last executing test programs: 3.852921555s ago: executing program 1 (id=1523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c00010062"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xa83b65bbb004b51e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 3.728074997s ago: executing program 2 (id=1524): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600003, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.592774848s ago: executing program 3 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3.532188269s ago: executing program 3 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x586}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) 3.445791341s ago: executing program 2 (id=1527): r0 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010000c"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 3.419005431s ago: executing program 1 (id=1529): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0x6, 0xb}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xa5b100, 0xffffffc0, 0xffffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004860}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="270302", 0x3}], 0x1}, 0x20000000) 3.340092112s ago: executing program 2 (id=1530): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00', @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newqdisc={0x8c, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x1, 0x6, 0xa00, 0x3, 0x987, 0x200ff}, [@TCA_NETEM_LATENCY64={0xc}, @TCA_NETEM_JITTER64={0xc}, @TCA_NETEM_RATE64={0xc, 0x8, 0xe62077891e54f027}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1ff, 0x1, 0xd8f, 0x1, 0x3}}]}]}}}]}, 0x8c}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 3.277944393s ago: executing program 2 (id=1531): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$unix(0x1, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 3.217523204s ago: executing program 3 (id=1533): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 3.124129935s ago: executing program 0 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 3.093207915s ago: executing program 3 (id=1535): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600003, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.073360546s ago: executing program 1 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0x6, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00242f01000000000000003cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 3.012032607s ago: executing program 0 (id=1537): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xa83b65bbb004b51e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 2.924606338s ago: executing program 0 (id=1538): r0 = socket(0x2, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010000c"], 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 2.924050128s ago: executing program 2 (id=1539): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00', @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f000006892f000300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0757d", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.909229998s ago: executing program 3 (id=1540): socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r3 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r6, 0x6b, 0x2, &(0x7f0000000000), 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) ppoll(&(0x7f0000000180)=[{r7}, {r3, 0x4}, {r5, 0x1c}], 0x3, 0x0, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYRES8=r9, @ANYRES64=r0], 0xb8}, 0x1, 0x0, 0x0, 0x801}, 0x44014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000001000200000000000000000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080", @ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000010000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000140)={0x4}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.820035919s ago: executing program 0 (id=1541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x24000851) setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'bridge_slave_0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x2d, 0x2, 0x3, {0x4, @sctp_ip6_spec={@empty, @loopback, 0x4e20, 0x4e21, 0x5}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}, 0x200, 0x9, [0x5]}, @esp_ip4_spec={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0x0, 0x74}, {0x0, @multicast, 0x4, 0xa, [0x1, 0xc]}, 0x10000, 0x8}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(0x0, r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r5, 0x0, 0x14, &(0x7f0000000080)=0xcd, 0x4) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000007080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r7, @ANYRES64=r4], 0x38}}, 0x4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r6) sendmsg$IPVS_CMD_NEW_SERVICE(r6, 0x0, 0x1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c080) r8 = socket(0x21, 0x800, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, 0x0) bind$packet(r8, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r8, 0x0, 0x20040851) 2.699183451s ago: executing program 2 (id=1542): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000080) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x586}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmsg$kcm(r3, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) 2.347161857s ago: executing program 1 (id=1543): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}}, 0x0) 2.186048419s ago: executing program 1 (id=1544): ioctl$OCFS2_IOC_GROUP_ADD64(0xffffffffffffffff, 0x40186f03, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40084) socket$kcm(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @local, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x20004004) 2.024128891s ago: executing program 0 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 1.959587272s ago: executing program 0 (id=1546): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000480)={@remote, @loopback, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x2000005, 0x0, 0x7d, 0x500, 0xfffffffffffffffc, 0x80200}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x400) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) 1.240628312s ago: executing program 3 (id=1547): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x3b}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0xa83b65bbb004b51e) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0x8c}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 0s ago: executing program 1 (id=1548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x600003, 0x0) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 75.643546][ T5765] cgroup: Unknown subsys name 'net' [ 75.776888][ T5765] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.335664][ T5765] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.741213][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.758770][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.766495][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.778846][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.788062][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.795584][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.903184][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.912018][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.919673][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.936113][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.944361][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.958597][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.004280][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.018262][ T5088] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.028033][ T5088] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.047266][ T5088] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.055063][ T5088] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.062546][ T5088] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.078168][ T5088] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.086801][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.094852][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.103051][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.111411][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.119285][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.332552][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 79.463230][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.471044][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.478746][ T5776] bridge_slave_0: entered allmulticast mode [ 79.485755][ T5776] bridge_slave_0: entered promiscuous mode [ 79.517846][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.525009][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.532403][ T5776] bridge_slave_1: entered allmulticast mode [ 79.540250][ T5776] bridge_slave_1: entered promiscuous mode [ 79.583401][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.595554][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.675329][ T5776] team0: Port device team_slave_0 added [ 79.693689][ T5776] team0: Port device team_slave_1 added [ 79.705504][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 79.785802][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.792817][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.818794][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.835015][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 79.857585][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.865044][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.891143][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.914049][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 79.990816][ T5776] hsr_slave_0: entered promiscuous mode [ 79.997409][ T5776] hsr_slave_1: entered promiscuous mode [ 80.051381][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.058900][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.066359][ T5780] bridge_slave_0: entered allmulticast mode [ 80.073427][ T5780] bridge_slave_0: entered promiscuous mode [ 80.099710][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.106914][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.114430][ T5780] bridge_slave_1: entered allmulticast mode [ 80.121694][ T5780] bridge_slave_1: entered promiscuous mode [ 80.193208][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.214307][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.221684][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.229462][ T5787] bridge_slave_0: entered allmulticast mode [ 80.236375][ T5787] bridge_slave_0: entered promiscuous mode [ 80.255671][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.279039][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.286187][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.293885][ T5787] bridge_slave_1: entered allmulticast mode [ 80.301408][ T5787] bridge_slave_1: entered promiscuous mode [ 80.366086][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.374222][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.382648][ T5782] bridge_slave_0: entered allmulticast mode [ 80.390221][ T5782] bridge_slave_0: entered promiscuous mode [ 80.401460][ T5780] team0: Port device team_slave_0 added [ 80.414429][ T5780] team0: Port device team_slave_1 added [ 80.424677][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.434178][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.441850][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.449623][ T5782] bridge_slave_1: entered allmulticast mode [ 80.456609][ T5782] bridge_slave_1: entered promiscuous mode [ 80.496421][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.556010][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.571310][ T5787] team0: Port device team_slave_0 added [ 80.586887][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.593977][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.619950][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.632715][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.639878][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.666034][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.680190][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.702045][ T5787] team0: Port device team_slave_1 added [ 80.789766][ T5780] hsr_slave_0: entered promiscuous mode [ 80.796500][ T5780] hsr_slave_1: entered promiscuous mode [ 80.803297][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.811470][ T5780] Cannot create hsr debugfs directory [ 80.819847][ T5782] team0: Port device team_slave_0 added [ 80.826406][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.833541][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.860505][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.860897][ T51] Bluetooth: hci0: command tx timeout [ 80.890256][ T5782] team0: Port device team_slave_1 added [ 80.903324][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.910811][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.937413][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.004656][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.012190][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.038487][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.049894][ T51] Bluetooth: hci1: command tx timeout [ 81.058838][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.065826][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.092545][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.103807][ T51] Bluetooth: hci2: command tx timeout [ 81.178029][ T51] Bluetooth: hci3: command tx timeout [ 81.216562][ T5787] hsr_slave_0: entered promiscuous mode [ 81.223652][ T5787] hsr_slave_1: entered promiscuous mode [ 81.230256][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.239283][ T5787] Cannot create hsr debugfs directory [ 81.250173][ T5782] hsr_slave_0: entered promiscuous mode [ 81.256546][ T5782] hsr_slave_1: entered promiscuous mode [ 81.263356][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.271035][ T5782] Cannot create hsr debugfs directory [ 81.405248][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.440284][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.452086][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.466819][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.669467][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.684468][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.704277][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.714363][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.827255][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.840584][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.852093][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.865587][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.879886][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.906485][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.951403][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.958893][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.009998][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.017145][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.045202][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.065149][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.079872][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.111840][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.186689][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.238787][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.265351][ T2929] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.272595][ T2929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.314486][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.321677][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.394267][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.465399][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.500182][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.507367][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.553599][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.590000][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.597228][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.660250][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.704720][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.711976][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.734083][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.754393][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.761600][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.950888][ T5776] veth0_vlan: entered promiscuous mode [ 82.956662][ T51] Bluetooth: hci0: command tx timeout [ 83.026238][ T5776] veth1_vlan: entered promiscuous mode [ 83.076094][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.098482][ T51] Bluetooth: hci1: command tx timeout [ 83.168842][ T5776] veth0_macvtap: entered promiscuous mode [ 83.178447][ T51] Bluetooth: hci2: command tx timeout [ 83.198273][ T5776] veth1_macvtap: entered promiscuous mode [ 83.232985][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.258705][ T51] Bluetooth: hci3: command tx timeout [ 83.286527][ T5780] veth0_vlan: entered promiscuous mode [ 83.314268][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.327455][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.352870][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.363307][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.372963][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.382966][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.417181][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.432258][ T5780] veth1_vlan: entered promiscuous mode [ 83.521037][ T5787] veth0_vlan: entered promiscuous mode [ 83.545765][ T5780] veth0_macvtap: entered promiscuous mode [ 83.570337][ T5780] veth1_macvtap: entered promiscuous mode [ 83.622687][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.634736][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.646754][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.666461][ T5782] veth0_vlan: entered promiscuous mode [ 83.683847][ T5787] veth1_vlan: entered promiscuous mode [ 83.701247][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.714642][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.726493][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.753960][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.765408][ T5782] veth1_vlan: entered promiscuous mode [ 83.773553][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.783665][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794305][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.804915][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.813841][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.883223][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.892095][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.954394][ T5782] veth0_macvtap: entered promiscuous mode [ 84.013659][ T5782] veth1_macvtap: entered promiscuous mode [ 84.022782][ T5787] veth0_macvtap: entered promiscuous mode [ 84.061809][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.077140][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.122446][ T5787] veth1_macvtap: entered promiscuous mode [ 84.152291][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.154093][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.171951][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.186776][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.188724][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.202393][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.217157][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.266656][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.282548][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.293164][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.304037][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.319845][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.331063][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.343555][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.355003][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.371224][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.382756][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.397235][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.411053][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.425570][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.436895][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.446900][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.457573][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.468401][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.479333][ T5813] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.487885][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.503383][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.514602][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.523941][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.540975][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.576705][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.603474][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612566][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.614338][ T5836] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.626230][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.655947][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.677875][ T5813] usb 4-1: Using ep0 maxpacket: 16 [ 84.721638][ T5813] usb 4-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.735753][ T5813] usb 4-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 25 [ 84.793351][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.801199][ T5813] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.00 [ 84.813027][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.840727][ T5813] usb 4-1: config 0 descriptor?? [ 84.901837][ T2929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.947865][ T2929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.018948][ T51] Bluetooth: hci0: command tx timeout [ 85.047007][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.082575][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.121298][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.143635][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.178128][ T51] Bluetooth: hci1: command tx timeout [ 85.258074][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.267144][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.277648][ T51] Bluetooth: hci2: command tx timeout [ 85.339450][ T51] Bluetooth: hci3: command tx timeout [ 85.444251][ T5813] usbhid 4-1:0.0: can't add hid device: -71 [ 85.631526][ T5813] usbhid: probe of 4-1:0.0 failed with error -71 [ 85.644105][ T5813] usb 4-1: USB disconnect, device number 2 [ 85.836992][ T5847] syz.2.3: attempt to access beyond end of device [ 85.836992][ T5847] loop2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 85.849974][ T5847] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 85.864238][ T5847] syz.2.3[5847]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.235162][ T51] Bluetooth: hci0: command tx timeout [ 87.267642][ T51] Bluetooth: hci1: command tx timeout [ 87.387869][ T51] Bluetooth: hci2: command tx timeout [ 87.484004][ T51] Bluetooth: hci3: command tx timeout [ 87.747142][ T5860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6'. [ 87.771511][ T5860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 87.958642][ T1197] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.158187][ T1197] usb 3-1: Using ep0 maxpacket: 32 [ 88.170263][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.201204][ T1197] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.233088][ T1197] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.267954][ T1197] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.278583][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.324781][ T1197] usb 3-1: config 0 descriptor?? [ 88.345256][ T1197] hub 3-1:0.0: USB hub found [ 88.488173][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 88.496348][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.511557][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.524079][ T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 88.533650][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.565659][ T1197] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 88.582015][ T8] usb 4-1: config 0 descriptor?? [ 88.594410][ T8] hub 4-1:0.0: USB hub found [ 88.811722][ T8] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 89.040156][ T1197] hid-generic 0003:046D:C31C.0001: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.2-1/input0 [ 89.248288][ T8] hid-generic 0003:046D:C31C.0002: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0 [ 89.584403][ T5865] usb 3-1: USB disconnect, device number 2 [ 89.660606][ T23] usb 4-1: USB disconnect, device number 3 [ 89.838100][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.047933][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 90.065397][ T23] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 90.079749][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.090809][ T23] usb 1-1: Product: syz [ 90.095030][ T23] usb 1-1: Manufacturer: syz [ 90.106179][ T23] usb 1-1: SerialNumber: syz [ 90.120421][ T23] usb 1-1: config 0 descriptor?? [ 90.390421][ T23] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 90.406734][ T23] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 90.421617][ T23] usb 1-1: USB disconnect, device number 2 [ 90.507993][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 90.731206][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.741500][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.754507][ T23] IPVS: starting estimator thread 0... [ 90.762279][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.776340][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.784538][ T8] usb 4-1: SerialNumber: syz [ 90.847942][ T5896] IPVS: using max 21 ests per chain, 50400 per kthread [ 90.957819][ T5812] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 91.147952][ T5812] usb 3-1: Using ep0 maxpacket: 16 [ 91.172586][ T5812] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 91.199112][ T5812] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.207171][ T5812] usb 3-1: Product: syz [ 91.221859][ T5812] usb 3-1: Manufacturer: syz [ 91.226618][ T5812] usb 3-1: SerialNumber: syz [ 91.245511][ T5812] usb 3-1: config 0 descriptor?? [ 91.534310][ T5903] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17'. [ 91.927238][ T5812] speedtch 3-1:0.0: speedtch_bind: data interface not found! [ 91.963665][ T5812] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 92.078808][ T5812] usb 3-1: USB disconnect, device number 3 [ 92.228465][ T5899] dccp_close: ABORT with 4456 bytes unread [ 92.269346][ T788] cfg80211: failed to load regulatory.db [ 92.322167][ T8] usb 4-1: 0:2 : does not exist [ 92.367436][ T8] usb 4-1: USB disconnect, device number 4 [ 92.502353][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 92.663931][ T5911] warning: `syz.1.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.727547][ T5915] tipc: Started in network mode [ 92.740035][ T5915] tipc: Node identity f62a7996aca4, cluster identity 4711 [ 92.748239][ T5915] tipc: Enabled bearer , priority 0 [ 92.773961][ T5915] syzkaller0: entered promiscuous mode [ 92.780599][ T5915] syzkaller0: entered allmulticast mode [ 92.842978][ T5915] tipc: Resetting bearer [ 92.885160][ T5914] tipc: Resetting bearer [ 92.930780][ T5914] tipc: Disabling bearer [ 93.251592][ T5921] bridge1: entered promiscuous mode [ 93.434471][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.26'. [ 93.455957][ T5931] netlink: 32 bytes leftover after parsing attributes in process `syz.2.28'. [ 93.475046][ T5929] Zero length message leads to an empty skb [ 93.735532][ T5935] syzkaller0: entered promiscuous mode [ 93.766679][ T5935] syzkaller0: entered allmulticast mode [ 93.957795][ T5948] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 93.999275][ T5951] xt_hashlimit: size too large, truncated to 1048576 [ 95.828459][ T6001] netlink: 48 bytes leftover after parsing attributes in process `syz.2.61'. [ 97.173260][ T6039] veth0_macvtap: entered allmulticast mode [ 97.206688][ T6039] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 97.513813][ T6046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 97.854784][ T6051] Bluetooth: MGMT ver 1.22 [ 97.919415][ T6053] netlink: 'syz.3.79': attribute type 1 has an invalid length. [ 98.915929][ T6077] netlink: 128 bytes leftover after parsing attributes in process `syz.1.88'. [ 99.538234][ T6097] syzkaller0: entered promiscuous mode [ 99.543777][ T6097] syzkaller0: entered allmulticast mode [ 99.949108][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 99.961499][ T6109] tipc: Started in network mode [ 99.966435][ T6109] tipc: Node identity 9ad8c7e992bd, cluster identity 4711 [ 99.987118][ T6109] tipc: Enabled bearer , priority 0 [ 100.019937][ T6109] syzkaller0: entered promiscuous mode [ 100.025562][ T6109] syzkaller0: entered allmulticast mode [ 100.111032][ T6109] tipc: Resetting bearer [ 100.154808][ T6108] tipc: Resetting bearer [ 100.247532][ T6108] tipc: Disabling bearer [ 100.281060][ T6123] tipc: Started in network mode [ 100.286038][ T6123] tipc: Node identity babfb0daeb56, cluster identity 4711 [ 100.294024][ T6123] tipc: Enabled bearer , priority 0 [ 100.422887][ T6123] syzkaller0: entered promiscuous mode [ 100.432039][ T6123] syzkaller0: entered allmulticast mode [ 100.438566][ T6123] tipc: Resetting bearer [ 100.479563][ T6122] tipc: Resetting bearer [ 101.531184][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880599e0000: rx timeout, send abort [ 101.541755][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880599e0000: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.416165][ T6122] tipc: Disabling bearer [ 102.438070][ T6140] tipc: Enabling of bearer rejected, failed to enable media [ 102.452887][ T788] tipc: Node number set to 1374269658 [ 102.466827][ T6168] netlink: 'syz.3.124': attribute type 1 has an invalid length. [ 102.683033][ T6174] netlink: 36 bytes leftover after parsing attributes in process `syz.0.125'. [ 102.795359][ T6178] netlink: 16 bytes leftover after parsing attributes in process `syz.1.129'. [ 102.814403][ T6178] tipc: Enabled bearer , priority 10 [ 103.032877][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.134'. [ 103.597185][ T6214] syzkaller1: entered promiscuous mode [ 103.604480][ T6214] syzkaller1: entered allmulticast mode [ 103.622631][ T6214] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 103.735049][ T6218] xt_hashlimit: size too large, truncated to 1048576 [ 103.928190][ T5813] tipc: Node number set to 140888041 [ 103.971301][ T6226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 105.512136][ T6242] syzkaller0: entered promiscuous mode [ 105.522795][ T6242] syzkaller0: entered allmulticast mode [ 105.736057][ T6248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.156'. [ 106.354878][ T6205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.837131][ T6270] tipc: Enabled bearer , priority 0 [ 106.928342][ T6270] syzkaller0: entered promiscuous mode [ 106.933894][ T6270] syzkaller0: entered allmulticast mode [ 106.998674][ T6270] tipc: Resetting bearer [ 107.098167][ T6269] tipc: Resetting bearer [ 107.148959][ T6269] tipc: Disabling bearer [ 107.558007][ T6295] netlink: 20 bytes leftover after parsing attributes in process `syz.0.174'. [ 107.591770][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 107.602675][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 107.633091][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 107.653832][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 107.830503][ T6307] Bluetooth: MGMT ver 1.22 [ 109.735139][ T6361] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 109.806796][ T6361] syzkaller0: entered promiscuous mode [ 109.831372][ T6361] syzkaller0: entered allmulticast