last executing test programs: 8.248726831s ago: executing program 0 (id=81): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/ieee80211/phy0/netdev:wlan0/mesh_stats/fwded_mcast\x00', 0x0, 0x0) read(r4, &(0x7f00000002c0)=""/64, 0x40) 7.624584632s ago: executing program 0 (id=87): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000017000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000018000100000000000000000004010000080009000200000004000f0004001e00"], 0x28}}, 0x0) 7.360765865s ago: executing program 0 (id=90): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/netdev:syzkaller0/mesh_stats/fwded_mcast\x00', 0x0, 0x0) read(r2, &(0x7f0000000240)=""/64, 0x40) 7.096596678s ago: executing program 0 (id=93): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000080010000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x88000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}, 0x4ff97) 6.710793467s ago: executing program 0 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x0) 3.868100989s ago: executing program 0 (id=101): setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='268434944\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nf_conntrack/parameters/hashsize\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='268434944', 0x9) 2.268629678s ago: executing program 3 (id=109): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}}}, [@NL80211_ATTR_IFNAME={0x14}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/ieee80211/phy0/netdev:mesh0/mesh_stats/fwded_mcast\x00', 0x0, 0x0) read(r3, &(0x7f0000000240)=""/64, 0x40) 2.128497635s ago: executing program 3 (id=111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dbg\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dbg\x00', &(0x7f0000000440)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dbg/ieee80211/phy0/netdev:wlan0\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000600), 0x1000) 1.912603955s ago: executing program 3 (id=114): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback}}, 0xe8) sendto$inet6(r1, &(0x7f0000000200)='trigger', 0x7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1.647817308s ago: executing program 3 (id=117): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\aD\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f0000000000)={0x2, 0x1, 0x4, 0x7, 0x0, 0xf0000000}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x4a, &(0x7f00000003c0)=0x6568, 0x4) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10120, 0x0) 1.344785454s ago: executing program 1 (id=120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000", 0x60}], 0x1}, 0x0) 1.117019545s ago: executing program 2 (id=122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) 1.097074946s ago: executing program 1 (id=123): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/ieee80211\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/ieee80211/phy0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/ieee80211/phy0/netdev:wlan0\x00', 0x0, 0x0) 920.243085ms ago: executing program 1 (id=124): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x510, 0x1f0, 0x0, 0x148, 0x1f0, 0x148, 0x478, 0x240, 0x240, 0x478, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0x190, 0x1f0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e20, 0x4e23, 0x8, 0x2, 0x5f4a, 0x100, 0x2}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {}, {0xff}, 0x84, 0x0, 0x60}, 0x0, 0x260, 0x288, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x8000000, 0x1, 0x1, 'syz1\x00', 0x5}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/xt_recent/syz1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000400)='+1.2.3.4\n', 0x9, 0x0) pwrite64(r1, &(0x7f0000000400)='+1.2.3.4\n', 0x9, 0x0) 915.635335ms ago: executing program 2 (id=125): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x1234, 0x32}, 0xa, @in6=@loopback}}, 0xe8) sendto$inet6(r1, &(0x7f0000000200)='trigger', 0x7, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 783.775591ms ago: executing program 1 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x38}}, 0x0) read(r0, &(0x7f0000000700)=""/256, 0x100) 777.801971ms ago: executing program 2 (id=127): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 572.734422ms ago: executing program 1 (id=128): socket$inet6(0xa, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000601000000004400050000000000000080010000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f00000001c0)={0xa, 0x4e20, 0x88000, @local}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x18}, 0x4ff97) 570.141832ms ago: executing program 2 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb08000100e00000022c0010800800034000000000080003400000dba30800034000000101080001400000000408000140000002004c000f8008000240000000810800"], 0x1f0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) 442.901248ms ago: executing program 1 (id=130): syz_80211_join_ibss(&(0x7f0000000000)='wlan0\x00', &(0x7f0000000040), 0x6, 0x0) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', &(0x7f00000000c0), 0x6, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x11, 0x888e, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) nanosleep(&(0x7f0000000700)={0x0, 0x1dcd6500}, 0x0) 364.285242ms ago: executing program 3 (id=131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x8}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}]}, 