last executing test programs: 1.977013174s ago: executing program 0 (id=612): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x800) listen(r3, 0x63c) r4 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) ioctl$VIDIOC_G_TUNER(r4, 0xc054561d, &(0x7f00000002c0)={0x0, "c82bf59ac78c16b4ff99af4b1de7092cd7c684a0132f9d50aa5f41f356e186e5", 0x1, 0x200, 0x3, 0x10000, 0x10, 0x2, 0x1, 0xd}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, &(0x7f0000000000)="000a180000fefffe00eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) 1.907278648s ago: executing program 0 (id=614): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.864135387s ago: executing program 2 (id=615): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a18000000000000eb55000000000100aa34745a1945da88", 0x19, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.803730756s ago: executing program 2 (id=617): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x1c, r1, 0x303, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}}, 0x0) 1.624246134s ago: executing program 2 (id=621): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) listxattr(&(0x7f0000001b00)='./cgroup\x00', &(0x7f0000000140)=""/44, 0x2c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0x7ffffffd}}, 0x0, 0x0, 0xe457, 0x0, 0x54, 0x6}, 0x9c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x7b0f2000) mq_open(0x0, 0x2, 0x6, &(0x7f00000001c0)={0xd, 0x9, 0xf, 0x3f7f1c8b}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000010000000000000000000000000000000000000000ffffffffffffffff00000000000000000300000000000000090000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff00000000000000000000000044010500e0000002000000000000000000000000000004d632"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e4831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0x41}, 0x24000000) 1.412169996s ago: executing program 0 (id=625): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a18000000000000eb55000000000100aa34745a1945da88", 0x19, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.341192068s ago: executing program 2 (id=626): r0 = socket$nl_route(0x10, 0x3, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = mq_open(&(0x7f0000000140)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x006\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\x90Q\xe2U\xce\x00\x00\x99\t\x19\x1d\xcb\x9e\xf98!\xe0d4\x87\x03\x02\xb50P\xd1\xe6\x0f\xd7i\xf5\x1b\x14<\xee\x8d-\xb4\xaf\xd5am\xff\xafB\xdcnt\xf6\xc2UM\x00\xa6\xe0c\xd7\xbd\xd3\xff4\xcb\x01\xad\x16\x16b\x04\x82\t\x8a\xde_\xb7\xf7d#\x00\xbd\xd2L\x84\x90\x97\xc4\xa9Ht:\x1a!\xe9n\xcaQp\xa0\x90\xf3\x0e\xa5X\xa4\xfe!\xec)\b\xbb\xbd\xf1\f\xd2\a\x8a\xdb\xd2\x0e\xd2\x1e\x91\xd9', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x10000000000000, 0x1, 0x3}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r2, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000640)="000a18000000000000eb55000000000100aa34745a1945da88e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884806e4aff2f2f", 0x36, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r3, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.301273305s ago: executing program 0 (id=627): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.25431119s ago: executing program 1 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a30000000004000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 1.118850438s ago: executing program 1 (id=630): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a18000b00000000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 948.902084ms ago: executing program 1 (id=632): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a18000500000000eb55000000000100aa34745a1945", 0x17, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 941.691273ms ago: executing program 0 (id=633): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 889.354605ms ago: executing program 2 (id=634): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 853.396147ms ago: executing program 0 (id=636): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) sendto$packet(r2, &(0x7f0000000080)="000a18000b00000000b22200000000181dda4453a9f02f736d3ef4dd", 0x1c, 0x0, &(0x7f0000000000)={0x11, 0x16, r1, 0x1, 0xcc}, 0x14) ioctl(r0, 0x400, &(0x7f0000000140)="693fdb48413ce6f24aad3a021d93c740a3b7d5abba4be58925284188b18bd32d211e914ada316ac9d1c013e5dfa2fd249932a43909abc7c46acdae8ddd9f9c872dc8d08986128690785658dbd285befb088dcbd33735bfcf7564845ea72ca65e13d819e2f2") 852.512568ms ago: executing program 1 (id=637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 394.314012ms ago: executing program 3 (id=639): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a300000fefffe00eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 357.262166ms ago: executing program 3 (id=640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000001c0)="000a28000000e6c5dd00e9eb55000000000100aa44645a1945da05e80501000000e62e90d9c55d63", 0x28, 0x4000000, &(0x7f0000000380)={0x11, 0x6, r1, 0x1, 0x36, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 284.148454ms ago: executing program 2 (id=641): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}]}, 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 226.727128ms ago: executing program 3 (id=642): r0 = socket$kcm(0x10, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) (async) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) (async) sendmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r1], 0x108}}], 0x2, 0xc040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) close(r2) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000600)=ANY=[@ANYBLOB="0201000000000010ac05418200000000000109022400010000000009040000110300000009210000000122050009058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x9) (async) syz_usb_control_io(r3, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r6 = fanotify_init(0x2, 0x1000) (async) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x445, 0x800002a, r7, 0x0) (async) fanotify_mark(r6, 0x1, 0x40001032, r5, 0x0) (async) fanotify_mark(r6, 0x80, 0x2, 0xffffffffffffffff, 