[], &(0x7f00000008c0)=""/230, 0x2c, 0xe6, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000000000050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) 1.155344572s ago: executing program 3: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r2, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000980)={0x74, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x50, 0x33, @probe_response={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @val={0x2d, 0x1a}, @void, @void}}]}, 0x74}}, 0x0) 1.136550811s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000000), 0x12) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x7}]}}}]}, 0x3c}}, 0x0) 801.31216ms ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) unshare(0x6020400) socket(0x0, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, 0x0) 400.728942ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x7, &(0x7f0000000180)="a8", 0x4) 333.095641ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bind$xdp(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r7}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_LINK={0x8}, @IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x8100}, 0x0) 168.297426ms ago: executing program 3: socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 0s ago: executing program 0: sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. 2024/06/04 02:37:02 fuzzer started 2024/06/04 02:37:03 dialing manager at 10.128.0.169:30026 [ 178.615796][ T5037] cgroup: Unknown subsys name 'net' [ 178.865894][ T5037] cgroup: Unknown subsys name 'rlimit' [ 219.161092][ T1220] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.167888][ T1220] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/04 02:37:53 starting 5 executor processes [ 227.347448][ T5042] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 230.224942][ T5065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 230.234826][ T5065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 230.244877][ T5065] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 230.254537][ T5069] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 230.265068][ T5069] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 230.299819][ T5069] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 230.309828][ T5071] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 230.334753][ T5071] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 230.346303][ T5071] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 230.354789][ T5069] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 230.371873][ T5069] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 230.383125][ T5073] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 230.439629][ T5069] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.449775][ T5069] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.460797][ T5069] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.475083][ T5069] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.486761][ T5069] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 230.509090][ T5069] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.744266][ T5071] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 230.868920][ T5071] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 230.889766][ T5071] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 230.931555][ T5073] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 230.944331][ T5073] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 230.954982][ T5073] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 230.972308][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 230.985989][ T50] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 230.996356][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 231.046229][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.077820][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.092556][ T5073] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.922756][ T5063] chnl_net:caif_netlink_parms(): no params data found [ 231.960064][ T5072] chnl_net:caif_netlink_parms(): no params data found [ 232.429998][ T5071] Bluetooth: hci0: command tx timeout [ 232.436351][ T5071] Bluetooth: hci1: command tx timeout [ 232.609116][ T5073] Bluetooth: hci2: command tx timeout [ 232.622870][ T5079] chnl_net:caif_netlink_parms(): no params data found [ 232.683107][ T5064] chnl_net:caif_netlink_parms(): no params data found [ 233.015552][ T5076] chnl_net:caif_netlink_parms(): no params data found [ 233.053687][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.062476][ T5072] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.070397][ T5072] bridge_slave_0: entered allmulticast mode [ 233.079929][ T5072] bridge_slave_0: entered promiscuous mode [ 233.149964][ T5073] Bluetooth: hci4: command tx timeout [ 233.150333][ T5071] Bluetooth: hci3: command tx timeout [ 233.205242][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.213600][ T5072] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.221906][ T5072] bridge_slave_1: entered allmulticast mode [ 233.232388][ T5072] bridge_slave_1: entered promiscuous mode [ 233.430485][ T5072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.509581][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.519746][ T5063] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.527773][ T5063] bridge_slave_0: entered allmulticast mode [ 233.537035][ T5063] bridge_slave_0: entered promiscuous mode [ 233.577030][ T5072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.607413][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.616586][ T5063] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.624725][ T5063] bridge_slave_1: entered allmulticast mode [ 233.633996][ T5063] bridge_slave_1: entered promiscuous mode [ 233.941492][ T5072] team0: Port device team_slave_0 added [ 234.002205][ T5063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.053477][ T5072] team0: Port device team_slave_1 added [ 234.061758][ T5079] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.072249][ T5079] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.080281][ T5079] bridge_slave_0: entered allmulticast mode [ 234.089523][ T5079] bridge_slave_0: entered promiscuous mode [ 234.106164][ T5064] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.114516][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.122590][ T5064] bridge_slave_0: entered allmulticast mode [ 234.131665][ T5064] bridge_slave_0: entered promiscuous mode [ 234.151979][ T5079] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.159937][ T5079] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.167703][ T5079] bridge_slave_1: entered allmulticast mode [ 234.177158][ T5079] bridge_slave_1: entered promiscuous mode [ 234.196004][ T5063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.313053][ T5064] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.321361][ T5064] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.329189][ T5064] bridge_slave_1: entered allmulticast mode [ 234.338355][ T5064] bridge_slave_1: entered promiscuous mode [ 234.424556][ T5079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.509042][ T5071] Bluetooth: hci1: command tx timeout [ 234.514694][ T5071] Bluetooth: hci0: command tx timeout [ 234.672630][ T5071] Bluetooth: hci2: command tx timeout [ 234.681037][ T5079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.695236][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.703326][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.729949][ T5072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.749650][ T5063] team0: Port device team_slave_0 added [ 234.816407][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.824328][ T5076] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.832295][ T5076] bridge_slave_0: entered allmulticast mode [ 234.841414][ T5076] bridge_slave_0: entered promiscuous mode [ 234.863188][ T5064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.931709][ T5063] team0: Port device team_slave_1 added [ 234.971679][ T5072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.980363][ T5072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.007120][ T5072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.032903][ T5079] team0: Port device team_slave_0 added [ 235.049629][ T5064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.067466][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.077405][ T5076] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.085396][ T5076] bridge_slave_1: entered allmulticast mode [ 235.094810][ T5076] bridge_slave_1: entered promiscuous mode [ 235.204565][ T5079] team0: Port device team_slave_1 added [ 235.228768][ T5071] Bluetooth: hci3: command tx timeout [ 235.234456][ T5073] Bluetooth: hci4: command tx timeout [ 235.393485][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.400890][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.429787][ T5063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.510004][ T5064] team0: Port device team_slave_0 added [ 235.532989][ T5072] hsr_slave_0: entered promiscuous mode [ 235.542133][ T5072] hsr_slave_1: entered promiscuous mode [ 235.599211][ T5076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 235.612096][ T5063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.620596][ T5063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.647858][ T5063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.667919][ T5064] team0: Port device team_slave_1 added [ 235.736942][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 235.744243][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.770550][ T5079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.787438][ T5079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.795070][ T5079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.821365][ T5079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.842315][ T5076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.138023][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.146168][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.173020][ T5064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.233520][ T5063] hsr_slave_0: entered promiscuous mode [ 236.242968][ T5063] hsr_slave_1: entered promiscuous mode [ 236.252017][ T5063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.261044][ T5063] Cannot create hsr debugfs directory [ 236.308285][ T5076] team0: Port device team_slave_0 added [ 236.317570][ T5064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.326004][ T5064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.353473][ T5064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.426643][ T5079] hsr_slave_0: entered promiscuous mode [ 236.438383][ T5079] hsr_slave_1: entered promiscuous mode [ 236.446451][ T5079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.454341][ T5079] Cannot create hsr debugfs directory [ 236.467879][ T5076] team0: Port device team_slave_1 added [ 236.588550][ T5071] Bluetooth: hci1: command tx timeout [ 236.594413][ T5073] Bluetooth: hci0: command tx timeout [ 236.750079][ T5073] Bluetooth: hci2: command tx timeout [ 236.878984][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.886259][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.912776][ T5076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.930510][ T5076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.939494][ T5076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.969131][ T5076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.995192][ T5064] hsr_slave_0: entered promiscuous mode [ 237.006399][ T5064] hsr_slave_1: entered promiscuous mode [ 237.014638][ T5064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.022648][ T5064] Cannot create hsr debugfs directory [ 237.308672][ T5073] Bluetooth: hci3: command tx timeout [ 237.314370][ T5071] Bluetooth: hci4: command tx timeout [ 237.355971][ T5076] hsr_slave_0: entered promiscuous mode [ 237.366604][ T5076] hsr_slave_1: entered promiscuous mode [ 237.375012][ T5076] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.382889][ T5076] Cannot create hsr debugfs directory [ 238.017180][ T5072] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.044551][ T5072] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.128748][ T5072] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.186570][ T5072] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.385737][ T5079] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.459511][ T5079] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 