mode [ 110.255351][ T6375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 110.651120][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.213'. [ 111.278677][ T6408] ip6erspan0: entered allmulticast mode [ 112.667882][ T6453] tipc: Enabled bearer , priority 0 [ 112.675616][ T6453] syzkaller0: entered promiscuous mode [ 112.681966][ T6453] syzkaller0: entered allmulticast mode [ 112.705594][ T6452] tipc: Resetting bearer [ 112.778263][ T6452] tipc: Disabling bearer [ 112.794557][ T6457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.244'. [ 113.442190][ T6487] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 113.525191][ T6489] tipc: Enabled bearer , priority 0 [ 113.533535][ T6489] syzkaller0: entered promiscuous mode [ 113.540224][ T6489] syzkaller0: entered allmulticast mode [ 113.551234][ T6488] tipc: Resetting bearer [ 113.592454][ T6488] tipc: Disabling bearer [ 114.368191][ T6516] tipc: Enabled bearer , priority 0 [ 114.384167][ T6516] syzkaller0: entered promiscuous mode [ 114.393530][ T6516] syzkaller0: entered allmulticast mode [ 114.436177][ T6515] tipc: Resetting bearer [ 114.499259][ T6515] tipc: Disabling bearer [ 114.588694][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 115.302010][ T6556] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 115.347176][ T6556] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 115.394555][ T6556] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 115.498657][ T6571] syzkaller0: entered promiscuous mode [ 115.504252][ T6571] syzkaller0: entered allmulticast mode [ 115.520673][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 115.537870][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.0.286'. [ 115.561771][ T6571] 0: reclassify loop, rule prio 0, protocol 800 [ 115.909668][ T6582] netlink: 76 bytes leftover after parsing attributes in process `syz.2.288'. [ 115.962125][ T6578] syzkaller0: entered promiscuous mode [ 115.967833][ T6578] syzkaller0: entered allmulticast mode [ 117.962841][ T6608] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 121.174307][ T6620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.766867][ T6686] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 125.424665][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.3.354'. [ 126.169783][ T6811] sock: sock_set_timeout: `syz.1.364' (pid 6811) tries to set negative timeout [ 126.332903][ T6819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.367'. [ 128.619784][ T6790] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 129.372875][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.1.381'. [ 129.584457][ T6864] netlink: 76 bytes leftover after parsing attributes in process `syz.1.385'. [ 129.784478][ T6872] netlink: 12 bytes leftover after parsing attributes in process `syz.1.389'. [ 129.805617][ T6870] syzkaller0: entered promiscuous mode [ 129.811788][ T6870] syzkaller0: entered allmulticast mode [ 130.524944][ T6892] syzkaller0: entered promiscuous mode [ 130.532735][ T6892] syzkaller0: entered allmulticast mode [ 132.514533][ T6904] tipc: Enabling of bearer rejected, failed to enable media [ 132.816851][ T6931] netlink: 76 bytes leftover after parsing attributes in process `syz.1.408'. [ 132.914450][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.410'. [ 133.025661][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.032691][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.240402][ T6943] syzkaller0: entered promiscuous mode [ 133.262334][ T6943] syzkaller0: entered allmulticast mode [ 133.512872][ T6950] tipc: Started in network mode [ 133.519771][ T6950] tipc: Node identity dedc49e19ac9, cluster identity 4711 [ 133.528277][ T6950] tipc: Enabled bearer , priority 0 [ 133.537248][ T6950] syzkaller0: entered promiscuous mode [ 133.552319][ T6950] syzkaller0: entered allmulticast mode [ 133.590663][ T6950] tipc: Resetting bearer [ 133.600221][ T6949] tipc: Resetting bearer [ 133.645122][ T6949] tipc: Disabling bearer [ 133.676795][ T6957] netlink: 76 bytes leftover after parsing attributes in process `syz.1.420'. [ 133.844365][ T6962] netlink: 12 bytes leftover after parsing attributes in process `syz.1.421'. [ 134.107208][ T6971] syzkaller0: entered promiscuous mode [ 134.135809][ T6971] syzkaller0: entered allmulticast mode [ 134.178093][ T6976] netlink: 64 bytes leftover after parsing attributes in process `syz.3.429'. [ 134.390889][ T6980] tipc: Enabled bearer , priority 0 [ 134.411985][ T6980] syzkaller0: entered promiscuous mode [ 134.425391][ T6980] syzkaller0: entered allmulticast mode [ 134.463348][ T6980] tipc: Resetting bearer [ 134.486968][ T6979] tipc: Resetting bearer [ 134.535042][ T6979] tipc: Disabling bearer [ 134.751762][ T6992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.435'. [ 135.045967][ T7001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.439'. [ 135.069006][ T7002] syzkaller0: entered promiscuous mode [ 135.081267][ T7002] syzkaller0: entered allmulticast mode [ 135.253214][ T7006] tipc: Enabled bearer , priority 0 [ 135.265023][ T7006] syzkaller0: entered promiscuous mode [ 135.278137][ T7006] syzkaller0: entered allmulticast mode [ 135.323900][ T7006] tipc: Resetting bearer [ 135.334426][ T7005] tipc: Resetting bearer [ 135.413203][ T7005] tipc: Disabling bearer [ 135.436790][ T7011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.444'. [ 135.709320][ T7021] netlink: 64 bytes leftover after parsing attributes in process `syz.2.449'. [ 136.082475][ T7031] syzkaller0: entered promiscuous mode [ 136.102871][ T7031] syzkaller0: entered allmulticast mode [ 136.124868][ T7035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.454'. [ 136.244289][ T7038] tipc: Enabled bearer , priority 0 [ 136.252344][ T7038] syzkaller0: entered promiscuous mode [ 136.273698][ T7038] syzkaller0: entered allmulticast mode [ 136.319294][ T7037] tipc: Resetting bearer [ 136.367334][ T7037] tipc: Disabling bearer [ 136.797979][ T5813] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 137.012393][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.026310][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 137.050353][ T5813] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 137.067840][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 137.086292][ T5813] usb 4-1: SerialNumber: syz [ 137.149110][ T7065] tipc: Enabled bearer , priority 0 [ 137.163648][ T7065] syzkaller0: entered promiscuous mode [ 137.170594][ T7065] syzkaller0: entered allmulticast mode [ 137.200980][ T7064] tipc: Resetting bearer [ 137.245325][ T7064] tipc: Disabling bearer [ 137.607285][ T5813] usb 4-1: 0:2 : does not exist [ 137.650145][ T5813] usb 4-1: USB disconnect, device number 5 [ 137.690904][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.189560][ T7089] tipc: Enabled bearer , priority 0 [ 138.197587][ T7089] syzkaller0: entered promiscuous mode [ 138.205927][ T7089] syzkaller0: entered allmulticast mode [ 138.248074][ T7088] tipc: Resetting bearer [ 138.332120][ T7088] tipc: Disabling bearer [ 138.974857][ T7112] __nla_validate_parse: 2 callbacks suppressed [ 138.974875][ T7112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.486'. [ 139.208547][ T7116] tipc: Enabled bearer , priority 0 [ 139.241930][ T7116] tipc: Resetting bearer [ 139.339911][ T7115] tipc: Disabling bearer [ 139.526147][ T7132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.496'. [ 139.670201][ T7136] syzkaller0: entered promiscuous mode [ 139.675900][ T7136] syzkaller0: entered allmulticast mode [ 140.346898][ T7154] netlink: 60 bytes leftover after parsing attributes in process `syz.2.506'. [ 140.437430][ T7156] tipc: Enabled bearer , priority 0 [ 140.482601][ T7161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.508'. [ 140.501508][ T7156] tipc: Resetting bearer [ 140.539405][ T7155] tipc: Disabling bearer [ 140.671657][ T7164] syzkaller0: entered promiscuous mode [ 140.677194][ T7164] syzkaller0: entered allmulticast mode [ 140.995562][ T7177] netlink: 160 bytes leftover after parsing attributes in process `syz.3.515'. [ 141.045867][ T7179] netlink: 60 bytes leftover after parsing attributes in process `syz.2.516'. [ 141.113106][ T7181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.517'. [ 141.261232][ T7185] tipc: Enabled bearer , priority 0 [ 141.313549][ T7185] tipc: Resetting bearer [ 141.385044][ T7184] tipc: Disabling bearer [ 141.601081][ T7198] netlink: 48 bytes leftover after parsing attributes in process `syz.2.524'. [ 141.747300][ T7203] syzkaller0: entered promiscuous mode [ 141.767298][ T7203] syzkaller0: entered allmulticast mode [ 141.795252][ T7205] netlink: 160 bytes leftover after parsing attributes in process `syz.2.527'. [ 142.000322][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.528'. [ 142.335643][ T7221] syzkaller0: entered promiscuous mode [ 142.353494][ T7221] syzkaller0: entered allmulticast mode [ 142.753333][ T7231] syzkaller0: entered promiscuous mode [ 142.769933][ T7231] syzkaller0: entered allmulticast mode [ 144.324351][ T7243] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 144.518562][ T7254] syzkaller0: entered promiscuous mode [ 144.534053][ T7258] __nla_validate_parse: 4 callbacks suppressed [ 144.534068][ T7258] netlink: 128 bytes leftover after parsing attributes in process `syz.1.549'. [ 144.555476][ T7254] syzkaller0: entered allmulticast mode [ 144.564766][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 144.564793][ T7260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.550'. [ 145.084606][ T7276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.556'. [ 145.284827][ T7281] netlink: 128 bytes leftover after parsing attributes in process `syz.0.559'. [ 145.298569][ T7281] netlink: 16 bytes leftover after parsing attributes in process `syz.0.559'. [ 145.362231][ T7279] syzkaller0: entered promiscuous mode [ 145.387997][ T7279] syzkaller0: entered allmulticast mode [ 147.245522][ T7311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.566'. [ 147.394122][ T7321] netlink: 128 bytes leftover after parsing attributes in process `syz.2.570'. [ 147.421866][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.570'. [ 147.809642][ T7329] syzkaller0: entered promiscuous mode [ 147.822883][ T7329] syzkaller0: entered allmulticast mode [ 149.855667][ T7339] tipc: Enabled bearer , priority 0 [ 149.877029][ T7342] syzkaller0: entered promiscuous mode [ 149.899216][ T7342] syzkaller0: entered allmulticast mode [ 150.011032][ T7356] tipc: Resetting bearer [ 150.021018][ T7360] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 150.076375][ T7356] tipc: Disabling bearer [ 150.097967][ T7363] netlink: 128 bytes leftover after parsing attributes in process `syz.1.581'. [ 