last executing test programs: 4.370658649s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 4.053358785s ago: executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0xa, &(0x7f0000000000)={0x0, @in, 0x0, 0x8, 0x245, 0x9, 0x69, 0x40}, 0x98) connect$inet(r0, &(0x7f0000000180)={0x10, 0x2}, 0x10) 3.912607441s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x4}}}]}, 0x24}}, 0x0) 3.751910059s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x3, 0x4) sendto$inet(r0, &(0x7f0000000040)="0d02", 0xffec, 0x0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 3.575609181s ago: executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8901, &(0x7f0000000000)=@generic={0x3}) 3.435886197s ago: executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a4f1c000000"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffe76, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LOG_PREFIX={0xe, 0x2, 0x1, 0x0, 'syzkaller\x00'}, @NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 2.362773206s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) sendmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) close(r5) 2.207407407s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'team_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000fce9b4b5", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 1.868073108s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200f1ff8500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='global_dirty_state\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 1.609378273s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r0, &(0x7f0000000000)={0x10}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r2, 0x11, 0x0, 0x0, {0x25}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) 1.423541032s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) r2 = accept$inet6(r0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20c) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, 0x0, 0x0) 1.371609965s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x76, &(0x7f00000001c0)=ANY=[], 0x8) 1.274583047s ago: executing program 2: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='consume_skb\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20}, 0x20}}, 0x0) 1.210368485s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x30004001) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 1.081540906s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x2) 1.039926232s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x700, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.024728046s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'team_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000fce9b4b5", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) 947.701181ms ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local}, {}, {}, 0x0, 0x1}, {{@in=@dev}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0xe8f68f83eb3e5ad8, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000680), 0x10}, 0x90) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x0, 0x0, 0x0) r3 = accept(r0, &(0x7f00000001c0)=@phonet, &(0x7f0000000100)=0x80) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000002c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="7a00330080000000ffffffffffff08021100000050505050505000000000000000000000000001000301"], 0x98}}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x118, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x3, 0x2}, {0x80, 0x6}, {0x3, 0x5}, {0x3, 0x4}, {0x3, 0x4}, {0x0, 0x4}, {0x4, 0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x80}, {0xe5, 0x7}, {0x7f, 0x4}, {0x2, 0x7}, {0x46, 0x3}, {0x0, 0x7}, {0xd9, 0x6}, {0xff, 0x7}, {0xa2}, {0x9, 0x2}], "f7d2c4fdcd1e29e1"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x6, 0x3}], "cd8c48652da80721"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2}, {0x8}, {0xff, 0x7}, {0x29, 0x5}, {0xc0, 0x5}, {0x40}, {0x57, 0x1}, {0x9e, 0x1}, {0x4, 0x7}, {0x96, 0x6}, {0x1, 0x1}, {0x9, 0x4}, {0x3, 0x7}, {0x1, 0x3}], "dac5f2e39e55fc20"}}, @NL80211_ATTR_QOS_MAP={0x1e, 0xc7, {[{0x1f, 0x2}, {0x7f, 0x1}, {0x0, 0x2}, {0x6, 0x1}, {0x1, 0x42}, {0xd, 0x3}, {0xd0, 0x6}, {0x0, 0x2}, {}], "0000000000000016"}}, @NL80211_ATTR_QOS_MAP={0x18, 0xc7, {[{0xc0, 0x2}, {0x4, 0x7}, {0x9}, {0x0, 0x6}, {0x2e}, {0x3f, 0x1}], "9c9312b61c99a06c"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x2, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x20, 0x6}, {0x3, 0x4}, {0x9}, {0x1f, 0x5}, {0x1, 0x4}, {0x5, 0x3}, {0x7, 0x5}, {0x20, 0x6}, {0x7, 0x4}, {0x8, 0x6}, {0xe0, 0x7}], "8bd9e964c5c2c8a9"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x2, 0x3}, {0x0, 0x1}, {0x44, 0x1}, {0xff, 0x5}, {0x20, 0x6}, {0x5, 0x6}, {0x9d, 0x1}, {0xf8, 0x1}, {0x4e}, {0x4, 0x1}, {0x0, 0x4}, {0xde, 0x1}, {0x1f, 0x4}, {0x40, 0x3}, {0x1, 0x2}, {0x0, 0x3}, {0x8, 0x3}, {0x1, 0x6}, {0xc}, {0x6, 0x5}, {0x6}], "15d53b7ba745de3d"}}]}, 0x118}, 0x1, 0x0, 0x0, 0x4}, 0x850) socket$kcm(0x10, 0x2, 0x0) 626.034241ms ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r2}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 593.591549ms ago: executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x40000001, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}}, [@tmpl={0x44, 0x8, [{{@in=@multicast1}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000001c0016801800018014000a00000007834133860d032b000000000000080004"], 0x44}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x22}}]}, 0x78}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f0000000280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x80, 0x0) ioctl$SIOCRSGCAUSE(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)) 564.12013ms ago: executing program 4: r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000000)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[], 0x0) 405.907536ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xd, &(0x7f0000000080), 