0x0) (async) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x100000000002, 0x7ec100) ioctl$EVIOCSKEYCODE_V2(r8, 0x40284504, &(0x7f0000000040)={0x4, 0x20, 0x2, 0x80, "d80004000000000000957ff3003d4a100a000000000020020661e6016b8b37ff"}) rseq(&(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) (async) r9 = getpid() sched_setscheduler(r9, 0x1, 0x0) prlimit64(r9, 0x8, &(0x7f0000000200)={0x7, 0x7}, &(0x7f0000000240)) (async) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x8002, 0x0) ioctl$RTC_WKALM_SET(r10, 0x4028700f, &(0x7f0000000100)={0x1, 0x0, {0x32, 0x10, 0x2, 0x16, 0xb, 0xfffffffe, 0x1, 0xd3, 0x1}}) (async) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000009c0)="d80000001c0081064e81f782db44b9040a1d080404000000000081a1180002000600142603600e1208000f000000000100001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e40ae8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccc29e00360db70100000d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e7834", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000800) 167.554533ms ago: executing program 3 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x20, 0x0) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f00000019c0)='./binderfs2\x00', 0x1ff) mount$binderfs(0x0, &(0x7f0000001dc0)='./binderfs2\x00', &(0x7f0000001e00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='stats=global']) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002500)='./binderfs2/binder0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000100)=[{&(0x7f0000001140)=""/4109, 0x100d}], 0x1, 0x7fffffffffffffff, 0x0) getsockopt$PNPIPE_ENCAP(r3, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$packet(r2, &(0x7f0000000640)="000a18000b00000000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) 104.107314ms ago: executing program 3 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f00000001c0)="000a18000000e6c5dd00e9eb550000", 0xf, 0x4000000, &(0x7f0000000380)={0x11, 0x6, r1, 0x1, 0x36, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) 62.363422ms ago: executing program 1 (id=645): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 34.195896ms ago: executing program 3 (id=646): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r1, &(0x7f0000000640)="000a18000500000000eb55000000000100aa34745a1945da", 0x18, 0x4000000, 0x0, 0x0) 0s ago: executing program 1 (id=647): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000000640)="000a180003fffe0000eb55000000000100aa34745a1945da08e815b218b175e62e90d9c5596d3ef4ddaae57cdcf90884", 0x30, 0x4000000, &(0x7f0000000380)={0x11, 0xe56930649afa540, r1, 0x1, 0xd8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 65.185101][ T5807] cgroup: Unknown subsys name 'net' [ 65.295550][ T5807] cgroup: Unknown subsys name 'cpuset' [ 65.303618][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.580760][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.578559][ T5824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.588185][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.596382][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.603855][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.611104][ T5826] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.620695][ T5824] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.629406][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.637760][ T5827] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.645452][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.648117][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.653410][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.660025][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.668140][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.674628][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.681760][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.689081][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.694924][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.702427][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.709537][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.724641][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.241870][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 69.266464][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 69.302846][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 69.379063][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 69.556672][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.564139][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.571526][ T5819] bridge_slave_0: entered allmulticast mode [ 69.579029][ T5819] bridge_slave_0: entered promiscuous mode [ 69.594200][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.601410][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.608762][ T5823] bridge_slave_0: entered allmulticast mode [ 69.616242][ T5823] bridge_slave_0: entered promiscuous mode [ 69.623882][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.631095][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.638306][ T5820] bridge_slave_0: entered allmulticast mode [ 69.645537][ T5820] bridge_slave_0: entered promiscuous mode [ 69.653567][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.660830][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.668241][ T5820] bridge_slave_1: entered allmulticast mode [ 69.675442][ T5820] bridge_slave_1: entered promiscuous mode [ 69.682854][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.690071][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.697597][ T5819] bridge_slave_1: entered allmulticast mode [ 69.704972][ T5819] bridge_slave_1: entered promiscuous mode [ 69.722221][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.729890][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.737105][ T5823] bridge_slave_1: entered allmulticast mode [ 69.744389][ T5823] bridge_slave_1: entered promiscuous mode [ 69.820780][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.828191][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.835572][ T5818] bridge_slave_0: entered allmulticast mode [ 69.843188][ T5818] bridge_slave_0: entered promiscuous mode [ 69.854561][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.867651][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.880982][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.890685][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.898243][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.905457][ T5818] bridge_slave_1: entered allmulticast mode [ 69.912632][ T5818] bridge_slave_1: entered promiscuous mode [ 69.923206][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.935320][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.947882][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.024268][ T5819] team0: Port device team_slave_0 added [ 70.054264][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.065940][ T5819] team0: Port device team_slave_1 added [ 70.074529][ T5823] team0: Port device team_slave_0 added [ 70.083157][ T5820] team0: Port device team_slave_0 added [ 70.091680][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.113332][ T5823] team0: Port device team_slave_1 added [ 70.121154][ T5820] team0: Port device team_slave_1 added [ 70.198892][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.205894][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.232065][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.257331][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.264725][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.291123][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.305583][ T5818] team0: Port device team_slave_0 added [ 70.312473][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.319466][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.345470][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.357655][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.364933][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.391074][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.403651][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.410598][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.436573][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.453637][ T5818] team0: Port device team_slave_1 added [ 70.475022][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.481946][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.508186][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.541224][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.548264][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.574177][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.612189][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.619189][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.645070][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.729015][ T5819] hsr_slave_0: entered promiscuous mode [ 70.735799][ T5819] hsr_slave_1: entered promiscuous mode [ 70.749047][ T5823] hsr_slave_0: entered promiscuous mode [ 70.755786][ T5823] hsr_slave_1: entered promiscuous mode [ 70.762151][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 70.768648][ T5823] Cannot create hsr debugfs directory [ 70.768655][ T5827] Bluetooth: hci1: command tx timeout [ 70.774099][ T5144] Bluetooth: hci3: command tx timeout [ 70.774279][ T5144] Bluetooth: hci2: command tx timeout [ 70.801870][ T5820] hsr_slave_0: entered promiscuous mode [ 70.808495][ T5820] hsr_slave_1: entered promiscuous mode [ 70.815210][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 70.820926][ T5820] Cannot create hsr debugfs directory [ 70.842816][ T5144] Bluetooth: hci0: command tx timeout [ 70.890401][ T5818] hsr_slave_0: entered promiscuous mode [ 70.897349][ T5818] hsr_slave_1: entered promiscuous mode [ 70.903991][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 70.909708][ T5818] Cannot create hsr debugfs directory [ 71.251565][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.258187][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.360486][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.372060][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.382366][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.400182][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.460800][ T5823] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.490014][ T5823] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.500412][ T5823] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.514677][ T5823] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.575241][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.590769][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.613875][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.634152][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.702049][ T5819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.721666][ T5819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.744336][ T5819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.760229][ T5819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.846300][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.897061][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.924902][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.951498][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.958837][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.970775][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.998682][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.005820][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.015072][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.022163][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.067164][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.077254][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.084406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.129859][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.176923][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.184082][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.196644][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.203754][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.291073][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.408135][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.440388][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.447574][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.510428][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.517587][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.658234][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.766077][ T5820] veth0_vlan: entered promiscuous mode [ 72.779750][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.843902][ T5820] veth1_vlan: entered promiscuous mode [ 72.851903][ T5144] Bluetooth: hci1: command tx timeout [ 72.857764][ T51] Bluetooth: hci3: command tx timeout [ 72.857777][ T5827] Bluetooth: hci2: command tx timeout [ 72.880729][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.923037][ T51] Bluetooth: hci0: command tx timeout [ 72.927920][ T5818] veth0_vlan: entered promiscuous mode [ 72.960020][ T5818] veth1_vlan: entered promiscuous mode [ 73.008974][ T5820] veth0_macvtap: entered promiscuous mode [ 73.026242][ T5820] veth1_macvtap: entered promiscuous mode [ 73.038240][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.091601][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.117554][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.125678][ T5818] veth0_macvtap: entered promiscuous mode [ 73.137143][ T5823] veth0_vlan: entered promiscuous mode [ 73.157842][ T5818] veth1_macvtap: entered promiscuous mode [ 73.168520][ T5823] veth1_vlan: entered promiscuous mode [ 73.205136][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.214828][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.237906][ T1095] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.247564][ T1095] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.274249][ T5819] veth0_vlan: entered promiscuous mode [ 73.286178][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.315633][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.346959][ T5819] veth1_vlan: entered promiscuous mode [ 73.358382][ T1095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.367418][ T1095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.394025][ T5823] veth0_macvtap: entered promiscuous mode [ 73.407798][ T1095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.417196][ T1095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.442007][ T5823] veth1_macvtap: entered promiscuous mode [ 73.480101][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.492604][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.562204][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.581536][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.584296][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.645181][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.665041][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 73.666771][ T5819] veth0_macvtap: entered promiscuous mode [ 73.695033][ T2977] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.704062][ T2977] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.720991][ T150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.738284][ T150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.747216][ T1095] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.765793][ T1095] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.799341][ T5819] veth1_macvtap: entered promiscuous mode [ 73.845443][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.845459][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.884843][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.957514][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.999277][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.012783][ T150] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.021946][ T150] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.031275][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.074058][ T5913] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5'. [ 74.085622][ T150] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.094724][ T5915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5'. [ 74.110622][ T164] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.126648][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.137004][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.250728][ T5921] fuse: Unknown parameter 'rooBnd|Ԏ00000000100000' [ 74.408797][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.423747][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.505789][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.535117][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.556115][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.665104][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 74.725746][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.859369][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.891581][ T5932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 74.927153][ T51] Bluetooth: hci2: command tx timeout [ 74.934985][ T5144] Bluetooth: hci3: command tx timeout [ 74.935206][ T5827] Bluetooth: hci1: command tx timeout [ 75.003014][ T5827] Bluetooth: hci0: command tx timeout [ 75.751007][ T5969] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 75.954996][ T5977] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.060970][ T5979] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.073508][ T5979] block device autoloading is deprecated and will be removed. [ 76.394344][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.465618][ T5987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 76.494978][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.537229][ T5987] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 76.548360][ T5987] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 76.560698][ T164] wlan1: authenticated [ 76.561104][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.571130][ T5922] wlan1: associating to AP 08:02:11:00:00:00 with corrupt