150.107080][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.581'. [ 150.605471][ T7379] syzkaller0: entered promiscuous mode [ 150.611220][ T7379] syzkaller0: entered allmulticast mode [ 152.330113][ T7383] tipc: Enabled bearer , priority 0 [ 152.337017][ T7385] syzkaller0: entered promiscuous mode [ 152.347973][ T7385] syzkaller0: entered allmulticast mode [ 152.389152][ T7389] tipc: Resetting bearer [ 152.428015][ T7380] tipc: Resetting bearer [ 152.486028][ T7380] tipc: Disabling bearer [ 152.540741][ T7401] netlink: 128 bytes leftover after parsing attributes in process `syz.1.594'. [ 152.553221][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'. [ 152.618729][ T7397] syzkaller0: entered promiscuous mode [ 152.634712][ T7397] syzkaller0: entered allmulticast mode [ 152.958412][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.601'. [ 154.595685][ T7406] netlink: 44 bytes leftover after parsing attributes in process `syz.1.597'. [ 154.883826][ T7424] syzkaller0: entered promiscuous mode [ 154.889732][ T7424] syzkaller0: entered allmulticast mode [ 154.920629][ T7431] netlink: 128 bytes leftover after parsing attributes in process `syz.3.607'. [ 154.929874][ T7431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.607'. [ 156.904769][ T7435] tipc: Enabling of bearer rejected, failed to enable media [ 156.914946][ T7456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.612'. [ 157.009943][ T7458] netlink: 'syz.3.613': attribute type 1 has an invalid length. [ 157.195885][ T7464] netlink: 128 bytes leftover after parsing attributes in process `syz.3.616'. [ 157.462196][ T7474] syzkaller0: entered promiscuous mode [ 157.469363][ T7474] syzkaller0: entered allmulticast mode [ 157.682710][ T7478] syzkaller0: entered promiscuous mode [ 157.692653][ T7478] syzkaller0: entered allmulticast mode [ 159.433188][ T7484] tipc: Enabling of bearer rejected, failed to enable media [ 159.527904][ T7501] netlink: 44 bytes leftover after parsing attributes in process `syz.3.625'. [ 159.638623][ T7503] netlink: 128 bytes leftover after parsing attributes in process `syz.2.627'. [ 159.916171][ T7516] syzkaller0: entered promiscuous mode [ 159.922637][ T7516] syzkaller0: entered allmulticast mode [ 159.958799][ T7520] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 160.492039][ T7526] tipc: Enabled bearer , priority 0 [ 160.517975][ T7526] syzkaller0: entered promiscuous mode [ 160.523501][ T7526] syzkaller0: entered allmulticast mode [ 160.616330][ T7526] tipc: Resetting bearer [ 160.654548][ T7525] tipc: Resetting bearer [ 160.738501][ T7525] tipc: Disabling bearer [ 160.754234][ T7537] netlink: 128 bytes leftover after parsing attributes in process `syz.3.641'. [ 160.944171][ T7542] netlink: 36 bytes leftover after parsing attributes in process `syz.3.643'. [ 161.027978][ T7545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.644'. [ 161.340188][ T7561] netlink: 128 bytes leftover after parsing attributes in process `syz.2.651'. [ 161.372386][ T7560] syzkaller0: entered promiscuous mode [ 161.390975][ T7560] syzkaller0: entered allmulticast mode [ 161.525403][ T7567] netlink: 36 bytes leftover after parsing attributes in process `syz.0.655'. [ 161.648344][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.656'. [ 162.069206][ T7582] netlink: 128 bytes leftover after parsing attributes in process `syz.0.662'. [ 162.189007][ T7584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 162.252906][ T7588] netlink: 36 bytes leftover after parsing attributes in process `syz.0.665'. [ 162.368374][ T7591] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 162.563188][ T7594] syzkaller0: entered promiscuous mode [ 162.570892][ T7594] syzkaller0: entered allmulticast mode [ 164.021489][ T7600] syzkaller0: entered promiscuous mode [ 164.027001][ T7600] syzkaller0: entered allmulticast mode [ 164.318862][ T7619] netlink: 128 bytes leftover after parsing attributes in process `syz.3.675'. [ 164.462475][ T7624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.677'. [ 164.514531][ T7628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.680'. [ 164.800775][ T7635] syzkaller0: entered promiscuous mode [ 164.815966][ T7635] syzkaller0: entered allmulticast mode [ 164.835877][ T7637] syzkaller0: entered promiscuous mode [ 164.862745][ T7637] syzkaller0: entered allmulticast mode [ 165.600091][ T7660] netlink: 128 bytes leftover after parsing attributes in process `syz.0.687'. [ 166.985105][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.691'. [ 167.178790][ T7678] netlink: 128 bytes leftover after parsing attributes in process `syz.2.696'. [ 167.204341][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 167.529943][ T7697] netlink: 20 bytes leftover after parsing attributes in process `syz.0.704'. [ 167.551952][ T7689] syzkaller0: entered promiscuous mode [ 167.557497][ T7689] syzkaller0: entered allmulticast mode [ 167.711207][ T7705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.708'. [ 169.285541][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.0.712'. [ 169.785644][ T7750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 170.435317][ T7782] netlink: 12 bytes leftover after parsing attributes in process `syz.1.735'. [ 170.735711][ T7797] tipc: Enabled bearer , priority 0 [ 170.753740][ T7797] tipc: Resetting bearer [ 170.781028][ T7796] tipc: Disabling bearer [ 171.000709][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.747'. [ 171.329177][ T7823] netlink: 'syz.1.754': attribute type 1 has an invalid length. [ 171.461530][ T7823] bond1: entered promiscuous mode [ 171.467220][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.535788][ T7834] tipc: Enabled bearer , priority 0 [ 171.610410][ T7834] tipc: Resetting bearer [ 171.690882][ T7827] tipc: Disabling bearer [ 171.750259][ T7835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 171.790213][ T7835] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 171.840405][ T7835] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 171.905188][ T7835] bond1: (slave ip6gre1): making interface the new active one [ 171.967760][ T7835] ip6gre1: entered promiscuous mode [ 171.975168][ T7835] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 172.032931][ T7840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 172.704579][ T7876] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 172.850527][ T7871] tipc: Enabled bearer , priority 0 [ 172.870077][ T7878] tipc: Resetting bearer [ 172.964585][ T7870] tipc: Disabling bearer [ 173.147065][ T7891] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 173.311640][ T7901] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 173.411880][ T7901] bond1: entered promiscuous mode [ 173.440801][ T7901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.542582][ T7912] netlink: 36 bytes leftover after parsing attributes in process `syz.1.782'. [ 173.692668][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'. [ 173.746027][ T7901] 8021q: adding VLAN 0 to HW filter on device bond1 [ 173.757378][ T7901] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 173.767811][ T7901] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 173.781189][ T7901] bond1: (slave ip6gre1): making interface the new active one [ 173.791410][ T7901] ip6gre1: entered promiscuous mode [ 173.798960][ T7901] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 173.839895][ T7921] tipc: Enabled bearer , priority 0 [ 173.864160][ T7919] tipc: Resetting bearer [ 173.968969][ T7918] tipc: Disabling bearer [ 174.055223][ T7925] netlink: 60 bytes leftover after parsing attributes in process `syz.3.786'. [ 174.446328][ T7938] netlink: 36 bytes leftover after parsing attributes in process `syz.3.792'. [ 174.533408][ T7941] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'. [ 174.624871][ T7947] tipc: Enabled bearer , priority 0 [ 174.673393][ T7947] tipc: Resetting bearer [ 174.734423][ T7945] tipc: Disabling bearer [ 174.776776][ T7952] netlink: 60 bytes leftover after parsing attributes in process `syz.0.797'. [ 174.898249][ T7960] netlink: 'syz.1.799': attribute type 1 has an invalid length. [ 174.982554][ T7960] bond2: entered promiscuous mode [ 175.016171][ T7960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 175.122430][ T7973] netlink: 36 bytes leftover after parsing attributes in process `syz.0.804'. [ 175.246880][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.806'. [ 175.354989][ T7982] tipc: Enabled bearer , priority 0 [ 175.372936][ T7981] tipc: Disabling bearer [ 175.410181][ T7984] tipc: Enabled bearer , priority 0 [ 175.459750][ T7984] tipc: Resetting bearer [ 175.494113][ T7983] tipc: Disabling bearer [ 175.851826][ T8004] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 175.885322][ T8004] bond1: entered promiscuous mode [ 175.893221][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.977240][ T8004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.999294][ T8004] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 176.009885][ T8004] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 176.022612][ T8004] bond1: (slave ip6gre1): making interface the new active one [ 176.030420][ T8004] ip6gre1: entered promiscuous mode [ 176.037425][ T8004] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 176.237121][ T8016] tipc: Enabled bearer , priority 0 [ 176.257080][ T8019] tipc: Enabling of bearer rejected, failed to enable media [ 176.285710][ T8015] tipc: Disabling bearer [ 177.008975][ T8057] netlink: 'syz.1.831': attribute type 1 has an invalid length. [ 177.051889][ T8057] bond3: entered promiscuous mode [ 177.057231][ T8057] 8021q: adding VLAN 0 to HW filter on device bond3 [ 177.202895][ T8067] tipc: Enabling of bearer rejected, failed to enable media [ 177.751487][ T8096] __nla_validate_parse: 7 callbacks suppressed [ 177.751501][ T8096] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 177.916698][ T8106] netlink: 'syz.1.845': attribute type 1 has an invalid length. [ 177.957044][ T8106] bond4: entered promiscuous mode [ 177.963698][ T8106] 8021q: adding VLAN 0 to HW filter on device bond4 [ 177.974306][ T8107] netlink: 60 bytes leftover after parsing attributes in process `syz.3.846'. [ 178.108330][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.850'. [ 178.135300][ T8115] tipc: Enabling of bearer rejected, failed to enable media [ 178.375570][ T8130] tipc: Enabled bearer , priority 0 [ 178.415757][ T8129] tipc: Disabling bearer [ 178.823808][ T8152] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 178.905389][ T8152] bond5: entered promiscuous mode [ 178.922010][ T8152] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.930967][ T8155] netlink: 60 bytes leftover after parsing attributes in process `syz.3.858'. [ 