0x4) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) 377.600458ms ago: executing program 0: write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socketpair(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) 324.780975ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000f40)="5c00000012006bab9a3fe3d86e17aa0a076b87780400000009b9acb7cc541a0038001d00880cd2dabfc117d34460bc06000000a705251ef01fe4cd08f2f79d825c940b04a8949a3651f60a8496d9984a3728b7504a83f42800000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 307.414135ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="1400000023000b03d25a806f8c6394f91f24fc60", 0x14}], 0x1}, 0x0) 168.462788ms ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r2) 155.060253ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x76, &(0x7f00000001c0)=ANY=[], 0x8) 147.207571ms ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='qdisc_create\x00', r3}, 0x28) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 106.020646ms ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150000000000000000000000000000050000000a00"], 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3c9ffff01000000010000005600000025000000f15a41d40400000007fd17e5ffff0808040000000000000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) 0s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'team_slave_1\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001100010000000000000000fce9b4b5", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.156' (ED25519) to the list of known hosts. 2024/06/08 12:36:30 fuzzer started 2024/06/08 12:36:30 dialing manager at 10.128.0.169:30016 [ 68.801969][ T5094] cgroup: Unknown subsys name 'net' [ 68.967577][ T5094] cgroup: Unknown subsys name 'rlimit' 2024/06/08 12:36:32 starting 5 executor processes [ 70.316530][ T5102] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.666994][ T5119] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.678047][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.707890][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.715900][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.724203][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.730728][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.753399][ T5130] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.761754][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.773217][ T5132] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.783036][ T5132] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.783146][ T5130] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.791154][ T5133] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.799012][ T5132] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.814185][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.818304][ T5135] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.821545][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 71.831142][ T5135] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.836541][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.843608][ T5135] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.849833][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.857233][ T5135] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 71.864284][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.870666][ T5135] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.877745][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.891473][ T5132] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.898703][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.902528][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.910925][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.914968][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.921182][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.927541][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.934040][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.553077][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 72.624926][ T5125] chnl_net:caif_netlink_parms(): no params data found [ 72.650295][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 72.762289][ T5128] chnl_net:caif_netlink_parms(): no params data found [ 72.808314][ T5123] chnl_net:caif_netlink_parms(): no params data found [ 72.881066][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.888781][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.897468][ T5120] bridge_slave_0: entered allmulticast mode [ 72.905949][ T5120] bridge_slave_0: entered promiscuous mode [ 72.915806][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.922947][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.930170][ T5120] bridge_slave_1: entered allmulticast mode [ 72.938335][ T5120] bridge_slave_1: entered promiscuous mode [ 73.021148][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.071013][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.092031][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.101649][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.111828][ T5116] bridge_slave_0: entered allmulticast mode [ 73.119827][ T5116] bridge_slave_0: entered promiscuous mode [ 73.180173][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.187899][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.195738][ T5116] bridge_slave_1: entered allmulticast mode [ 73.202685][ T5116] bridge_slave_1: entered promiscuous mode [ 73.210829][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.218453][ T5125] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.226455][ T5125] bridge_slave_0: entered allmulticast mode [ 73.234511][ T5125] bridge_slave_0: entered promiscuous mode [ 73.242562][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.249848][ T5125] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.257114][ T5125] bridge_slave_1: entered allmulticast mode [ 73.264271][ T5125] bridge_slave_1: entered