0x38}}, 0x0) 285.146726ms ago: executing program 2 (id=132): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000600)="01020304", 0x4, 0x0, &(0x7f0000000700)={0x2, 0x1234, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000800)={0x2, 0x1234, @local}, 0x10) 92.506105ms ago: executing program 3 (id=133): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd7000fbdbdf25040000040c0017000c0000000000000004001900"], 0x24}}, 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050001000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'\x00', 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050002000000000000009400000008000300", @ANYRES32=r2, @ANYBLOB="05003901010000000a0006000200000001000000"], 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050003000000000000001300000008000300", @ANYRES32=r2, @ANYBLOB="0a0006000200000002000000080013000c1830600600100001000000"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050004000000000000009600000008000300", @ANYRES32=r2, @ANYBLOB="0a003a0102000000020000000a00060002000000020100000500390101000000080013000c183060"], 0x44}}, 0x0) 0s ago: executing program 2 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0xa0, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x74, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_TYPE={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x128}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233", 0x4, 0x0, &(0x7f0000000100)={0x2, 0x1234, @local={0x7f, 0x0, 0x0, 0x1}}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 78.281926][ T5762] cgroup: Unknown subsys name 'net' [ 78.432095][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.129964][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.409616][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.424316][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.433616][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.442547][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.450668][ T5787] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.458471][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.468416][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.476611][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.484580][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.502716][ T5085] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.522846][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.530971][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.539253][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.547084][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.547782][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.559208][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.565231][ T5085] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.571301][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.587203][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.599813][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.601575][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.608059][ T5085] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.617873][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.630133][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.099452][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 83.231529][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.248548][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 83.353253][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.377182][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.385205][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.392847][ T5775] bridge_slave_0: entered allmulticast mode [ 83.400028][ T5775] bridge_slave_0: entered promiscuous mode [ 83.436226][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.444813][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.452007][ T5775] bridge_slave_1: entered allmulticast mode [ 83.459864][ T5775] bridge_slave_1: entered promiscuous mode [ 83.545061][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.552547][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.559738][ T5778] bridge_slave_0: entered allmulticast mode [ 83.567536][ T5778] bridge_slave_0: entered promiscuous mode [ 83.587384][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.594817][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.602044][ T5778] bridge_slave_1: entered allmulticast mode [ 83.612455][ T5778] bridge_slave_1: entered promiscuous mode [ 83.632775][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.639947][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.647840][ T5776] bridge_slave_0: entered allmulticast mode [ 83.655625][ T5776] bridge_slave_0: entered promiscuous mode [ 83.666577][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.700914][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.708378][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.715963][ T5776] bridge_slave_1: entered allmulticast mode [ 83.723474][ T5776] bridge_slave_1: entered promiscuous mode [ 83.733168][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.789160][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.799008][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.806842][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.814418][ T5777] bridge_slave_0: entered allmulticast mode [ 83.821457][ T5777] bridge_slave_0: entered promiscuous mode [ 83.854202][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.865484][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.878401][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.885964][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.893324][ T5777] bridge_slave_1: entered allmulticast mode [ 83.900833][ T5777] bridge_slave_1: entered promiscuous mode [ 83.909828][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.926555][ T5775] team0: Port device team_slave_0 added [ 83.936617][ T5775] team0: Port device team_slave_1 added [ 84.013624][ T5778] team0: Port device team_slave_0 added [ 84.022775][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.063839][ T5778] team0: Port device team_slave_1 added [ 84.071788][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.094676][ T5776] team0: Port device team_slave_0 added [ 84.113475][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.120482][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.147121][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.173432][ T5776] team0: Port device team_slave_1 added [ 84.184123][ T5777] team0: Port device team_slave_0 added [ 84.190921][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.198103][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.226711][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.279305][ T5777] team0: Port device team_slave_1 added [ 84.305863][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.312998][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.340179][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.353324][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.360330][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.386683][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.400197][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.408095][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.434994][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.458326][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.465544][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.491966][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.505831][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.512945][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.539051][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.563630][ T5788] Bluetooth: hci2: command tx timeout [ 84.587215][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.594493][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.620744][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.652688][ T5788] Bluetooth: hci1: command tx timeout [ 84.677448][ T5775] hsr_slave_0: entered promiscuous mode [ 84.684403][ T5775] hsr_slave_1: entered promiscuous mode [ 84.720397][ T5778] hsr_slave_0: entered promiscuous mode [ 84.723821][ T51] Bluetooth: hci3: command tx timeout [ 84.731966][ T5788] Bluetooth: hci0: command tx timeout [ 84.732080][ T5778] hsr_slave_1: entered promiscuous mode [ 84.744444][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.752854][ T5778] Cannot create hsr debugfs directory [ 84.798334][ T5777] hsr_slave_0: entered promiscuous mode [ 84.805663][ T5777] hsr_slave_1: entered promiscuous mode [ 84.811967][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.819917][ T5777] Cannot create hsr debugfs directory [ 84.831878][ T5776] hsr_slave_0: entered promiscuous mode [ 84.838525][ T5776] hsr_slave_1: entered promiscuous mode [ 84.845552][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.853311][ T5776] Cannot create hsr debugfs directory [ 85.336244][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.362489][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.376170][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.386779][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.457310][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.470418][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.483165][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.494562][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.597048][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.623860][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.635659][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.651013][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.694648][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.775212][ T5776] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.792087][ T5776] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.814889][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.827258][ T5776] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.838019][ T5776] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.870549][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.878005][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.903092][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.910459][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.007230][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.100058][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.120094][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.146267][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.153499][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.186236][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.193487][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.251600][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.294322][ T4092] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.301514][ T4092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.348605][ T4092] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.355874][ T4092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.398084][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.526116][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.537529][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.555714][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.562985][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.600943][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.608293][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.653410][ T5788] Bluetooth: hci2: command tx timeout [ 86.722696][ T5788] Bluetooth: hci1: command tx timeout [ 86.803239][ T5788] Bluetooth: hci0: command tx timeout [ 86.808740][ T5788] Bluetooth: hci3: command tx timeout [ 86.817703][ T5778] veth0_vlan: entered promiscuous mode [ 86.911833][ T5778] veth1_vlan: entered promiscuous mode [ 87.026328][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.095325][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.107428][ T5778] veth0_macvtap: entered promiscuous mode [ 87.181194][ T5778] veth1_macvtap: entered promiscuous mode [ 87.259267][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.305302][ T5777] veth0_vlan: entered promiscuous mode [ 87.348134][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.373937][ T5777] veth1_vlan: entered promiscuous mode [ 87.410088][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.420526][ T5775] veth0_vlan: entered promiscuous mode [ 87.478407][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.494532][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.510021][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.520635][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.552311][ T5775] veth1_vlan: entered promiscuous mode [ 87.610681][ T5777] veth0_macvtap: entered promiscuous mode [ 87.660823][ T5777] veth1_macvtap: entered promiscuous mode [ 87.740670][ T5775] veth0_macvtap: entered promiscuous mode [ 87.766236][ T5776] veth0_vlan: entered promiscuous mode [ 87.790330][ T5775] veth1_macvtap: entered promiscuous mode [ 87.874258][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.889056][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.906633][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.919503][ T5776] veth1_vlan: entered promiscuous mode [ 87.937784][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.948337][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.960135][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.970969][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.979750][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.983706][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.000343][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.011592][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.021588][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.031822][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.049818][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.060931][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.071142][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.081855][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.094535][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.126559][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.136770][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.147390][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157472][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.205329][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.214812][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.224041][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.235795][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.256401][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.268991][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.290291][ T5776] veth0_macvtap: entered promiscuous mode [ 88.331495][ T5776] veth1_macvtap: entered promiscuous mode [ 88.455795][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.479756][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.490967][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.512258][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.532250][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.560367][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.584099][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.599175][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.611270][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.623288][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.633893][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.644232][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.655045][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.667023][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.722554][ T5788] Bluetooth: hci2: command tx