last executing test programs:

1.0401456s ago: executing program 2 (id=1197):
syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c370c890019840100000000000000000000020000000000fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0)

980.106282ms ago: executing program 2 (id=1199):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a040000)
r0 = socket(0x8, 0x3, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0)
ioctl$IMGETCOUNT(r0, 0x40106183, &(0x7f0000000000))

860.025076ms ago: executing program 2 (id=1200):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10)
sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x43, 0x101d0}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x4004000)

859.692053ms ago: executing program 2 (id=1202):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x2d4}}, 0x4048010)

770.794671ms ago: executing program 0 (id=1204):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r0, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)

770.718087ms ago: executing program 2 (id=1205):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@bridge_delneigh={0x24, 0x1e, 0x1, 0x0, 0x6, {0x2}, [@NDA_VNI={0x8, 0x7, 0x7}]}, 0x24}}, 0x0)

689.983016ms ago: executing program 2 (id=1206):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback, 0x2}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000079f8, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0)

530.522455ms ago: executing program 0 (id=1209):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7a82, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1ff, 0x2}, 0x20)

530.161028ms ago: executing program 0 (id=1210):
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
vmsplice(r0, &(0x7f00000006c0)=[{&(0x7f0000000f40)="a1", 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0)

458.790967ms ago: executing program 0 (id=1212):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x24, r1, 0xb97534d5fe9704cf, 0xffffffff, 0xfffffffc, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xc}]}, 0x24}}, 0x0)

458.371634ms ago: executing program 0 (id=1214):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000004c0)="e0b95416f85df477c90a3721677b", 0x0, 0x27cb, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

369.785645ms ago: executing program 0 (id=1215):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xfffffff9, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000005c0)="05", 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e22, 0x0, @remote, 0x40}, 0x1c, &(0x7f0000000b00)=[{&(0x7f00000006c0)="02", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r1, 0x1)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000040)=0xc)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r3, 0xffffffffffffffff, 0x24}, 0xc)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="0800d90700000000000000bd5656", 0xe)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0)
unshare(0x62040200)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="01000010", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a00340002020202020200000a00060008021100000000000800350000000000080026006c090000"], 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0)
recvmmsg(r7, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40000000, 0x0)
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x7, [{0x2, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x27)
socket$rxrpc(0x21, 0x2, 0xa)
socket$kcm(0x2, 0x1000000000000002, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)

239.68213ms ago: executing program 1 (id=1219):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0xa000000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c", 0x1d, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

158.072988ms ago: executing program 1 (id=1220):
r0 = socket(0x40000000015, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)=0x3b)

157.969958ms ago: executing program 1 (id=1221):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x101, 0x1, 0x5, 0x80, 0x3, 0x6d5f, 0xa}, 0x1c)

143.285906ms ago: executing program 1 (id=1222):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

190.199µs ago: executing program 1 (id=1223):
syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x18, 0x3a, 0xff, @local, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xce, '\x00', @loopback}}}}}}, 0x0)