238.481961][ T5079] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 238.563850][ T5079] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 238.674853][ T5073] Bluetooth: hci0: command tx timeout [ 238.680825][ T5071] Bluetooth: hci1: command tx timeout [ 238.776778][ T5064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.807929][ T5063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 238.828907][ T5073] Bluetooth: hci2: command tx timeout [ 238.837401][ T5063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 238.884881][ T5064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.915315][ T5063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 238.955053][ T5064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.986517][ T5063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 239.071590][ T5064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 239.135025][ T5076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 239.220847][ T5076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 239.266185][ T5076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 239.295568][ T5076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 239.397629][ T5073] Bluetooth: hci3: command tx timeout [ 239.405158][ T5073] Bluetooth: hci4: command tx timeout [ 239.940756][ T5079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.126889][ T5072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.192088][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.275776][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.283838][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.364531][ T5072] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.406087][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.414023][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.610781][ T5064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.648824][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.656579][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.789204][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.796893][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.872822][ T5063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.937723][ T5076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.062534][ T5064] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.079745][ T5063] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.203169][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.211129][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.228989][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.236844][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.292668][ T5076] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.388592][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.396900][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.412703][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.420776][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.507753][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.515665][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.717308][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.725553][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.197367][ T5063] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.267745][ T5076] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 242.279032][ T5076] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 242.980105][ T5079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.641746][ T5079] veth0_vlan: entered promiscuous mode [ 243.747347][ T5079] veth1_vlan: entered promiscuous mode [ 243.784724][ T5072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.284996][ T5063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.325235][ T5079] veth0_macvtap: entered promiscuous mode [ 244.353060][ T5076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.402755][ T5072] veth0_vlan: entered promiscuous mode [ 244.417419][ T5079] veth1_macvtap: entered promiscuous mode [ 244.449447][ T5064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.551319][ T5072] veth1_vlan: entered promiscuous mode [ 244.714422][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.824842][ T5079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.005355][ T5079] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.017039][ T5079] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.026398][ T5079] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.035609][ T5079] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.067735][ T5076] veth0_vlan: entered promiscuous mode [ 245.089678][ T5072] veth0_macvtap: entered promiscuous mode [ 245.125506][ T5072] veth1_macvtap: entered promiscuous mode [ 245.303588][ T5076] veth1_vlan: entered promiscuous mode [ 245.332440][ T5064] veth0_vlan: entered promiscuous mode [ 245.406280][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.417120][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.435022][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.511821][ T5064] veth1_vlan: entered promiscuous mode [ 245.582179][ T5072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.595326][ T5072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.611140][ T5072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.742549][ T5076] veth0_macvtap: entered promiscuous mode [ 245.813794][ T5072] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.824369][ T5072] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.834665][ T5072] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.843860][ T5072] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.932383][ T5076] veth1_macvtap: entered promiscuous mode [ 245.990863][ T5064] veth0_macvtap: entered promiscuous mode [ 246.133799][ T5064] veth1_macvtap: entered promiscuous mode [ 246.236272][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.250101][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.261941][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.273282][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.288737][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.460085][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.471875][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.482094][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.492905][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.503091][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.515477][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.534513][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.544478][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.557785][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.568741][ T5076] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.580892][ T5076] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.599727][ T5076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.674327][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.685240][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.697322][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.708479][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.718945][ T5064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.729738][ T5064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.751115][ T5064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.851551][ T5076] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.860889][ T5076] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.870632][ T5076] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.879750][ T5076] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.970666][ T5064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.980051][ T5064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.990427][ T5064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.000287][ T5064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.495140][ T5063] veth0_vlan: entered promiscuous mode [ 247.615595][ T5063] veth1_vlan: entered promiscuous mode [ 248.125465][ T5063] veth0_macvtap: entered promiscuous mode [ 248.227880][ T5063] veth1_macvtap: entered promiscuous mode [ 248.470541][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.483432][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.494850][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.505723][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.515970][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.527195][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.537382][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.548325][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.563789][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.756287][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.767483][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.777705][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.790144][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.801859][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.813830][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.824241][ T5063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.835058][ T5063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.850584][ T5063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.131977][ T5063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.141271][ T5063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.152063][ T5063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.162248][ T5063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.149877][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.157960][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.352085][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.360920][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.654864][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.663553][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.853290][ T3823] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.862026][ T3823] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.745265][ T5120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.753537][ T5120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.011042][ T25] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.019280][ T25] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.177557][ T4039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.185936][ T4039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.344467][ T1058] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.362435][ T1058] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.424718][ T4114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.432852][ T4114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.601791][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.614583][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 257.448628][ T5277] Zero length message leads to an empty skb [ 259.330142][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.338327][ C1] hrtimer: interrupt took 251455 ns [ 259.340694][ T5305] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.401740][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.326562][ T5313] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 260.335334][ T5313] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.991607][ T5332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 262.053244][ T5337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 262.083643][ T5339] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.864569][ T4318] ===================================================== [ 262.871943][ T4318] BUG: KMSAN: uninit-value in sock_map_delete_elem+0x173/0x250 [ 262.880183][ T4318] sock_map_delete_elem+0x173/0x250 [ 262.885559][ T4318] bpf_map_delete_elem+0x5c/0x80 [ 262.890794][ T4318] ___bpf_prog_run+0x13fe/0xe0f0 [ 262.895914][ T4318] __bpf_prog_run64+0xb5/0xe0 [ 262.900828][ T4318] bpf_trace_run2+0x116/0x300 [ 262.905795][ T4318] __bpf_trace_kfree+0x29/0x40 [ 262.910780][ T4318] kfree+0x69e/0xa60 [ 262.914846][ T4318] ieee80211_inform_bss+0x138d/0x1460 [ 262.921172][ T4318] cfg80211_inform_single_bss_data+0x1c40/0x3100 [ 262.927704][ T4318] cfg80211_inform_bss_data+0x2c8/0x8930 [ 262.933594][ T4318] cfg80211_inform_bss_frame_data+0x739/0x9e0 [ 262.939945][ T4318] ieee80211_bss_info_update+0x900/0xad0 [ 262.945883][ T4318] ieee80211_ibss_rx_queued_mgmt+0x2f3b/0x3de0 [ 262.952793][ T4318] ieee80211_iface_work+0x1028/0x18e0 [ 262.958535][ T4318] cfg80211_wiphy_work+0x471/0x510 [ 262.963819][ T4318] process_scheduled_works+0xa81/0x1bd0 [ 262.969659][ T4318] worker_thread+0xea5/0x1560 [ 262.974692][ T4318] kthread+0x3e2/0x540 [ 262.978995][ T4318] ret_from_fork+0x6d/0x90 [ 262.983559][ T4318] ret_from_fork_asm+0x1a/0x30 [ 262.988590][ T4318] [ 262.990993][ T4318] Local variable stack created at: [ 262.996190][ T4318] __bpf_prog_run64+0x45/0xe0 [ 263.001093][ T4318] bpf_trace_run2+0x116/0x300 [ 263.005968][ T4318] [ 263.008443][ T4318] CPU: 0 PID: 4318 Comm: kworker/u8:26 Not tainted 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 263.018545][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 263.028837][ T4318] Workqueue: events_unbound cfg80211_wiphy_work [ 263.035274][ T4318] ===================================================== [ 263.042383][ T4318] Disabling lock debugging due to kernel taint [ 263.048703][ T4318] Kernel panic - not syncing: kmsan.panic set ... [ 263.055216][ T4318] CPU: 0 PID: 4318 Comm: kworker/u8:26 Tainted: G B 6.9.0-syzkaller-02339-g101b7a97143a #0 [ 263.066746][ T4318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 263.076939][ T4318] Workqueue: events_unbound cfg80211_wiphy_work [ 263.083373][ T4318] Call Trace: [ 263.086750][ T4318] [ 263.089801][ T4318] dump_stack_lvl+0x216/0x2d0 [ 263.094679][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.100663][ T4318] dump_stack+0x1e/0x30 [ 263.105000][ T4318] panic+0x4e2/0xcd0 [ 263.109072][ T4318] ? kmsan_get_metadata+0xf1/0x1d0 [ 263.114361][ T4318] kmsan_report+0x2d5/0x2e0 [ 263.119032][ T4318] ? _ieee802_11_parse_elems_full+0x707b/0x70e0 [ 263.125469][ T4318] ? __msan_warning+0x95/0x120 [ 263.130376][ T4318] ? sock_map_delete_elem+0x173/0x250 [ 263.135931][ T4318] ? bpf_map_delete_elem+0x5c/0x80 [ 263.141231][ T4318] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 263.146515][ T4318] ? __bpf_prog_run64+0xb5/0xe0 [ 263.151539][ T4318] ? bpf_trace_run2+0x116/0x300 [ 263.156545][ T4318] ? __bpf_trace_kfree+0x29/0x40 [ 263.161634][ T4318] ? kfree+0x69e/0xa60 [ 263.165838][ T4318] ? ieee80211_inform_bss+0x138d/0x1460 [ 263.171590][ T4318] ? cfg80211_inform_single_bss_data+0x1c40/0x3100 [ 263.178292][ T4318] ? cfg80211_inform_bss_data+0x2c8/0x8930 [ 263.184295][ T4318] ? cfg80211_inform_bss_frame_data+0x739/0x9e0 [ 263.190731][ T4318] ? ieee80211_bss_info_update+0x900/0xad0 [ 263.196747][ T4318] ? ieee80211_ibss_rx_queued_mgmt+0x2f3b/0x3de0 [ 263.203375][ T4318] ? ieee80211_iface_work+0x1028/0x18e0 [ 263.209120][ T4318] ? cfg80211_wiphy_work+0x471/0x510 [ 263.214568][ T4318] ? process_scheduled_works+0xa81/0x1bd0 [ 263.220479][ T4318] ? worker_thread+0xea5/0x1560 [ 263.225521][ T4318] ? kthread+0x3e2/0x540 [ 263.229955][ T4318] ? ret_from_fork+0x6d/0x90 [ 263.234714][ T4318] ? ret_from_fork_asm+0x1a/0x30 [ 263.239842][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.245834][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.251949][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.257325][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.262707][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.268717][ T4318] __msan_warning+0x95/0x120 [ 263.273484][ T4318] sock_map_delete_elem+0x173/0x250 [ 263.278896][ T4318] ? __pfx_sock_map_delete_elem+0x10/0x10 [ 263.284807][ T4318] bpf_map_delete_elem+0x5c/0x80 [ 263.289944][ T4318] ___bpf_prog_run+0x13fe/0xe0f0 [ 263.295054][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.300438][ T4318] __bpf_prog_run64+0xb5/0xe0 [ 263.305378][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.311349][ T4318] ? __pfx___bpf_prog_run64+0x10/0x10 [ 263.316916][ T4318] ? __pfx___bpf_prog_run64+0x10/0x10 [ 263.322465][ T4318] bpf_trace_run2+0x116/0x300 [ 263.327307][ T4318] ? ieee80211_inform_bss+0x138d/0x1460 [ 263.333075][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.338443][ T4318] ? ieee80211_inform_bss+0x138d/0x1460 [ 263.344190][ T4318] __bpf_trace_kfree+0x29/0x40 [ 263.349117][ T4318] kfree+0x69e/0xa60 [ 263.353157][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.358516][ T4318] ? ieee80211_inform_bss+0x138d/0x1460 [ 263.364262][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.370247][ T4318] ieee80211_inform_bss+0x138d/0x1460 [ 263.375851][ T4318] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 263.381862][ T4318] cfg80211_inform_single_bss_data+0x1c40/0x3100 [ 263.388469][ T4318] ? filter_irq_stacks+0x60/0x1a0 [ 263.393817][ T4318] cfg80211_inform_bss_data+0x2c8/0x8930 [ 263.399765][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.405711][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.411348][ T4318] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 263.417443][ T4318] ? ieee802_11_parse_elems_full+0x1a6f/0x46b0 [ 263.423803][ T4318] ? filter_irq_stacks+0x60/0x1a0 [ 263.429042][ T4318] ? stack_depot_save_flags+0x2c/0x6e0 [ 263.434674][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.440045][ T4318] ? cfg80211_defragment_element+0x111/0x520 [ 263.446226][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.451595][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.456984][ T4318] ? ieee80211_bss_info_update+0x16e/0xad0 [ 263.463026][ T4318] cfg80211_inform_bss_frame_data+0x739/0x9e0 [ 263.469325][ T4318] ? kmsan_report+0x2a0/0x2e0 [ 263.474165][ T4318] ? kmsan_internal_check_memory+0x4a4/0x560 [ 263.480369][ T4318] ieee80211_bss_info_update+0x900/0xad0 [ 263.486203][ T4318] ? kmsan_get_metadata+0xf1/0x1d0 [ 263.491581][ T4318] ieee80211_ibss_rx_queued_mgmt+0x2f3b/0x3de0 [ 263.497951][ T4318] ? kmsan_get_metadata+0x146/0x1d0 [ 263.503359][ T4318] ieee80211_iface_work+0x1028/0x18e0 [ 263.508950][ T4318] ? __pfx_ieee80211_iface_work+0x10/0x10 [ 263.514899][ T4318] cfg80211_wiphy_work+0x471/0x510 [ 263.520200][ T4318] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 263.525995][ T4318] process_scheduled_works+0xa81/0x1bd0 [ 263.531756][ T4318] worker_thread+0xea5/0x1560 [ 263.536719][ T4318] kthread+0x3e2/0x540 [ 263.540971][ T4318] ? __pfx_worker_thread+0x10/0x10 [ 263.546262][ T4318] ? __pfx_kthread+0x10/0x10 [ 263.551032][ T4318] ret_from_fork+0x6d/0x90 [ 263.555605][ T4318] ? __pfx_kthread+0x10/0x10 [ 263.560383][ T4318] ret_from_fork_asm+0x1a/0x30 [ 263.565347][ T4318] [ 263.568742][ T4318] Kernel Offset: disabled [ 263.573137][ T4318] Rebooting in 86400 seconds..