timeout [ 88.734393][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.750162][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.767844][ T5776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802576][ T5788] Bluetooth: hci1: command tx timeout [ 88.811923][ T5776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.828693][ T5776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.843109][ T5776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.882995][ T51] Bluetooth: hci0: command tx timeout [ 88.888554][ T5788] Bluetooth: hci3: command tx timeout [ 88.898426][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.906675][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.027714][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.068156][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.171937][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.195897][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.245299][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.278136][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.416119][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.461270][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.841107][ T5858] syz.2.7[5858]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.436440][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.493655][ T1900] wlan1: authenticate with 08:02:11:00:00:00 [ 90.520719][ T1900] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 90.535722][ T5868] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.553479][ T1090] wlan1: authenticated [ 90.560793][ T1900] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 90.638812][ T1090] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 90.655099][ T5865] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.668224][ T1090] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 90.683629][ T1090] wlan1: associated [ 90.791617][ T5870] loop1: detected capacity change from 0 to 256 [ 90.803314][ T5788] Bluetooth: hci2: command tx timeout [ 90.835273][ T5870] ======================================================= [ 90.835273][ T5870] WARNING: The mand mount option has been deprecated and [ 90.835273][ T5870] and is ignored by this kernel. Remove the mand [ 90.835273][ T5870] option from the mount to silence this warning. [ 90.835273][ T5870] ======================================================= [ 90.874849][ T5849] loop0: detected capacity change from 0 to 2048 [ 90.882800][ T5788] Bluetooth: hci1: command tx timeout [ 90.939951][ T5849] loop0: p1 < > p3 p4 < p5 > [ 90.955416][ T5849] loop0: partition table partially beyond EOD, truncated [ 90.964182][ T5788] Bluetooth: hci3: command tx timeout [ 90.970248][ T5788] Bluetooth: hci0: command tx timeout [ 90.985938][ T5849] loop0: p1 start 262144 is beyond EOD, truncated [ 90.994594][ T5849] loop0: p3 start 33554432 is beyond EOD, truncated [ 91.006610][ T5849] loop0: p5 start 33554432 is beyond EOD, truncated [ 91.018886][ T5870] FAT-fs (loop1): Directory bread(block 64) failed [ 91.063741][ T5870] FAT-fs (loop1): Directory bread(block 65) failed [ 91.086385][ T5870] FAT-fs (loop1): Directory bread(block 66) failed [ 91.108306][ T5870] FAT-fs (loop1): Directory bread(block 67) failed [ 91.115184][ T5870] FAT-fs (loop1): Directory bread(block 68) failed [ 91.122035][ T5870] FAT-fs (loop1): Directory bread(block 69) failed [ 91.131496][ T5870] FAT-fs (loop1): Directory bread(block 70) failed [ 91.140501][ T5870] FAT-fs (loop1): Directory bread(block 71) failed [ 91.149812][ T5870] FAT-fs (loop1): Directory bread(block 72) failed [ 91.157033][ T5870] FAT-fs (loop1): Directory bread(block 73) failed [ 91.301662][ T5858] loop2: detected capacity change from 0 to 40427 [ 91.334956][ T5858] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 91.351622][ T5858] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 91.377787][ T5858] F2FS-fs (loop2): Unrecognized mount option "" or missing value [ 91.996658][ T5883] netlink: 48 bytes leftover after parsing attributes in process `syz.3.15'. [ 92.182689][ T5882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.265578][ T5887] loop1: detected capacity change from 0 to 512 [ 92.355202][ T23] cfg80211: failed to load regulatory.db [ 92.625542][ T5887] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.639264][ T5887] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.673231][ T5887] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.337583][ T5882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.822183][ C0] sched: RT throttling activated [ 94.713260][ T5893] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 95.088787][ T5900] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.268996][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.605816][ T5912] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.890922][ T5916] loop3: detected capacity change from 0 to 128 [ 95.965038][ T5916] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 95.981204][ T5916] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 96.038004][ T5916] overlayfs: failed to resolve 'lower': -2 [ 96.079073][ T5921] netlink: 80 bytes leftover after parsing attributes in process `syz.1.25'. [ 96.258552][ T5926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.342585][ T55] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 