probe response [ 76.613775][ T164] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 76.633169][ T164] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 76.635235][ T5987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.662292][ T164] wlan1: associated [ 77.013464][ T51] Bluetooth: hci3: command tx timeout [ 77.018928][ T5144] Bluetooth: hci1: command tx timeout [ 77.024696][ T5827] Bluetooth: hci2: command tx timeout [ 77.092891][ T5827] Bluetooth: hci0: command tx timeout [ 77.669676][ T6031] Zero length message leads to an empty skb [ 78.031856][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.105659][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 78.161026][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.245681][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.286325][ T6044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.477055][ T5827] Bluetooth: hci0: connection err: -111 [ 79.662418][ T6101] fuse: Bad value for 'fd' [ 81.012330][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.021234][ T6163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.030893][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.116'. [ 81.045202][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.054669][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 81.062865][ T6162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.099137][ T6167] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.486896][ T24] cfg80211: failed to load regulatory.db [ 81.883482][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.912196][ T6204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.915348][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.136'. [ 81.949389][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.137'. [ 81.956242][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.994148][ T6206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.008780][ T6202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.930965][ T6243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.945843][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.956069][ T6241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 82.972440][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 82.984271][ T6243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.154'. [ 82.985911][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.032216][ T6244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.827889][ T6275] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 83.848395][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.171'. [ 84.893912][ T6327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.956535][ T6327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 85.136861][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.183522][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 85.203278][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.226194][ T6345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.777058][ T6389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.797350][ T6389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 86.160341][ T6421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.815505][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.836447][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.260'. [ 87.299816][ T6486] cgroup: Unknown subsys name 'cpuset' [ 88.240509][ T6520] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.862803][ T6530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 89.752761][ T6551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.009694][ T6563] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.017003][ T6565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.311890][ T6571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.341137][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.313'. [ 90.956002][ T6587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.962898][ T6589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.042887][ T6592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.530653][ T6599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.538038][ T6601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.669765][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.685910][ T6609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 91.697497][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.714912][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.729119][ T6609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.591785][ T6625] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 93.528956][ T6670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.010814][ T6691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.095317][ T6738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.231239][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.268541][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 95.291756][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.346180][ T6748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.387277][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.239749][ T6828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.272770][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.297208][ T6832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.435'. [ 97.313022][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.360753][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.382516][ T6832] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.397252][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.420652][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.437'. [ 97.435155][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.463836][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.480058][ T6836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.758468][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.779677][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.441'. [ 97.794000][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.825185][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.840724][ T6845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.078589][ T6861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.314017][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.331429][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 98.342966][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.377731][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.390442][ T6872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.109842][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.200221][ T6916] netlink: 'syz.2.474': attribute type 32 has an invalid length. [ 99.294541][ T6919] capability: warning: `syz.2.474' uses deprecated v2 capabilities in a way that may be insecure [ 99.430993][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.465304][ T6925] netlink: 4 bytes leftover after parsing attributes in process `syz.0.479'. [ 99.486962][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.515124][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.547135][ T6925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.815600][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.839112][ T6945] netlink: 4 bytes leftover after parsing attributes in process `syz.1.487'. [ 99.854251][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.878735][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.896661][ T6945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.281534][ T6955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.388981][ T6967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.439817][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.455147][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.499'. [ 100.466040][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.479666][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.493129][ T6970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.282329][ T6991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.515421][ T6996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.633184][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.649333][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.513'. [ 101.660300][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.674739][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.686500][ T7001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.498736][ T7031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.609035][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 102.631657][ T7034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.674186][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.689719][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.532'. [ 102.703027][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.717431][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.730051][ T7042] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.752992][ T7079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.958245][ T7082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.548'. [ 103.968214][ T7081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.349195][ T7096] netlink: 'syz.0.553': attribute type 11 has an invalid length. [ 104.684712][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.561'. [ 104.792447][ T7125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.000319][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.566'. [ 105.010388][ T7130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.678631][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.700826][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.572'. [ 105.717822][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.737716][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.751252][ T7150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.994988][ T7160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.029514][ T7162] netlink: 592 bytes leftover after parsing attributes in process `syz.2.578'. [ 106.038760][ T7162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.081922][ T7164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.579'. [ 106.091621][ T7163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.055624][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.076635][ T7187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.588'. [ 107.101146][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.123577][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.140098][ T7187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.207125][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.199950][ T7231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.225900][ T7231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.605'. [ 108.237967][ T7231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.254164][ T7231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.266767][ T7231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.659011][ T7289] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'. [ 109.682935][ T7288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.629'. [ 110.841528][ T7336] ------------[ cut here ]------------ [ 110.847281][ T7336] UBSAN: shift-out-of-bounds in net/mac80211/tx.c:2174:30 [ 110.854449][ T7336] shift exponent 218 is too large for 64-bit type 'unsigned long' [ 110.862281][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) [ 110.862301][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 110.862317][ T7336] Call Trace: [ 110.862324][ T7336] [ 110.862335][ T7336] dump_stack_lvl+0xe8/0x150 [ 110.862362][ T7336] ubsan_epilogue+0xa/0x30 [ 110.862382][ T7336] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 110.862425][ T7336] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 110.862457][ T7336] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 110.862489][ T7336] ? ieee80211_select_queue_80211+0x241/0x380 [ 110.862510][ T7336] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 110.862532][ T7336] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 110.862553][ T7336] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 110.862581][ T7336] dev_hard_start_xmit+0x2d8/0x870 [ 110.862615][ T7336] __dev_queue_xmit+0x168f/0x38a0 [ 110.862648][ T7336] ? __dev_queue_xmit+0x274/0x38a0 [ 110.862670][ T7336] ? _copy_from_iter+0x21b/0x1670 [ 110.862690][ T7336] ? __pfx___dev_queue_xmit+0x10/0x10 [ 110.862705][ T7336] ? sock_alloc_send_pskb+0x896/0x990 [ 110.862725][ T7336] ? __pfx__copy_from_iter+0x10/0x10 [ 110.862751][ T7336] ? packet_parse_headers+0x4c9/0x790 [ 110.862768][ T7336] ? packet_parse_headers+0x575/0x790 [ 110.862790][ T7336] ? __pfx_packet_parse_headers+0x10/0x10 [ 110.862810][ T7336] ? packet_xmit+0x68/0x320 [ 110.862826][ T7336] packet_sendmsg+0x3ed0/0x5110 [ 110.862846][ T7336] ? futex_unqueue+0x22/0x240 [ 110.862858][ T7336] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 110.862871][ T7336] ? futex_unqueue+0x211/0x240 [ 110.862885][ T7336] ? __futex_wait+0x371/0x420 [ 110.862908][ T7336] ? __lock_acquire+0x6b5/0x2cf0 [ 110.862932][ T7336] ? __pfx_packet_sendmsg+0x10/0x10 [ 110.862953][ T7336] ? __pfx_aa_sk_perm+0x10/0x10 [ 110.862964][ T7336] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 110.862985][ T7336] ? __pfx_packet_sendmsg+0x10/0x10 [ 110.862996][ T7336] sock_sendmsg_nosec+0x18f/0x1d0 [ 110.863014][ T7336] __sys_sendto+0x3ff/0x590 [ 110.863028][ T7336] ? __pfx___sys_sendto+0x10/0x10 [ 110.863038][ T7336] ? do_futex+0x333/0x420 [ 110.863071][ T7336] ? rcu_is_watching+0x15/0xb0 [ 110.863090][ T7336] __x64_sys_sendto+0xde/0x100 [ 110.863104][ T7336] do_syscall_64+0x14d/0xf80 [ 110.863116][ T7336] ? trace_irq_disable+0x3b/0x150 [ 110.863131][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.863143][ T7336] ? clear_bhb_loop+0x40/0x90 [ 110.863157][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.863168][ T7336] RIP: 0033:0x7fd89b39bf79 [ 110.863191][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.863201][ T7336] RSP: 002b:00007fd89c1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 110.863215][ T7336] RAX: ffffffffffffffda RBX: 00007fd89b615fa0 RCX: 00007fd89b39bf79 [ 110.863225][ T7336] RDX: 0000000000000030 RSI: 0000200000000640 RDI: 0000000000000004 [ 110.863232][ T7336] RBP: 00007fd89b4327e0 R08: 0000200000000380 R09: 0000000000000014 [ 110.863240][ T7336] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.863248][ T7336] R13: 00007fd89b616038 R14: 00007fd89b615fa0 R15: 00007fff61951928 [ 110.863269][ T7336] [ 111.177461][ T7336] ---[ end trace ]--- [ 111.181451][ T7336] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 111.188643][ T7336] CPU: 1 UID: 0 PID: 7336 Comm: syz.1.647 Not tainted syzkaller #0 PREEMPT(full) [ 111.197838][ T7336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 111.207895][ T7336] Call Trace: [ 111.211175][ T7336] [ 111.214108][ T7336] vpanic+0x56c/0xa60 [ 111.218105][ T7336] ? __pfx_vpanic+0x10/0x10 [ 111.222614][ T7336] ? irqentry_exit+0x59e/0x620 [ 111.227388][ T7336] panic+0xc5/0xd0 [ 111.231123][ T7336] ? __pfx_panic+0x10/0x10 [ 111.235558][ T7336] ? __pfx__printk+0x10/0x10 [ 111.240167][ T7336] check_panic_on_warn+0x89/0xb0 [ 111.245110][ T7336] __ubsan_handle_shift_out_of_bounds+0x385/0x410 [ 111.251556][ T7336] ieee80211_parse_tx_radiotap+0xadb/0x1950 [ 111.257468][ T7336] ? __pfx_ieee80211_parse_tx_radiotap+0x10/0x10 [ 111.263816][ T7336] ? ieee80211_select_queue_80211+0x241/0x380 [ 111.269882][ T7336] ieee80211_monitor_start_xmit+0xb1f/0x1250 [ 111.275852][ T7336] ? ieee80211_monitor_start_xmit+0x60d/0x1250 [ 111.281994][ T7336] ? __pfx_ieee80211_monitor_start_xmit+0x10/0x10 [ 111.288403][ T7336] dev_hard_start_xmit+0x2d8/0x870 [ 111.293511][ T7336] __dev_queue_xmit+0x168f/0x38a0 [ 111.298530][ T7336] ? __dev_queue_xmit+0x274/0x38a0 [ 111.303628][ T7336] ? _copy_from_iter+0x21b/0x1670 [ 111.308646][ T7336] ? __pfx___dev_queue_xmit+0x10/0x10 [ 111.314004][ T7336] ? sock_alloc_send_pskb+0x896/0x990 [ 111.319368][ T7336] ? __pfx__copy_from_iter+0x10/0x10 [ 111.324643][ T7336] ? packet_parse_headers+0x4c9/0x790 [ 111.329999][ T7336] ? packet_parse_headers+0x575/0x790 [ 111.335361][ T7336] ? __pfx_packet_parse_headers+0x10/0x10 [ 111.341156][ T7336] ? packet_xmit+0x68/0x320 [ 111.345648][ T7336] packet_sendmsg+0x3ed0/0x5110 [ 111.350491][ T7336] ? futex_unqueue+0x22/0x240 [ 111.355152][ T7336] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 111.360505][ T7336] ? futex_unqueue+0x211/0x240 [ 111.365252][ T7336] ? __futex_wait+0x371/0x420 [ 111.369920][ T7336] ? __lock_acquire+0x6b5/0x2cf0 [ 111.374855][ T7336] ? __pfx_packet_sendmsg+0x10/0x10 [ 111.380044][ T7336] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.384877][ T7336] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 111.391280][ T7336] ? __pfx_packet_sendmsg+0x10/0x10 [ 111.396459][ T7336] sock_sendmsg_nosec+0x18f/0x1d0 [ 111.401476][ T7336] __sys_sendto+0x3ff/0x590 [ 111.405968][ T7336] ? __pfx___sys_sendto+0x10/0x10 [ 111.410973][ T7336] ? do_futex+0x333/0x420 [ 111.415307][ T7336] ? rcu_is_watching+0x15/0xb0 [ 111.420065][ T7336] __x64_sys_sendto+0xde/0x100 [ 111.424818][ T7336] do_syscall_64+0x14d/0xf80 [ 111.429392][ T7336] ? trace_irq_disable+0x3b/0x150 [ 111.434401][ T7336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.440449][ T7336] ? clear_bhb_loop+0x40/0x90 [ 111.445111][ T7336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.450991][ T7336] RIP: 0033:0x7fd89b39bf79 [ 111.455402][ T7336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.474989][ T7336] RSP: 002b:00007fd89c1e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 111.483387][ T7336] RAX: ffffffffffffffda RBX: 00007fd89b615fa0 RCX: 00007fd89b39bf79 [ 111.491342][ T7336] RDX: 0000000000000030 RSI: 0000200000000640 RDI: 0000000000000004 [ 111.499295][ T7336] RBP: 00007fd89b4327e0 R08: 0000200000000380 R09: 0000000000000014 [ 111.507248][ T7336] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.515205][ T7336] R13: 00007fd89b616038 R14: 00007fd89b615fa0 R15: 00007fff61951928 [ 111.523175][ T7336] [ 111.526522][ T7336] Kernel Offset: disabled [ 111.530869][ T7336] Rebooting in 86400 seconds..