178.951024][ T8160] netlink: 28 bytes leftover after parsing attributes in process `syz.0.860'. [ 179.242939][ T8171] tipc: Enabling of bearer rejected, failed to enable media [ 179.288216][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.3.867'. [ 179.620904][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz.1.869'. [ 179.632416][ T8198] netlink: 'syz.3.870': attribute type 1 has an invalid length. [ 179.691767][ T8198] bond2: entered promiscuous mode [ 179.697170][ T8198] 8021q: adding VLAN 0 to HW filter on device bond2 [ 179.805949][ T8201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.871'. [ 180.612040][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.881'. [ 182.906844][ T8206] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 183.059549][ T8253] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 183.093926][ T8253] bond2: entered promiscuous mode [ 183.099338][ T8253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.140528][ T8256] netlink: 60 bytes leftover after parsing attributes in process `syz.3.884'. [ 183.536819][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.892'. [ 183.596999][ T8284] tipc: Enabling of bearer rejected, failed to enable media [ 183.741775][ T8295] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 183.841635][ T8295] bond6: entered promiscuous mode [ 183.846928][ T8295] 8021q: adding VLAN 0 to HW filter on device bond6 [ 184.084637][ T8313] netlink: 60 bytes leftover after parsing attributes in process `syz.1.900'. [ 186.625873][ T8286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 186.806804][ T8352] netlink: 60 bytes leftover after parsing attributes in process `syz.2.909'. [ 190.024576][ T8362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.532748][ T8406] tipc: Enabling of bearer rejected, failed to enable media [ 191.114566][ T8437] syzkaller1: entered promiscuous mode [ 191.120554][ T8437] syzkaller1: entered allmulticast mode [ 193.682660][ T8418] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.874261][ T8453] tipc: Enabling of bearer rejected, failed to enable media [ 194.249335][ T8472] tipc: Enabling of bearer rejected, failed to enable media [ 194.463842][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470248][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.776891][ T8497] syzkaller0: entered promiscuous mode [ 194.793756][ T8497] syzkaller0: entered allmulticast mode [ 194.816709][ T8502] tipc: Enabling of bearer rejected, failed to enable media [ 199.479755][ T8530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.693618][ T8564] tipc: Enabling of bearer rejected, failed to enable media [ 199.936950][ T8577] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 200.022334][ T8577] bond3: entered promiscuous mode [ 200.033964][ T8577] 8021q: adding VLAN 0 to HW filter on device bond3 [ 200.211491][ T8580] syzkaller0: entered promiscuous mode [ 200.227631][ T8580] syzkaller0: entered allmulticast mode [ 201.662199][ T5779] Bluetooth: hci1: command 0x0406 tx timeout [ 201.662874][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 203.224418][ T8591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.355661][ T8630] netlink: 'syz.2.991': attribute type 1 has an invalid length. [ 203.403975][ T8630] bond3: entered promiscuous mode [ 203.409750][ T8630] 8021q: adding VLAN 0 to HW filter on device bond3 [ 203.503061][ T8635] syzkaller0: entered promiscuous mode [ 203.508989][ T8635] syzkaller0: entered allmulticast mode [ 206.798710][ T8653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 206.985761][ T8677] netlink: 'syz.2.1004': attribute type 1 has an invalid length. [ 207.026636][ T8677] bond4: entered promiscuous mode [ 207.033256][ T8677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 207.373593][ T8690] syzkaller0: entered promiscuous mode [ 207.382512][ T8690] syzkaller0: entered allmulticast mode [ 207.408342][ T8695] tipc: Enabled bearer , priority 0 [ 209.042311][ T8705] tipc: Resetting bearer [ 209.048646][ T8716] tipc: Enabling of bearer rejected, failed to enable media [ 209.103158][ T8694] tipc: Disabling bearer [ 209.170773][ T8724] netlink: 'syz.2.1019': attribute type 1 has an invalid length. [ 209.216937][ T8724] bond5: entered promiscuous mode [ 209.227151][ T8724] 8021q: adding VLAN 0 to HW filter on device bond5 [ 209.669612][ T8752] syzkaller0: entered promiscuous mode [ 209.675407][ T8752] syzkaller0: entered allmulticast mode [ 211.614899][ T8774] netlink: 'syz.2.1033': attribute type 1 has an invalid length. [ 211.645079][ T8774] bond6: entered promiscuous mode [ 211.650529][ T8774] 8021q: adding VLAN 0 to HW filter on device bond6 [ 212.060286][ T8788] syzkaller0: entered promiscuous mode [ 212.065838][ T8788] syzkaller0: entered allmulticast mode [ 212.461843][ T8738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 213.838658][ T8815] netlink: 'syz.1.1043': attribute type 1 has an invalid length. [ 213.889150][ T8815] bond7: entered promiscuous mode [ 213.895394][ T8815] 8021q: adding VLAN 0 to HW filter on device bond7 [ 214.094960][ T8830] tipc: Enabled bearer , priority 0 [ 214.214777][ T8830] syzkaller0: entered promiscuous mode [ 214.237824][ T8830] syzkaller0: entered allmulticast mode [ 214.254168][ T8830] tipc: Resetting bearer [ 214.302103][ T8828] tipc: Resetting bearer [ 215.948655][ T8828] tipc: Disabling bearer [ 215.985743][ T788] tipc: Node number set to 1519286678 [ 216.452752][ T8890] syzkaller0: entered promiscuous mode [ 216.458440][ T8890] syzkaller0: entered allmulticast mode [ 217.261768][ T8838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.195635][ T8903] syzkaller0: entered promiscuous mode [ 218.207449][ T8903] syzkaller0: entered allmulticast mode [ 218.434930][ T8922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1071'. [ 218.602659][ T8932] tipc: Enabling of bearer rejected, failed to enable media [ 218.909437][ T8943] syzkaller0: entered promiscuous mode [ 218.915087][ T8943] syzkaller0: entered allmulticast mode [ 220.399307][ T8954] syzkaller0: entered promiscuous mode [ 220.404911][ T8954] syzkaller0: entered allmulticast mode [ 220.743051][ T8973] syzkaller0: entered promiscuous mode [ 220.748823][ T8973] syzkaller0: entered allmulticast mode [ 222.445462][ T9005] syzkaller0: entered promiscuous mode [ 222.451258][ T9005] syzkaller0: entered allmulticast mode [ 223.595502][ T9020] syzkaller0: entered promiscuous mode [ 223.601228][ T9020] syzkaller0: entered allmulticast mode [ 223.808561][ T8982] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.103624][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1104'. [ 225.402464][ T9044] tipc: Enabling of bearer rejected, failed to enable media [ 225.568753][ T9054] syzkaller0: entered promiscuous mode [ 225.583820][ T9054] syzkaller0: entered allmulticast mode [ 225.722637][ T9064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1115'. [ 225.901532][ T9068] syzkaller0: entered promiscuous mode [ 225.907062][ T9068] syzkaller0: entered allmulticast mode [ 227.530711][ T9077] netlink: 'syz.1.1120': attribute type 1 has an invalid length. [ 227.572150][ T9077] bond8: entered promiscuous mode [ 227.579425][ T9077] 8021q: adding VLAN 0 to HW filter on device bond8 [ 227.635758][ T9093] tipc: Enabling of bearer rejected, failed to enable media [ 227.866791][ T9103] syzkaller0: entered promiscuous mode [ 227.883797][ T9103] syzkaller0: entered allmulticast mode [ 227.907304][ T9108] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1126'. [ 228.173709][ T9124] netlink: 'syz.2.1132': attribute type 1 has an invalid length. [ 228.227423][ T9124] bond7: entered promiscuous mode [ 228.235540][ T9124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.341181][ T9120] syzkaller0: entered promiscuous mode [ 228.346793][ T9120] syzkaller0: entered allmulticast mode [ 228.363661][ T9131] tipc: Enabling of bearer rejected, failed to enable media [ 231.421225][ T9144] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1137'. [ 231.698968][ T9173] netlink: 'syz.3.1142': attribute type 1 has an invalid length. [ 231.781362][ T9173] bond4: entered promiscuous mode [ 231.786718][ T9173] 8021q: adding VLAN 0 to HW filter on device bond4 [ 231.894005][ T9185] syzkaller0: entered promiscuous mode [ 231.899862][ T9185] syzkaller0: entered allmulticast mode [ 231.932165][ T9186] tipc: Enabled bearer , priority 0 [ 231.955557][ T9181] tipc: Disabling bearer [ 233.653338][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1149'. [ 235.357744][ T9231] netlink: 'syz.3.1156': attribute type 1 has an invalid length. [ 235.365964][ T9231] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 235.589226][ T9248] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1160'. [ 235.644510][ T9247] syzkaller0: entered promiscuous mode [ 235.650225][ T9247] syzkaller0: entered allmulticast mode [ 235.656861][ T9244] tipc: Enabled bearer , priority 0 [ 235.678188][ T9243] tipc: Disabling bearer [ 237.322528][ T9274] netlink: 'syz.2.1166': attribute type 1 has an invalid length. [ 237.345729][ T9274] bond8: entered promiscuous mode [ 237.351644][ T9274] 8021q: adding VLAN 0 to HW filter on device bond8 [ 237.678801][ T9294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 239.270011][ T9296] tipc: Enabled bearer , priority 0 [ 239.282310][ T9295] tipc: Disabling bearer [ 239.412320][ T9307] syzkaller0: entered promiscuous mode [ 239.422620][ T9307] syzkaller0: entered allmulticast mode [ 239.436692][ T9320] netlink: 'syz.2.1176': attribute type 1 has an invalid length. [ 239.465661][ T9320] bond9: entered promiscuous mode [ 239.473575][ T9320] 8021q: adding VLAN 0 to HW filter on device bond9 [ 240.846039][ T9322] syzkaller0: entered promiscuous mode [ 240.851916][ T9322] syzkaller0: entered allmulticast mode [ 241.138711][ T9341] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1182'. [ 241.346315][ T9351] syzkaller0: entered promiscuous mode [ 241.351992][ T9351] syzkaller0: entered allmulticast mode [ 242.876215][ T9355] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 242.885439][ T9355] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 244.405083][ T9383] syzkaller0: entered promiscuous mode [ 244.437494][ T9383] syzkaller0: entered allmulticast mode [ 244.836211][ T9403] syzkaller0: entered promiscuous mode [ 244.841984][ T9403] syzkaller0: entered allmulticast mode [ 244.863618][ T9401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1195'. [ 244.875289][ T9405] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 244.907023][ T9405] bond5: entered promiscuous mode [ 244.912676][ T9405] 8021q: adding VLAN 0 to HW filter on device bond5 [ 246.597436][ T9426] syzkaller0: entered promiscuous mode [ 246.612451][ T9426] syzkaller0: entered allmulticast mode [ 248.557244][ T9477] netlink: 'syz.0.1210': attribute type 1 has an invalid length. [ 248.607481][ T9477] bond1: entered promiscuous mode [ 248.625159][ T9477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.641623][ T9476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1209'. [ 248.730428][ T9485] syzkaller0: entered promiscuous mode [ 248.735937][ T9485] syzkaller0: entered allmulticast mode [ 248.768914][ T9477] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.775975][ T9477] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 248.786493][ T9477] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 248.799075][ T9477] bond1: (slave ip6gre1): making interface the new active one [ 248.806594][ T9477] ip6gre1: entered promiscuous mode [ 248.813947][ T9477] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 250.740227][ T9524] syzkaller0: entered promiscuous mode [ 250.758621][ T9524] syzkaller0: entered allmulticast mode [ 250.784220][ T9536] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1224'. [ 251.069959][ T9542] syzkaller0: entered promiscuous mode [ 251.075913][ T9542] syzkaller0: entered allmulticast mode [ 252.828427][ T9573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1234'. [ 253.055670][ T9586] syzkaller0: entered promiscuous mode [ 253.071454][ T9586] syzkaller0: entered allmulticast mode [ 253.312940][ T9594] syzkaller0: entered promiscuous mode [ 253.318652][ T9594] syzkaller0: entered allmulticast mode [ 255.055355][ T9629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 255.254512][ T9642] syzkaller0: entered promiscuous mode [ 255.260750][ T9642] syzkaller0: entered allmulticast mode [ 255.502768][ T9650] syzkaller0: entered promiscuous mode [ 255.509211][ T9650] syzkaller0: entered allmulticast mode [ 255.524305][ T9652] syzkaller0: entered promiscuous mode [ 255.530559][ T9652] syzkaller0: entered allmulticast mode [ 255.911208][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.924319][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.200488][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 257.408141][ T9687] syzkaller0: entered promiscuous mode [ 257.413734][ T9687] syzkaller0: entered allmulticast mode [ 257.588799][ T9693] syzkaller0: entered promiscuous mode [ 257.597769][ T9693] syzkaller0: entered allmulticast mode [ 259.501127][ T9735] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1275'. [ 259.528368][ T9737] syzkaller0: entered promiscuous mode [ 259.533885][ T9737] syzkaller0: entered allmulticast mode [ 259.691852][ T9743] syzkaller0: entered promiscuous mode [ 259.701895][ T9743] syzkaller0: entered allmulticast mode [ 261.471682][ T9766] syzkaller0: entered promiscuous mode [ 261.477454][ T9766] syzkaller0: entered allmulticast mode [ 261.589114][ T9774] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 261.672199][ T9779] syzkaller0: entered promiscuous mode [ 261.685938][ T9779] syzkaller0: entered allmulticast mode [ 261.851056][ T9784] syzkaller0: entered promiscuous mode [ 261.857408][ T9784] syzkaller0: entered allmulticast mode [ 263.567155][ T9807] syzkaller0: entered promiscuous mode [ 263.586422][ T9807] syzkaller0: entered allmulticast mode [ 263.701137][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1301'. [ 263.744336][ T9814] syzkaller0: entered promiscuous mode [ 263.754294][ T9814] syzkaller0: entered allmulticast mode [ 264.040850][ T9826] syzkaller0: entered promiscuous mode [ 264.046538][ T9826] syzkaller0: entered allmulticast mode [ 265.827511][ T9840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1314'. [ 266.125176][ T9869] syzkaller0: entered promiscuous mode [ 266.139250][ T9869] syzkaller0: entered allmulticast mode [ 266.326335][ T9879] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1323'. [ 266.454624][ T9881] syzkaller0: entered promiscuous mode [ 266.465104][ T9881] syzkaller0: entered allmulticast mode [ 268.051848][ T9890] syzkaller0: entered promiscuous mode [ 268.057367][ T9890] syzkaller0: entered allmulticast mode [ 268.217882][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 268.275039][ T9907] syzkaller0: entered promiscuous mode [ 268.284082][ T9907] syzkaller0: entered allmulticast mode [ 268.394204][ T9913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1335'. [ 268.623555][ T9921] syzkaller0: entered promiscuous mode [ 268.629219][ T9921] syzkaller0: entered allmulticast mode [ 270.498571][ T9960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1346'. [ 270.690688][ T9968] syzkaller0: entered promiscuous mode [ 270.696218][ T9968] syzkaller0: entered allmulticast mode [ 270.814303][ T9976] syzkaller0: entered promiscuous mode [ 270.827745][ T9976] syzkaller0: entered allmulticast mode [ 270.840507][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'. [ 270.858122][ T9974] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1351'. [ 271.327522][ T9998] syzkaller0: entered promiscuous mode [ 271.342655][ T9998] syzkaller0: entered allmulticast mode [ 271.362262][T10000] syzkaller0: entered promiscuous mode [ 271.373606][T10000] syzkaller0: entered allmulticast mode [ 273.449378][T10033] syzkaller0: entered promiscuous mode [ 273.455060][T10033] syzkaller0: entered allmulticast mode [ 273.464262][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 273.474513][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1367'. [ 273.806195][T10048] syzkaller0: entered promiscuous mode [ 273.812228][T10048] syzkaller0: entered allmulticast mode [ 277.409685][T10108] syzkaller0: entered promiscuous mode [ 277.415350][T10108] syzkaller0: entered allmulticast mode [ 279.339670][T10147] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.959995][T10177] syzkaller1: entered promiscuous mode [ 279.977542][T10177] syzkaller1: entered allmulticast mode [ 280.197449][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1416'. [ 280.427017][T10200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1420'. [ 280.584395][T10206] syzkaller0: entered promiscuous mode [ 280.593113][T10206] syzkaller0: entered allmulticast mode [ 280.628937][T10206] tipc: Enabled bearer , priority 0 [ 280.650306][T10204] tipc: Resetting bearer [ 280.734002][T10204] tipc: Disabling bearer [ 281.364957][T10248] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1441'. [ 281.654562][T10261] syzkaller0: entered promiscuous mode [ 281.667792][T10261] syzkaller0: entered allmulticast mode [ 282.256714][T10264] tipc: Enabled bearer , priority 0 [ 282.271262][T10260] tipc: Resetting bearer [ 282.364466][T10260] tipc: Disabling bearer [ 282.470454][T10285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 284.284545][T10311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1460'. [ 284.333082][T10315] tipc: Enabling of bearer rejected, failed to enable media [ 284.353198][T10313] syzkaller0: entered promiscuous mode [ 284.362716][T10313] syzkaller0: entered allmulticast mode [ 284.837376][T10336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1472'. [ 285.193252][T10352] syzkaller0: entered promiscuous mode [ 285.199325][T10352] syzkaller0: entered allmulticast mode [ 285.404429][T10359] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1482'. [ 285.820470][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1491'. [ 285.971660][T10391] syzkaller0: entered promiscuous mode [ 285.990074][T10391] syzkaller0: entered allmulticast mode [ 287.835747][T10408] syzkaller0: entered promiscuous mode [ 287.841370][T10408] syzkaller0: entered allmulticast mode [ 287.850391][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1501'. [ 288.142964][T10426] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 288.166313][T10428] syzkaller0: entered promiscuous mode [ 288.172608][T10428] syzkaller0: entered allmulticast mode [ 288.377595][T10432] syzkaller1: entered promiscuous mode [ 288.385601][T10432] syzkaller1: entered allmulticast mode [ 288.549795][T10438] syzkaller0: entered promiscuous mode [ 288.555500][T10438] syzkaller0: entered allmulticast mode [ 290.126933][T10445] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1512'. [ 290.463598][T10462] syzkaller0: entered promiscuous mode [ 290.475358][T10462] syzkaller0: entered allmulticast mode [ 290.841526][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1523'. [ 291.083231][T10491] syzkaller0: entered promiscuous mode [ 291.090055][T10491] syzkaller0: entered allmulticast mode [ 291.232879][T10497] syzkaller0: entered promiscuous mode [ 291.244877][T10497] syzkaller0: entered allmulticast mode [ 291.410952][T10505] bond2: entered promiscuous mode [ 291.416416][T10505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 291.482294][T10508] syzkaller0: entered promiscuous mode [ 291.509569][T10508] syzkaller0: entered allmulticast mode [ 292.349958][T10533] xt_hashlimit: size too large, truncated to 1048576 [ 294.725419][ T1137] ------------[ cut here ]------------ [ 294.731353][ T1137] WARNING: CPU: 1 PID: 1137 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 294.742324][ T161] ------------[ cut here ]------------ [ 294.742371][ T161] WARNING: CPU: 0 PID: 161 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 294.742409][ T161] Modules linked in: [ 294.742445][ T161] CPU: 0 PID: 161 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 294.742464][ T161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.742478][ T161] Workqueue: phy3 ieee80211_csa_finalize_work [ 294.747958][ T1137] Modules linked in: [ 294.747989][ T1137] CPU: 1 PID: 1137 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 294.759179][ T161] [ 294.762898][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.770407][ T161] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 294.770441][ T161] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 294.770460][ T161] RSP: 0018:ffffc90002e979c0 EFLAGS: 00010293 [ 294.770482][ T161] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff88801b7b8000 [ 294.780713][ T1137] Workqueue: phy4 ieee80211_csa_finalize_work [ 294.780751][ T1137] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 294.780778][ T1137] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 294.780795][ T1137] RSP: 0018:ffffc9000481f9c0 EFLAGS: 00010293 [ 294.780815][ T1137] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888024009e00 [ 294.780830][ T1137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 294.780843][ T1137] RBP: dffffc0000000000 R08: ffff88805c3315af R09: 1ffff1100b8662b5 [ 294.780859][ T1137] R10: dffffc0000000000 R11: ffffed100b8662b6 R12: 0000000000000001 [ 294.780873][ T1137] R13: ffff88805c3325d9 R14: ffff8880766dac70 R15: ffff8880766dace8 [ 294.786938][ T161] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 