96.436701][ T5930] loop2: detected capacity change from 0 to 512 [ 96.446756][ T5930] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 96.458894][ T5930] EXT4-fs (loop2): invalid journal inode [ 96.479121][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.28'. [ 96.544656][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 96.559643][ T55] usb 4-1: config 0 has no interfaces? [ 96.570785][ T55] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 96.587520][ T55] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.612788][ T55] usb 4-1: config 0 descriptor?? [ 96.773316][ T5932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.29'. [ 96.857347][ T55] usb 4-1: USB disconnect, device number 2 [ 97.451546][ T5776] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.769980][ T5947] IPv6: Can't replace route, no match found [ 97.781256][ T5949] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.942376][ T55] IPVS: starting estimator thread 0... [ 98.042670][ T5952] IPVS: using max 19 ests per chain, 45600 per kthread [ 98.181562][ T5956] netlink: 'syz.2.38': attribute type 10 has an invalid length. [ 98.200183][ T5956] netlink: 2 bytes leftover after parsing attributes in process `syz.2.38'. [ 98.220627][ T5956] bond0: entered promiscuous mode [ 98.229325][ T5956] bond_slave_0: entered promiscuous mode [ 98.247872][ T5956] bond_slave_1: entered promiscuous mode [ 98.258988][ T5956] bridge0: port 3(bond0) entered blocking state [ 98.268031][ T5956] bridge0: port 3(bond0) entered disabled state [ 98.281181][ T5956] bond0: entered allmulticast mode [ 98.286527][ T5956] bond_slave_0: entered allmulticast mode [ 98.297224][ T5956] bond_slave_1: entered allmulticast mode [ 98.310876][ T5956] bridge0: port 3(bond0) entered blocking state [ 98.317703][ T5956] bridge0: port 3(bond0) entered forwarding state [ 98.358702][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.446726][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.520320][ T5961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.550102][ T5967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.41'. [ 98.765500][ T5971] netlink: 140 bytes leftover after parsing attributes in process `syz.2.43'. [ 98.795024][ T5971] netlink: 64 bytes leftover after parsing attributes in process `syz.2.43'. [ 99.044363][ T5977] IPv6: Can't replace route, no match found [ 99.165360][ T5980] netlink: 52 bytes leftover after parsing attributes in process `syz.3.46'. [ 99.355715][ T5984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.48'. [ 99.438945][ T5988] netlink: 72 bytes leftover after parsing attributes in process `syz.2.50'. [ 99.569493][ T5992] Zero length message leads to an empty skb [ 99.755979][ T5821] IPVS: starting estimator thread 0... [ 99.842365][ T5999] IPVS: using max 19 ests per chain, 45600 per kthread [ 99.957605][ T6002] netlink: 140 bytes leftover after parsing attributes in process `syz.0.54'. [ 99.970132][ T6003] netlink: 88 bytes leftover after parsing attributes in process `syz.1.56'. [ 99.999250][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.57'. [ 100.279428][ T6012] wlan1: authenticate with 08:02:11:00:00:00 [ 100.307084][ T6012] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 100.371809][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.463969][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.475034][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.489676][ T3505] wlan1: authenticated [ 100.510163][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.513453][ T5821] mac80211_hwsim hwsim9 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 100.565863][ T12] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 100.576365][ T3505] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 100.585391][ T6016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.589511][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.605809][ T3505] wlan1: associated [ 100.632928][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.765116][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.791144][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.861914][ T6077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.062804][ T6083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 103.647487][ T6093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.770548][ T6097] loop3: detected capacity change from 0 to 512 [ 104.015874][ T6097] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.030001][ T6097] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.057401][ T6097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.528308][ T6101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.347825][ T5795] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 106.795437][ T6112] __nla_validate_parse: 15 callbacks suppressed [ 106.795456][ T6112] netlink: 64 bytes leftover after parsing attributes in process `syz.2.102'. [ 106.905546][ T6114] netlink: 140 bytes leftover after parsing attributes in process `syz.3.103'. [ 106.942548][ T6114] netlink: 56 bytes leftover after parsing attributes in process `syz.3.103'. [ 107.130021][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.237598][ T6120] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.259510][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.329982][ T6126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.340117][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.415860][ T6125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.122610][ T6129] netlink: 40 bytes leftover after parsing attributes in process `syz.3.109'. [ 108.609492][ T6141] netlink: 140 bytes leftover after parsing attributes in process `syz.1.115'. [ 108.639144][ T6141] netlink: 56 bytes leftover after parsing attributes in process `syz.1.115'. [ 109.462625][ T6162] xt_recent: hitcount (134217728) is larger than allowed maximum (255) [ 109.869946][ T6172] netlink: 140 bytes leftover after parsing attributes in process `syz.2.129'. [ 109.899641][ T6172] netlink: 56 bytes leftover after parsing attributes in process `syz.2.129'. [ 109.999134][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.030886][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.136414][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.193472][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.201347][ T6182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.130'. [ 110.356894][ T6186] ------------[ cut here ]------------ [ 110.363398][ T6186] WARNING: CPU: 0 PID: 6186 at net/mac80211/chan.c:2022 ieee80211_link_release_channel+0x154/0x180 [ 110.374251][ T6186] Modules linked in: [ 110.378257][ T6186] CPU: 0 PID: 6186 Comm: syz.3.133 Not tainted syzkaller #0 [ 110.385858][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.396163][ T6186] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 110.403455][ T6186] Code: 7c 2d 00 00 74 08 48 89 df e8 48 6e cd f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 d6 85 00 e8 ac ec 74 f7 <0f> 0b eb c5 48 c7 c1 6c c2 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 110.424033][ T6186] RSP: 0018:ffffc9000b3871f0 EFLAGS: 00010283 [ 110.430218][ T6186] RAX: ffffffff8a1295c4 RBX: ffff88805d03d618 RCX: 0000000000080000 [ 110.438490][ T6186] RDX: ffffc9000ef8c000 RSI: 0000000000017e72 RDI: 0000000000017e73 [ 110.446701][ T6186] RBP: 0000000000000000 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 110.454781][ T6186] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff88805d03ec88 [ 110.462925][ T6186] R13: 1ffff1100ba07ac3 R14: ffff88805d03e440 R15: dffffc0000000000 [ 110.470970][ T6186] FS: 00007f9d432e66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 110.480131][ T6186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 110.486963][ T6186] CR2: 000000110c34d5be CR3: 000000004883d000 CR4: 00000000003506f0 [ 110.495077][ T6186] Call Trace: [ 110.498428][ T6186] [ 110.501427][ T6186] ieee80211_if_change_type+0x20b/0xaa0 [ 110.507090][ T6186] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 110.513879][ T6186] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 110.520467][ T6186] ieee80211_change_iface+0x5c/0x4c0 [ 110.525948][ T6186] cfg80211_change_iface+0x786/0xe20 [ 110.531585][ T6186] nl80211_set_interface+0x609/0x860 [ 110.537121][ T6186] ? nl80211_dump_interface+0x560/0x560 [ 110.542873][ T6186] genl_family_rcv_msg_doit+0x21a/0x310 [ 110.548691][ T6186] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 110.554747][ T6186] ? bpf_lsm_capable+0x9/0x10 [ 110.559593][ T6186] ? security_capable+0x89/0xb0 [ 110.564587][ T6186] genl_rcv_msg+0x611/0x7a0 [ 110.569191][ T6186] ? genl_bind+0x360/0x360 [ 110.573746][ T6186] ? nl80211_exit+0x30/0x30 [ 110.578329][ T6186] ? nl80211_dump_interface+0x560/0x560 [ 110.584017][ T6186] ? nl80211_pre_doit+0x890/0x890 [ 110.589133][ T6186] ? ref_tracker_free+0x686/0x830 [ 110.594335][ T6186] netlink_rcv_skb+0x235/0x4c0 [ 110.599280][ T6186] ? genl_bind+0x360/0x360 [ 110.603834][ T6186] ? netlink_ack+0x1160/0x1160 [ 110.608695][ T6186] ? __lock_acquire+0x7d80/0x7d80 [ 110.613926][ T6186] ? down_read+0x1ac/0x2e0 [ 110.618595][ T6186] genl_rcv+0x28/0x40 [ 110.622872][ T6186] netlink_unicast+0x7b1/0x930 [ 110.627736][ T6186] netlink_sendmsg+0x8d0/0xbf0 [ 110.633001][ T6186] ? netlink_getsockopt+0x590/0x590 [ 110.638432][ T6186] ? apparmor_socket_sendmsg+0x8e/0x330 [ 110.644289][ T6186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 110.649669][ T6186] ? security_socket_sendmsg+0x80/0xa0 [ 110.655378][ T6186] ? netlink_getsockopt+0x590/0x590 [ 110.660806][ T6186] ____sys_sendmsg+0x61b/0x980 [ 110.665765][ T6186] ? __asan_memset+0x22/0x40 [ 110.670454][ T6186] ? __sys_sendmsg_sock+0x30/0x30 [ 110.675599][ T6186] ? __import_iovec+0x5f2/0x850 [ 110.680541][ T6186] ? import_iovec+0x73/0xa0 [ 110.685174][ T6186] ___sys_sendmsg+0x2a6/0x360 [ 110.689939][ T6186] ? __sys_sendmsg+0x2b0/0x2b0 [ 110.695069][ T6186] __se_sys_sendmsg+0x1d0/0x2c0 [ 110.700096][ T6186] ? __x64_sys_sendmsg+0x80/0x80 [ 110.705321][ T6186] ? lockdep_hardirqs_on+0x98/0x150 [ 110.710616][ T6186] do_syscall_64+0x55/0xb0 [ 110.715154][ T6186] ? clear_bhb_loop+0x40/0x90 [ 110.719902][ T6186] ? clear_bhb_loop+0x40/0x90 [ 110.724709][ T6186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 110.730701][ T6186] RIP: 0033:0x7f9d4239e159 [ 110.735523][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.755407][ T6186] RSP: 002b:00007f9d432e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 110.763960][ T6186] RAX: ffffffffffffffda RBX: 00007f9d42626090 RCX: 00007f9d4239e159 [ 110.772004][ T6186] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 