promiscuous mode [ 73.276146][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.283262][ T5128] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.290768][ T5128] bridge_slave_0: entered allmulticast mode [ 73.297918][ T5128] bridge_slave_0: entered promiscuous mode [ 73.309415][ T5120] team0: Port device team_slave_0 added [ 73.367472][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.376881][ T5128] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.386476][ T5128] bridge_slave_1: entered allmulticast mode [ 73.393743][ T5128] bridge_slave_1: entered promiscuous mode [ 73.402419][ T5120] team0: Port device team_slave_1 added [ 73.444051][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.451370][ T5123] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.459312][ T5123] bridge_slave_0: entered allmulticast mode [ 73.467212][ T5123] bridge_slave_0: entered promiscuous mode [ 73.477055][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.484603][ T5123] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.491793][ T5123] bridge_slave_1: entered allmulticast mode [ 73.499154][ T5123] bridge_slave_1: entered promiscuous mode [ 73.532715][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.548801][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.560548][ T5125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.573427][ T5125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.610019][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.617286][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.644118][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.693009][ T5128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.703391][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.713899][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.739966][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.770841][ T5116] team0: Port device team_slave_0 added [ 73.794967][ T5125] team0: Port device team_slave_0 added [ 73.804826][ T5123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.816321][ T5128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.833481][ T5116] team0: Port device team_slave_1 added [ 73.853490][ T5125] team0: Port device team_slave_1 added [ 73.861816][ T5123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.911743][ T5128] team0: Port device team_slave_0 added [ 73.922013][ T5128] team0: Port device team_slave_1 added [ 73.983721][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.990704][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.020302][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.031427][ T5119] Bluetooth: hci4: command tx timeout [ 74.034242][ T5121] Bluetooth: hci2: command tx timeout [ 74.040421][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.042450][ T53] Bluetooth: hci1: command tx timeout [ 74.049400][ T5126] Bluetooth: hci0: command tx timeout [ 74.049666][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.049694][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.064516][ T5119] Bluetooth: hci3: command tx timeout [ 74.108931][ T5123] team0: Port device team_slave_0 added [ 74.131886][ T5120] hsr_slave_0: entered promiscuous mode [ 74.138492][ T5120] hsr_slave_1: entered promiscuous mode [ 74.167520][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.174608][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.200793][ T5125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.213853][ T5125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.220851][ T5125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.246921][ T5125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.260287][ T5123] team0: Port device team_slave_1 added [ 74.267812][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.276505][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.303099][ T5128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.317139][ T5128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.324578][ T5128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.351185][ T5128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.470407][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.477710][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.505167][ T5123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.521304][ T5116] hsr_slave_0: entered promiscuous mode [ 74.528807][ T5116] hsr_slave_1: entered promiscuous mode [ 74.535563][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.543460][ T5116] Cannot create hsr debugfs directory [ 74.588145][ T5125] hsr_slave_0: entered promiscuous mode [ 74.594628][ T5125] hsr_slave_1: entered promiscuous mode [ 74.600696][ T5125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.608822][ T5125] Cannot create hsr debugfs directory [ 74.625780][ T5123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.632923][ T5123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.659434][ T5123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.712928][ T5128] hsr_slave_0: entered promiscuous mode [ 74.720047][ T5128] hsr_slave_1: entered promiscuous mode [ 74.726637][ T5128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.734575][ T5128] Cannot create hsr debugfs directory [ 74.991806][ T5123] hsr_slave_0: entered promiscuous mode [ 74.999272][ T5123] hsr_slave_1: entered promiscuous mode [ 75.005735][ T5123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.013284][ T5123] Cannot create hsr debugfs directory [ 75.226404][ T5120] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.241767][ T5120] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.258906][ T5120] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.281222][ T5120] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.352054][ T5128] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.368443][ T5128] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.380831][ T5128] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.391601][ T5128] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.492902][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.509113][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.519456][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.531296][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.652781][ T5125] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.665832][ T5125] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.677904][ T5125] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.693265][ T5125] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.812990][ T5123] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.826238][ T5123] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.837442][ T5123] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.850469][ T5123] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.876082][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.936978][ T5128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.966539][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.000436][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.007873][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.032007][ T5128] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.066419][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.073663][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.103937][ T53] Bluetooth: hci1: command tx timeout [ 76.109395][ T53] Bluetooth: hci2: command tx timeout [ 76.114979][ T5121] Bluetooth: hci4: command tx timeout [ 76.115005][ T5126] Bluetooth: hci0: command tx timeout [ 76.126505][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.127016][ T5119] Bluetooth: hci3: command tx timeout [ 76.144210][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.151508][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.210215][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.217393][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.258184][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.312178][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.319413][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.352894][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.360236][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.446615][ T5125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.550820][ T5123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.612322][ T5125] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.640057][ T5123] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.667089][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.674308][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.748146][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.755318][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.800795][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.808021][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.876147][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.883311][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.957954][ T5125] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.980694][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.991190][ T5128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.094721][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.265442][ T5120] veth0_vlan: entered promiscuous mode [ 77.282329][ T5128] veth0_vlan: entered promiscuous mode [ 77.309349][ T5120] veth1_vlan: entered promiscuous mode [ 77.333068][ T5128] veth1_vlan: entered promiscuous mode [ 77.377153][ T5125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.532293][ T5120] veth0_macvtap: entered promiscuous mode [ 77.545174][ T5125] veth0_vlan: entered promiscuous mode [ 77.562283][ T5120] veth1_macvtap: entered promiscuous mode [ 77.584720][ T5128] veth0_macvtap: entered promiscuous mode [ 77.606732][ T5128] veth1_macvtap: entered promiscuous mode [ 77.656910][ T5125] veth1_vlan: entered promiscuous mode [ 77.697283][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.715977][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.727023][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.739508][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.753282][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.782995][ T5123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.802765][ T5120] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.813353][ T5120] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.822602][ T5120] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.831527][ T5120] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.848077][ T5128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.859161][ T5128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.873313][ T5128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.905746][ T5125] veth0_macvtap: entered promiscuous mode [ 77.935570][ T5125] veth1_macvtap: entered promiscuous mode [ 77.953156][ T5128] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.966651][ T5128] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977849][ T5128] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.987897][ T5128] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.014125][ T5116] veth0_vlan: entered promiscuous mode [ 78.068562][ T5116] veth1_vlan: entered promiscuous mode [ 78.098931][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.112471][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.123771][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.134920][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.147489][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.180253][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.191414][ T5119] Bluetooth: hci3: command tx timeout [ 78.191459][ T5119] Bluetooth: hci2: command tx timeout [ 78.191494][ T5119] Bluetooth: hci4: command tx