294.791012][ T1137] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 294.798638][ T161] RBP: dffffc0000000000 R08: ffff88805c1f55af R09: 1ffff1100b83eab5 [ 294.798660][ T161] R10: dffffc0000000000 R11: ffffed100b83eab6 R12: 0000000000000001 [ 294.798676][ T161] R13: ffff88805c1f65d9 R14: ffff8880787a2c70 R15: ffff8880787a2ce8 [ 294.801031][ T1137] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.811125][ T161] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 294.811145][ T161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.811160][ T161] CR2: 000000110c42ae6c CR3: 000000002ce00000 CR4: 00000000003506f0 [ 294.811179][ T161] Call Trace: [ 294.811200][ T161] [ 294.818639][ T1137] CR2: 000000110c3b9636 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 294.839094][ C0] ------------[ cut here ]------------ [ 294.839119][ C0] WARNING: CPU: 0 PID: 161 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 294.839164][ C0] Modules linked in: [ 294.839180][ C0] CPU: 0 PID: 161 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 294.839202][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 294.839216][ C0] Workqueue: phy3 ieee80211_csa_finalize_work [ 294.839247][ C0] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 294.839277][ C0] Code: 24 4c 89 e7 e8 be 74 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 b9 b2 82 f7 0f 0b e9 f6 f7 ff ff e8 ad b2 82 f7 <0f> 0b e9 48 fb ff ff e8 a1 b2 82 f7 48 c7 c7 20 89 64 8e 4c 89 e6 [ 294.839297][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 294.839318][ C0] RAX: ffffffff8a046f53 RBX: ffffffff8a045d56 RCX: ffff88801b7b8000 [ 294.839335][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.839350][ C0] RBP: 0000000000000000 R08: ffff88801b7b8000 R09: 0000000000000003 [ 294.839365][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c3323c0 [ 294.839380][ C0] R13: dffffc0000000000 R14: ffff88805c3328b0 R15: ffff888024aa1424 [ 294.839397][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 294.839417][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 294.839433][ C0] CR2: 000000110c42ae6c CR3: 000000002ce00000 CR4: 00000000003506f0 [ 294.839455][ C0] Call Trace: [ 294.839471][ C0] [ 294.839485][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 294.839525][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 294.839558][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 294.839600][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 294.839636][ C0] __iterate_interfaces+0x243/0x500 [ 294.839669][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 294.839696][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 294.839732][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 294.839759][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 294.839798][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 294.839826][ C0] __hrtimer_run_queues+0x520/0xc40 [ 294.839850][ C0] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 294.839885][ C0] ? hw_scan_work+0xf60/0xf60 [ 294.839917][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 294.839941][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 294.839978][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 294.840008][ C0] handle_softirqs+0x280/0x820 [ 294.840035][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 294.840063][ C0] ? do_softirq+0x1a0/0x1a0 [ 294.840090][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 294.840123][ C0] __irq_exit_rcu+0xd3/0x190 [ 294.840145][ C0] ? irq_exit_rcu+0x20/0x20 [ 294.840191][ C0] irq_exit_rcu+0x9/0x20 [ 294.846333][ T1137] Call Trace: [ 294.846345][ T1137] [ 294.854341][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 294.854369][ C0] [ 294.854376][ C0] [ 294.854384][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 294.854409][ C0] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 294.854448][ C0] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 294.854499][ C0] RSP: 0018:ffffc90002e972e0 EFLAGS: 00000293 [ 294.854522][ C0] RAX: ffffffff816b9b86 RBX: ffffc90002e9747f RCX: ffff88801b7b8000 [ 294.854539][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.854554][ C0] RBP: ffffc90002e97450 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 294.861144][ T1137] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 294.868222][ C0] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: ffffffff8d8b9500 [ 294.887951][ T1137] ieee80211_csa_finalize+0x5a6/0xf20 [ 294.893935][ C0] R13: 1ffffffff19f970c R14: ffffffff8d8b9558 R15: dffffc0000000000 [ 294.902151][ T1137] ? mutex_lock_nested+0x20/0x20 [ 294.910039][ C0] ? console_flush_all+0x8a6/0xd20 [ 294.918094][ T1137] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 294.926040][ C0] ? __rwlock_init+0x150/0x150 [ 294.936292][ T1137] ? ieee80211_csa_finalize_work+0x140/0x140 [ 294.942087][ C0] ? console_flush_all+0x10a/0xd20 [ 294.942133][ C0] ? is_console_locked+0x20/0x20 [ 294.942156][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 294.942193][ C0] console_unlock+0xad/0x350 [ 294.942222][ C0] ? other_cpu_in_panic+0xf0/0xf0 [ 294.942254][ C0] ? vprintk_emit+0x467/0x610 [ 294.951319][ T1137] ? read_lock_is_recursive+0x20/0x20 [ 294.959236][ C0] ? vprintk_emit+0x30b/0x610 [ 294.967241][ T1137] ieee80211_csa_finalize_work+0xf6/0x140 [ 294.975233][ C0] ? vprintk_emit+0x30b/0x610 [ 294.975265][ C0] vprintk_emit+0x497/0x610 [ 294.981895][ T1137] ? process_scheduled_works+0x96f/0x15d0 [ 294.990841][ C0] ? vprintk_emit+0x30b/0x610 [ 294.990874][ C0] ? printk_sprint+0x460/0x460 [ 294.997838][ T1137] process_scheduled_works+0xa5d/0x15d0 [ 295.005824][ C0] ? vprintk_emit+0x53d/0x610 [ 295.009372][ T1137] ? worker_attach_to_pool+0x380/0x380 [ 295.012091][ C0] ? printk_sprint+0x460/0x460 [ 295.020341][ T1137] ? assign_work+0x3d2/0x5d0 [ 295.025589][ C0] _printk+0xde/0x130 [ 295.037901][ T1137] worker_thread+0xa55/0xfc0 [ 295.039552][ C0] ? load_image+0x420/0x420 [ 295.046928][ T1137] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 295.057062][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 295.057092][ C0] ? get_stack_info+0xf6/0x170 [ 295.057121][ C0] __show_trace_log_lvl+0x5d9/0x6c0 [ 295.057164][ C0] ? ieee80211_link_use_reserved_context+0x383/0x5c0 [ 295.057198][ C0] __warn+0x160/0x470 [ 295.063345][ T1137] ? _raw_spin_unlock+0x40/0x40 [ 295.069645][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.069677][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.089454][ T1137] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 295.095723][ C0] report_bug+0x2be/0x4f0 [ 295.103966][ T1137] kthread+0x2fa/0x390 [ 295.111739][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.111772][ C0] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.119818][ T1137] ? pr_cont_work+0x560/0x560 [ 295.127836][ C0] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 295.138045][ T1137] ? kthread_blkcg+0xd0/0xd0 [ 295.144850][ C0] handle_bug+0xcf/0x120 [ 295.151872][ T1137] ret_from_fork+0x48/0x80 [ 295.159407][ C0] exc_invalid_op+0x1a/0x50 [ 295.162711][ T1137] ? kthread_blkcg+0xd0/0xd0 [ 295.165571][ C0] asm_exc_invalid_op+0x1a/0x20 [ 295.171196][ T1137] ret_from_fork_asm+0x11/0x20 [ 295.176605][ C0] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.183477][ T1137] [ 295.189016][ C0] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 295.189038][ C0] RSP: 0018:ffffc90002e979c0 EFLAGS: 00010293 [ 295.194270][ T1137] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 295.194313][ T1137] CPU: 1 PID: 1137 Comm: kworker/u4:8 Not tainted syzkaller #0 [ 295.194380][ T1137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 295.194442][ T1137] Workqueue: phy4 ieee80211_csa_finalize_work [ 295.194538][ T1137] Call Trace: [ 295.194562][ T1137] [ 295.194584][ T1137] dump_stack_lvl+0x18c/0x250 [ 295.194688][ T1137] ? show_regs_print_info+0x20/0x20 [ 295.194788][ T1137] ? load_image+0x420/0x420 [ 295.194910][ T1137] panic+0x2dc/0x730 [ 295.194992][ T1137] ? bpf_jit_dump+0xd0/0xd0 [ 295.195092][ T1137] ? ret_from_fork_asm+0x11/0x20 [ 295.195182][ T1137] __warn+0x2e0/0x470 [ 295.195241][ T1137] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.195323][ T1137] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.195388][ T1137] report_bug+0x2be/0x4f0 [ 295.195434][ T1137] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.195501][ T1137] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.195565][ T1137] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 295.195637][ T1137] handle_bug+0xcf/0x120 [ 295.195690][ T1137] exc_invalid_op+0x1a/0x50 [ 295.195758][ T1137] asm_exc_invalid_op+0x1a/0x20 [ 295.195842][ T1137] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 295.195915][ T1137] Code: 48 89 df e8 ea 3d d6 f7 e9 dc fc ff ff e8 d0 06 7e f7 eb 24 e8 c9 06 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 b8 06 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 aa 06 7e f7 48 8b 7c 24 08 4c 8b 7c [ 295.195958][ T1137] RSP: 0018:ffffc9000481f9c0 EFLAGS: 00010293 [ 295.196002][ T1137] RAX: ffffffff8a09174e RBX: 0000000000000001 RCX: ffff888024009e00 [ 295.196044][ T1137] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 295.196075][ T1137] RBP: dffffc0000000000 R08: ffff88805c3315af R09: 1ffff1100b8662b5 [ 295.196117][ T1137] R10: dffffc0000000000 R11: ffffed100b8662b6 R12: 0000000000000001 [ 295.196136][ T1137] R13: ffff88805c3325d9 R14: ffff8880766dac70 R15: ffff8880766dace8 [ 295.196198][ T1137] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 295.196329][ T1137] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 295.196421][ T1137] ieee80211_csa_finalize+0x5a6/0xf20 [ 295.196489][ T1137] ? mutex_lock_nested+0x20/0x20 [ 295.196546][ T1137] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 295.196622][ T1137] ? ieee80211_csa_finalize_work+0x140/0x140 [ 295.196701][ T1137] ? read_lock_is_recursive+0x20/0x20 [ 295.196793][ T1137] ieee80211_csa_finalize_work+0xf6/0x140 [ 295.196872][ T1137] ? process_scheduled_works+0x96f/0x15d0 [ 295.196929][ T1137] process_scheduled_works+0xa5d/0x15d0 [ 295.197091][ T1137] ? worker_attach_to_pool+0x380/0x380 [ 295.197210][ T1137] ? assign_work+0x3d2/0x5d0 [ 295.197299][ T1137] worker_thread+0xa55/0xfc0 [ 295.197370][ T1137] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 295.197440][ T1137] ? _raw_spin_unlock+0x40/0x40 [ 295.197489][ T1137] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 295.197620][ T1137] kthread+0x2fa/0x390 [ 295.197670][ T1137] ? pr_cont_work+0x560/0x560 [ 295.197745][ T1137] ? kthread_blkcg+0xd0/0xd0 [ 295.197798][ T1137] ret_from_fork+0x48/0x80 [ 295.197863][ T1137] ? kthread_blkcg+0xd0/0xd0 [ 295.197919][ T1137] ret_from_fork_asm+0x11/0x20 [ 295.198033][ T1137] [ 295.201038][ T1137] Kernel Offset: disabled