110.780208][ T6186] RBP: 00007f9d4243503b R08: 0000000000000000 R09: 0000000000000000 [ 110.788351][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.796472][ T6186] R13: 00007f9d42626128 R14: 00007f9d42626090 R15: 00007ffe17f92f28 [ 110.804742][ T6186] [ 110.807920][ T6186] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 110.815365][ T6186] CPU: 0 PID: 6186 Comm: syz.3.133 Not tainted syzkaller #0 [ 110.822801][ T6186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.832921][ T6186] Call Trace: [ 110.836255][ T6186] [ 110.839236][ T6186] dump_stack_lvl+0x18c/0x250 [ 110.843982][ T6186] ? show_regs_print_info+0x20/0x20 [ 110.849247][ T6186] ? load_image+0x420/0x420 [ 110.853820][ T6186] panic+0x2ca/0x720 [ 110.857791][ T6186] ? bpf_jit_dump+0xd0/0xd0 [ 110.862372][ T6186] __warn+0x2e0/0x470 [ 110.866528][ T6186] ? ieee80211_link_release_channel+0x154/0x180 [ 110.872841][ T6186] ? ieee80211_link_release_channel+0x154/0x180 [ 110.879156][ T6186] report_bug+0x2be/0x4f0 [ 110.883666][ T6186] ? ieee80211_link_release_channel+0x154/0x180 [ 110.890087][ T6186] ? ieee80211_link_release_channel+0x154/0x180 [ 110.896399][ T6186] ? ieee80211_link_release_channel+0x156/0x180 [ 110.902709][ T6186] handle_bug+0xcf/0x120 [ 110.907013][ T6186] exc_invalid_op+0x1a/0x50 [ 110.911555][ T6186] asm_exc_invalid_op+0x1a/0x20 [ 110.916444][ T6186] RIP: 0010:ieee80211_link_release_channel+0x154/0x180 [ 110.923347][ T6186] Code: 7c 2d 00 00 74 08 48 89 df e8 48 6e cd f7 bf 60 1e 00 00 48 03 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 61 d6 85 00 e8 ac ec 74 f7 <0f> 0b eb c5 48 c7 c1 6c c2 8c 8e 80 e1 07 80 c1 03 38 c1 0f 8c 51 [ 110.943001][ T6186] RSP: 0018:ffffc9000b3871f0 EFLAGS: 00010283 [ 110.949106][ T6186] RAX: ffffffff8a1295c4 RBX: ffff88805d03d618 RCX: 0000000000080000 [ 110.957107][ T6186] RDX: ffffc9000ef8c000 RSI: 0000000000017e72 RDI: 0000000000017e73 [ 110.965108][ T6186] RBP: 0000000000000000 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 110.973132][ T6186] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff88805d03ec88 [ 110.981136][ T6186] R13: 1ffff1100ba07ac3 R14: ffff88805d03e440 R15: dffffc0000000000 [ 110.989143][ T6186] ? ieee80211_link_release_channel+0x154/0x180 [ 110.995446][ T6186] ieee80211_if_change_type+0x20b/0xaa0 [ 111.001032][ T6186] ? cfg80211_mgmt_registrations_update_wk+0xa0/0xa0 [ 111.007764][ T6186] ? cfg80211_mlme_purge_registrations+0x1d4/0x210 [ 111.014328][ T6186] ieee80211_change_iface+0x5c/0x4c0 [ 111.019669][ T6186] cfg80211_change_iface+0x786/0xe20 [ 111.025017][ T6186] nl80211_set_interface+0x609/0x860 [ 111.030362][ T6186] ? nl80211_dump_interface+0x560/0x560 [ 111.035994][ T6186] genl_family_rcv_msg_doit+0x21a/0x310 [ 111.041606][ T6186] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 111.047598][ T6186] ? bpf_lsm_capable+0x9/0x10 [ 111.052338][ T6186] ? security_capable+0x89/0xb0 [ 111.057241][ T6186] genl_rcv_msg+0x611/0x7a0 [ 111.061786][ T6186] ? genl_bind+0x360/0x360 [ 111.066234][ T6186] ? nl80211_exit+0x30/0x30 [ 111.070772][ T6186] ? nl80211_dump_interface+0x560/0x560 [ 111.076366][ T6186] ? nl80211_pre_doit+0x890/0x890 [ 111.081451][ T6186] ? ref_tracker_free+0x686/0x830 [ 111.086530][ T6186] netlink_rcv_skb+0x235/0x4c0 [ 111.091347][ T6186] ? genl_bind+0x360/0x360 [ 111.095802][ T6186] ? netlink_ack+0x1160/0x1160 [ 111.100629][ T6186] ? __lock_acquire+0x7d80/0x7d80 [ 111.105747][ T6186] ? down_read+0x1ac/0x2e0 [ 111.110316][ T6186] genl_rcv+0x28/0x40 [ 111.114429][ T6186] netlink_unicast+0x7b1/0x930 [ 111.119236][ T6186] netlink_sendmsg+0x8d0/0xbf0 [ 111.124039][ T6186] ? netlink_getsockopt+0x590/0x590 [ 111.129382][ T6186] ? apparmor_socket_sendmsg+0x8e/0x330 [ 111.135070][ T6186] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 111.140410][ T6186] ? security_socket_sendmsg+0x80/0xa0 [ 111.145918][ T6186] ? netlink_getsockopt+0x590/0x590 [ 111.151654][ T6186] ____sys_sendmsg+0x61b/0x980 [ 111.156480][ T6186] ? __asan_memset+0x22/0x40 [ 111.161125][ T6186] ? __sys_sendmsg_sock+0x30/0x30 [ 111.166312][ T6186] ? __import_iovec+0x5f2/0x850 [ 111.171251][ T6186] ? import_iovec+0x73/0xa0 [ 111.175909][ T6186] ___sys_sendmsg+0x2a6/0x360 [ 111.180639][ T6186] ? __sys_sendmsg+0x2b0/0x2b0 [ 111.185473][ T6186] __se_sys_sendmsg+0x1d0/0x2c0 [ 111.190366][ T6186] ? __x64_sys_sendmsg+0x80/0x80 [ 111.195355][ T6186] ? lockdep_hardirqs_on+0x98/0x150 [ 111.200607][ T6186] do_syscall_64+0x55/0xb0 [ 111.205052][ T6186] ? clear_bhb_loop+0x40/0x90 [ 111.209763][ T6186] ? clear_bhb_loop+0x40/0x90 [ 111.214473][ T6186] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.220403][ T6186] RIP: 0033:0x7f9d4239e159 [ 111.224842][ T6186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.244524][ T6186] RSP: 002b:00007f9d432e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.252976][ T6186] RAX: ffffffffffffffda RBX: 00007f9d42626090 RCX: 00007f9d4239e159 [ 111.260974][ T6186] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 111.268975][ T6186] RBP: 00007f9d4243503b R08: 0000000000000000 R09: 0000000000000000 [ 111.277056][ T6186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.285144][ T6186] R13: 00007f9d42626128 R14: 00007f9d42626090 R15: 00007ffe17f92f28 [ 111.293166][ T6186] [ 111.296883][ T6186] Kernel Offset: disabled [ 111.301324][ T6186] Rebooting in 86400 seconds..