timeout [ 78.194660][ T53] Bluetooth: hci0: command tx timeout [ 78.201861][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.203134][ T53] Bluetooth: hci1: command tx timeout [ 78.209048][ T5125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.239951][ T5125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.251939][ T5125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.291439][ T5123] veth0_vlan: entered promiscuous mode [ 78.306732][ T5125] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.316029][ T5125] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.325861][ T5125] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.335573][ T5125] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.398213][ T5123] veth1_vlan: entered promiscuous mode [ 78.436432][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.451864][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.480050][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.489143][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.509529][ T5123] veth0_macvtap: entered promiscuous mode [ 78.546340][ T5123] veth1_macvtap: entered promiscuous mode [ 78.567975][ T5116] veth0_macvtap: entered promiscuous mode [ 78.600761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.622644][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.628453][ T5116] veth1_macvtap: entered promiscuous mode [ 78.673150][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.689447][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.699506][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.709976][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.720038][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.730550][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.742794][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.778620][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.787044][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.797764][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.808737][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.819062][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.830414][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.840612][ T5123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.851727][ T5123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.863161][ T5123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.883912][ T5123] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.892748][ T5123] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.898471][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.912392][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.922173][ T5123] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.931604][ T5123] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.966242][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.981548][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.992086][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.002673][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.016039][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.028839][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.039945][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.050721][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.062111][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.089744][ T5203] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.168435][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.208841][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.220009][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.238005][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.264514][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.281373][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.298683][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.323304][ T5207] Driver unsupported XDP return value 0 on prog (id 2) dev N/A, expect packet loss! [ 79.338696][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.357046][ T5209] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.375270][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.399922][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.430625][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.461996][ T5206] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.515805][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.536155][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.572703][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.612708][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.716936][ T5209] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 79.902986][ T5216] bond0: entered promiscuous mode [ 79.921907][ T5216] bond_slave_0: entered promiscuous mode [ 79.934765][ T5216] bond_slave_1: entered promiscuous mode [ 79.971424][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.985675][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.999183][ T5220] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 80.062166][ T5221] : renamed from veth0_vlan (while UP) [ 80.098666][ T5225] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.113203][ T2835] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.128792][ T2835] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.142624][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.218524][ T5224] team0: Device erspan0 is up. Set it down before adding it as a team port [ 80.255389][ T2881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.263283][ T2881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.277045][ T5119] Bluetooth: hci1: command tx timeout [ 80.282969][ T5119] Bluetooth: hci0: command tx timeout [ 80.289139][ T5119] Bluetooth: hci4: command tx timeout [ 80.291300][ T53] Bluetooth: hci2: command tx timeout [ 80.301079][ T5119] Bluetooth: hci3: command tx timeout [ 80.315975][ T5224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.330085][ T5228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.338247][ T5224] erspan0: entered promiscuous mode [ 80.374475][ T5224] erspan0: entered allmulticast mode [ 80.397587][ T5230] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.440581][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.451568][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.639141][ T5235] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 80.748370][ T5235] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 81.494104][ T5118] IPVS: starting estimator thread 0... [ 81.594921][ T5266] IPVS: using max 17 ests per chain, 40800 per kthread [ 81.851489][ T5282] bridge_slave_0: left allmulticast mode [ 81.858633][ T5282] bridge_slave_0: left promiscuous mode [ 81.874625][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.902312][ T5282] bridge_slave_1: left allmulticast mode [ 81.926324][ T5282] bridge_slave_1: left promiscuous mode [ 81.936808][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.985328][ T5282] bond0: (slave bond_slave_0): Releasing backup interface [ 82.016139][ T5282] bond0: (slave bond_slave_1): Releasing backup interface [ 82.069501][ T5282] team0: Port device team_slave_0 removed [ 82.100994][ T5282] team0: Port device team_slave_1 removed [ 82.118359][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.136901][ T5282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.150072][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.160638][ T5282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.294503][ T5283] bond0: (slave geneve2): Opening slave failed [ 82.453409][ T5288] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.982282][ T5315] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 84.897579][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 85.251856][ T5425] team0: Port device virt_wifi0 added [ 85.294888][ T5434] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.364224][ T5437] bridge_slave_1: left allmulticast mode [ 85.370199][ T5437] bridge_slave_1: left promiscuous mode [ 85.381996][ T5437] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.499533][ T5443] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.507669][ T5443] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.564853][ T5443] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.572256][ T5443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.581001][ T5443] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.588433][ T5443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.664204][ T5443] team0: Port device bridge0 added [ 85.692575][ T5453] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 85.876847][ T5456] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.094644][ T5453] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.103068][ T5453] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.693002][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.745486][ T5453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.065222][ T784] cfg80211: failed to load regulatory.db [ 87.074877][ T5453] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.117028][ T5453] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.160579][ T5453] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.173067][ T5453] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.425371][ T5485] team0: Port device team_slave_0 removed [ 87.500291][ T5487] team0: Port device virt_wifi0 added [ 87.514577][ T5502] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 87.551671][ T5504] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 87.600506][ T5504] syz-executor.3 (5504) used greatest stack depth: 18288 bytes left [ 87.915004][ T5530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.046702][ T5540] veth1_macvtap: left promiscuous mode [ 88.052407][ T5540] macsec0: entered allmulticast mode [ 88.100578][ T5540] veth1_macvtap: entered promiscuous mode [ 88.131690][ T5540] veth1_macvtap: entered allmulticast mode [ 88.160394][ T5540] macsec0: left allmulticast mode [ 88.177211][ T5540] veth1_macvtap: left allmulticast mode [ 88.580277][ T5568] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.612931][ T5568] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.624084][ T5568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 89.974493][ T5638] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 90.051047][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.072042][ T5638] team0: entered promiscuous mode [ 90.103754][ T5638] team_slave_1: entered promiscuous mode [ 90.117459][ T5638] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 90.148184][ T5638] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.278760][ T5648] syzkaller1: entered promiscuous mode [ 90.291140][ T5648] syzkaller1: entered allmulticast mode [ 90.337700][ T5663] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 90.366409][ T5660] tipc: Started in network mode [ 90.372644][ T5660] tipc: Node identity ac1414aa, cluster identity 4711 [ 90.382698][ T5660] tipc: Enabled bearer , priority 10 [ 90.823120][ T5673] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 90.874477][ T5673] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 90.967957][ T5673] bond0: (slave team0): Releasing backup interface [ 90.980642][ T5673] team0: left promiscuous mode [ 90.993480][ T5673] team_slave_1: left promiscuous mode [ 91.018209][ T5673] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 91.040920][ T5673] bridge0: port 3(team0) entered blocking state [ 91.051431][ T5673] bridge0: port 3(team0) entered disabled state [ 91.069726][ T5673] team0: entered allmulticast mode [ 91.077055][ T5673] team_slave_1: entered allmulticast mode [ 91.083062][ T5673] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 91.100070][ T5673] team0: entered promiscuous mode [ 91.107343][ T5673] team_slave_1: entered promiscuous mode [ 91.113446][ T5673] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 91.509492][ T5118] tipc: Node number set to 2886997162 [ 91.724562][ T5719] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 91.745367][ T5719] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.775035][ T5719] bond0: (slave team0): Enslaving as an active interface with an up link [ 91.820191][ T5727] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 91.842329][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.886898][ T5727] bond0: (slave team0): Releasing backup interface [ 91.913393][ T5727] bridge0: port 3(team0) entered blocking state [ 91.932349][ T5727] bridge0: port 3(team0) entered disabled state [ 91.946282][ T5727] team0: entered allmulticast mode [ 91.952756][ T5727] team_slave_0: entered allmulticast mode [ 91.971604][ T5727] team_slave_1: entered allmulticast mode [ 91.988006][ T5727] team0: entered promiscuous mode [ 92.002868][ T5727] team_slave_0: entered promiscuous mode [ 92.013866][ T5727] team_slave_1: entered promiscuous mode [ 92.082401][ T5732] lo speed is unknown, defaulting to 1000 [ 92.197927][ T5732] lo speed is unknown, defaulting to 1000 [ 92.213018][ T5732] lo speed is unknown, defaulting to 1000 [ 92.872463][ T5732] infiniband syz0: set active [ 92.884713][ T5118] lo speed is unknown, defaulting to 1000 [ 92.913691][ T5732] infiniband syz0: added lo [ 92.915014][ T5775] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 92.921837][ T5732] syz0: rxe_create_cq: returned err = -12 [ 92.941703][ T5775] team0: left allmulticast mode [ 92.947862][ T5775] team_slave_0: left allmulticast mode [ 92.956166][ T5775] team_slave_1: left allmulticast mode [ 92.960455][ T5732] infiniband syz0: Couldn't create ib_mad CQ [ 92.962016][ T5775] team0: left promiscuous mode [ 92.973405][ T5775] team_slave_0: left promiscuous mode [ 92.979513][ T5732] infiniband syz0: Couldn't open port 1 [ 92.980465][ T5775] team_slave_1: left promiscuous mode [ 93.043999][ T5775] bridge0: port 3(team0) entered disabled state [ 93.062413][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.071404][ T5732] RDS/IB: syz0: added [ 93.077582][ T5732] smc: adding ib device syz0 with port count 1 [ 93.096650][ T5732] smc: ib device syz0 port 1 has pnetid [ 93.105462][ T5775] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.131947][ T5778] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 93.153056][ T5778] bond0: (slave team0): Releasing backup interface [ 93.176695][ T5778] bridge0: port 3(team0) entered blocking state [ 93.183187][ T5778] bridge0: port 3(team0) entered disabled state [ 93.197411][ T5778] team0: entered allmulticast mode [ 93.202639][ T5778] team_slave_0: entered allmulticast mode [ 93.212638][ T5778] team_slave_1: entered allmulticast mode [ 93.225765][ T5778] team0: entered promiscuous mode [ 93.230951][ T5778] team_slave_0: entered promiscuous mode [ 93.252904][ T5778] team_slave_1: entered promiscuous mode [ 93.271602][ T8] lo speed is unknown, defaulting to 1000 [ 93.283169][ T5783] team0: Port device virt_wifi0 added [ 93.310031][ T5732] lo speed is unknown, defaulting to 1000 [ 93.321409][ T5783] syz-executor.3 (5783) used greatest stack depth: 18192 bytes left [ 93.695668][ T5797] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.729663][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.884532][ T5800] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.922976][ T5797] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 93.933343][ T5797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.948410][ T5732] lo speed is unknown, defaulting to 1000 [ 93.967621][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.039066][ T5800] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.173278][ T5800] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.263133][ T5818] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 94.300209][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.334179][ T5818] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.420722][ T5800] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.474465][ T5822] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 94.495100][ T5822] bond0: (slave team0): Releasing backup interface [ 94.522713][ T5822] bridge0: port 1(team0) entered blocking state [ 94.530384][ T5822] bridge0: port 1(team0) entered disabled state [ 94.538099][ T5822] team0: entered allmulticast mode [ 94.546437][ T5822] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 94.555712][ T5822] team0: entered promiscuous mode [ 94.560769][ T5822] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 94.573407][ T5732] lo speed is unknown, defaulting to 1000 [ 94.738715][ T5800] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.772604][ T5800] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800649][ T5800] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.810677][ T5832] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.850790][ T5800] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.993442][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.017765][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.107769][ T5732] lo speed is unknown, defaulting to 1000 [ 95.311695][ T2881] ------------[ cut here ]------------ [ 95.317570][ T2881] WARNING: CPU: 0 PID: 2881 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 95.327985][ T2881] Modules linked in: [ 95.331929][ T2881] CPU: 0 PID: 2881 Comm: kworker/u8:10 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 95.342406][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 95.352537][ T2881] Workqueue: cfg80211 cfg80211_event_work [ 95.358521][ T2881] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 95.366446][ T2881] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 6b b3 f6 85 db 74 29 e8 aa 97 99 f6 84 c0 74 27 e8 81 67 b3 f6 e9 84 00 00 00 e8 77 67 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 67 b3 f6 eb [ 95.389095][ T2881] RSP: 0018:ffffc900099df9e0 EFLAGS: 00010293 [ 95.395354][ T2881] RAX: ffffffff8ae2bf09 RBX: 0000000000000000 RCX: ffff88802bc43c00 [ 95.403364][ T2881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2024/06/08 12:36:57 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 95.411526][ T2881] RBP: ffffc900099dfb00 R08: ffffffff8ae2bad9 R09: 1ffffffff25f56bd [ 95.419610][ T2881] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff8880625f2898 [ 95.427673][ T2881] R13: dffffc0000000000 R14: ffff8880625f2818 R15: ffff88805ee25000 [ 95.435894][ T2881] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 95.444985][ T2881] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.451598][ T2881] CR2: 000000000000fff3 CR3: 0000000017baa000 CR4: 00000000003506f0 [ 95.459834][ T2881] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 95.468998][ T2881] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 95.478005][ T2881] Call Trace: [ 95.481340][ T2881] [ 95.484365][ T2881] ? __warn+0x163/0x4e0 [ 95.488567][ T2881] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 95.494686][ T2881] ? report_bug+0x2b3/0x500 [ 95.499272][ T2881] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 95.505331][ T2881] ? handle_bug+0x3e/0x70 [ 95.509684][ T2881] ? exc_invalid_op+0x1a/0x50 [ 95.514474][ T2881] ? asm_exc_invalid_op+0x1a/0x20 [ 95.519547][ T2881] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 95.525613][ T2881] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 95.531656][ T2881] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 95.537827][ T2881] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 95.544351][ T2881] ? lockdep_hardirqs_on+0x99/0x150 [ 95.549605][ T2881] cfg80211_process_wdev_events+0x356/0x510 [ 95.555708][ T2881] cfg80211_process_rdev_events+0xac/0x110 [ 95.561553][ T2881] ? process_scheduled_works+0x945/0x1830 [ 95.568447][ T2881] cfg80211_event_work+0x2f/0x40 [ 95.573427][ T2881] process_scheduled_works+0xa2c/0x1830 [ 95.580022][ T2881] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.586133][ T2881] ? assign_work+0x364/0x3d0 [ 95.590771][ T2881] worker_thread+0x86d/0xd70 [ 95.595515][ T2881] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 95.601451][ T2881] ? __kthread_parkme+0x169/0x1d0 [ 95.606552][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 95.611694][ T2881] kthread+0x2f0/0x390 [ 95.615839][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 95.620988][ T2881] ? __pfx_kthread+0x10/0x10 [ 95.625788][ T2881] ret_from_fork+0x4b/0x80 [ 95.630255][ T2881] ? __pfx_kthread+0x10/0x10 [ 95.634947][ T2881] ret_from_fork_asm+0x1a/0x30 [ 95.639759][ T2881] [ 95.642812][ T2881] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 95.650119][ T2881] CPU: 0 PID: 2881 Comm: kworker/u8:10 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 95.660466][ T2881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 95.670573][ T2881] Workqueue: cfg80211 cfg80211_event_work [ 95.676330][ T2881] Call Trace: [ 95.679640][ T2881] [ 95.682595][ T2881] dump_stack_lvl+0x241/0x360 [ 95.687303][ T2881] ? __pfx_dump_stack_lvl+0x10/0x10 [ 95.692525][ T2881] ? __pfx__printk+0x10/0x10 [ 95.697151][ T2881] ? vscnprintf+0x5d/0x90 [ 95.701517][ T2881] panic+0x349/0x860 [ 95.705441][ T2881] ? __warn+0x172/0x4e0 [ 95.709710][ T2881] ? __pfx_panic+0x10/0x10 [ 95.714167][ T2881] ? ret_from_fork_asm+0x1a/0x30 [ 95.719143][ T2881] __warn+0x346/0x4e0 [ 95.723155][ T2881] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 95.729183][ T2881] report_bug+0x2b3/0x500 [ 95.733532][ T2881] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 95.739572][ T2881] handle_bug+0x3e/0x70 [ 95.743779][ T2881] exc_invalid_op+0x1a/0x50 [ 95.748318][ T2881] asm_exc_invalid_op+0x1a/0x20 [ 95.753210][ T2881] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 95.759841][ T2881] Code: a3 00 89 c3 31 ff 89 c6 e8 d3 6b b3 f6 85 db 74 29 e8 aa 97 99 f6 84 c0 74 27 e8 81 67 b3 f6 e9 84 00 00 00 e8 77 67 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 61 67 b3 f6 eb [ 95.779476][ T2881] RSP: 0018:ffffc900099df9e0 EFLAGS: 00010293 [ 95.785581][ T2881] RAX: ffffffff8ae2bf09 RBX: 0000000000000000 RCX: ffff88802bc43c00 [ 95.793683][ T2881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 95.801675][ T2881] RBP: ffffc900099dfb00 R08: ffffffff8ae2bad9 R09: 1ffffffff25f56bd [ 95.809672][ T2881] R10: dffffc0000000000 R11: fffffbfff25f56be R12: ffff8880625f2898 [ 95.817644][ T2881] R13: dffffc0000000000 R14: ffff8880625f2818 R15: ffff88805ee25000 [ 95.825618][ T2881] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 95.831634][ T2881] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 95.837640][ T2881] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 95.843826][ T2881] ? lockdep_hardirqs_on+0x99/0x150 [ 95.849057][ T2881] cfg80211_process_wdev_events+0x356/0x510 [ 95.854973][ T2881] cfg80211_process_rdev_events+0xac/0x110 [ 95.860794][ T2881] ? process_scheduled_works+0x945/0x1830 [ 95.866516][ T2881] cfg80211_event_work+0x2f/0x40 [ 95.871458][ T2881] process_scheduled_works+0xa2c/0x1830 [ 95.877037][ T2881] ? __pfx_process_scheduled_works+0x10/0x10 [ 95.883029][ T2881] ? assign_work+0x364/0x3d0 [ 95.887628][ T2881] worker_thread+0x86d/0xd70 [ 95.892228][ T2881] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 95.898137][ T2881] ? __kthread_parkme+0x169/0x1d0 [ 95.903170][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 95.908283][ T2881] kthread+0x2f0/0x390 [ 95.912351][ T2881] ? __pfx_worker_thread+0x10/0x10 [ 95.917460][ T2881] ? __pfx_kthread+0x10/0x10 [ 95.922054][ T2881] ret_from_fork+0x4b/0x80 [ 95.926474][ T2881] ? __pfx_kthread+0x10/0x10 [ 95.931079][ T2881] ret_from_fork_asm+0x1a/0x30 [ 95.935870][ T2881] [ 95.939121][ T2881] Kernel Offset: disabled [ 95.943534][ T2881] Rebooting in 86400 seconds..