0s ago: executing program 1 (id=1224):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_int(r1, &(0x7f0000000000)=0x8, 0x12)
close(r1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700)
splice(r0, 0x0, r1, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:28647' (ED25519) to the list of known hosts.
syzkaller login: [   49.118546][ T5758] cgroup: Unknown subsys name 'net'
[   49.200734][ T5758] cgroup: Unknown subsys name 'cpuset'
[   49.204576][ T5758] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.781568][ T5758] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.781576][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.784995][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.788038][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.791365][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.794307][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.837845][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.840782][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.843465][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.846629][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.849588][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.885562][ T5224] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.889062][ T5224] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.891839][ T5224] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.894798][ T5224] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.898149][ T5224] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.002092][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   55.138669][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.141126][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.143701][ T5826] bridge_slave_0: entered allmulticast mode
[   55.148646][ T5826] bridge_slave_0: entered promiscuous mode
[   55.152676][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.155105][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.158222][ T5826] bridge_slave_1: entered allmulticast mode
[   55.162053][ T5826] bridge_slave_1: entered promiscuous mode
[   55.215191][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.223434][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.230427][ T5835] chnl_net:caif_netlink_parms(): no params data found
[   55.235426][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   55.274029][ T5826] team0: Port device team_slave_0 added
[   55.285621][ T5826] team0: Port device team_slave_1 added
[   55.351966][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.354790][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.365291][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.384272][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.386649][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.395388][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.428361][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.430687][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.433065][ T5831] bridge_slave_0: entered allmulticast mode
[   55.436068][ T5831] bridge_slave_0: entered promiscuous mode
[   55.440544][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.442960][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.445921][ T5835] bridge_slave_0: entered allmulticast mode
[   55.449424][ T5835] bridge_slave_0: entered promiscuous mode
[   55.452371][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.454750][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.457293][ T5831] bridge_slave_1: entered allmulticast mode
[   55.460958][ T5831] bridge_slave_1: entered promiscuous mode
[   55.475067][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.478915][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.482069][ T5835] bridge_slave_1: entered allmulticast mode
[   55.486140][ T5835] bridge_slave_1: entered promiscuous mode
[   55.524178][ T5826] hsr_slave_0: entered promiscuous mode
[   55.526879][ T5826] hsr_slave_1: entered promiscuous mode
[   55.549535][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.555877][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.563064][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.593678][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.614501][ T5831] team0: Port device team_slave_0 added
[   55.644959][ T5831] team0: Port device team_slave_1 added
[   55.681457][ T5835] team0: Port device team_slave_0 added
[   55.689288][ T5835] team0: Port device team_slave_1 added
[   55.733951][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.736474][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.745762][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.751066][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.753317][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.762162][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.771057][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.773879][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.783173][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.797928][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.800865][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.812494][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.888722][ T5831] hsr_slave_0: entered promiscuous mode
[   55.891224][ T5831] hsr_slave_1: entered promiscuous mode
[   55.893451][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.896008][ T5831] Cannot create hsr debugfs directory
[   55.916475][ T5835] hsr_slave_0: entered promiscuous mode
[   55.919684][ T5835] hsr_slave_1: entered promiscuous mode
[   55.921806][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   55.924425][ T5835] Cannot create hsr debugfs directory
[   56.040016][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.053732][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.065664][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.071767][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.189673][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.204571][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.233385][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.241564][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.300410][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.318896][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.326239][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.341206][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.388873][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.426012][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   56.438754][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.441716][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.453926][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.456761][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.486227][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.540953][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.564810][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.568047][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.583178][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.585714][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.593700][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.638972][ T5835] 8021q: adding VLAN 0 to HW filter on device team0
[   56.656171][   T64] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.659464][   T64] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.671987][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.674705][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.719639][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.730194][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.826081][ T5826] veth0_vlan: entered promiscuous mode
[   56.843691][ T5826] veth1_vlan: entered promiscuous mode
[   56.866403][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.894293][ T5826] veth0_macvtap: entered promiscuous mode
[   56.900691][   T54] Bluetooth: hci0: command tx timeout
[   56.904026][ T5224] Bluetooth: hci1: command tx timeout
[   56.913229][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.922684][ T5826] veth1_macvtap: entered promiscuous mode
[   56.962205][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.968675][ T5224] Bluetooth: hci2: command tx timeout
[   56.971722][ T5835] veth0_vlan: entered promiscuous mode
[   56.976908][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.994681][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.999992][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.006910][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.011533][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.039123][ T5835] veth1_vlan: entered promiscuous mode
[   57.060387][ T5831] veth0_vlan: entered promiscuous mode
[   57.114462][ T5831] veth1_vlan: entered promiscuous mode
[   57.129089][ T5835] veth0_macvtap: entered promiscuous mode
[   57.180185][ T5835] veth1_macvtap: entered promiscuous mode
[   57.199679][ T5831] veth0_macvtap: entered promiscuous mode
[   57.221004][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.226835][ T5831] veth1_macvtap: entered promiscuous mode
[   57.253770][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.260583][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.266783][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.268931][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.286095][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.300863][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.304648][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.309688][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.313379][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.331001][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.334049][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.337372][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.342620][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.350618][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.353766][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.426842][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.432759][  T784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.439088][  T784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.461498][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.465447][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.509704][  T784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.513362][  T784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.549252][ T5894] lo: entered promiscuous mode
[   57.553302][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.556960][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.561427][ T5894] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'.
[   57.696184][ T5900] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   57.704531][ T5900] netlink: 'syz.0.4': attribute type 4 has an invalid length.
[   57.961987][ T5910] tls_set_device_offload_rx: netdev not found
[   58.351271][ T5893] lo: left promiscuous mode
[   58.544979][ T5954] netlink: 96 bytes leftover after parsing attributes in process `syz.1.26'.
[   58.969428][ T5224] Bluetooth: hci1: command tx timeout
[   58.971772][ T5224] Bluetooth: hci0: command tx timeout
[   59.059997][   T54] Bluetooth: hci2: command tx timeout
[   59.186923][ T5989] xt_CT: No such helper "pptp"
[   59.873583][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'.
[   59.878307][ T6036] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   59.913403][ T6040] netlink: 'syz.2.65': attribute type 5 has an invalid length.
[   59.916779][ T6040] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'.
[   59.936109][ T6040] bridge1: entered promiscuous mode
[   59.939472][ T6040] bridge1: entered allmulticast mode
[   60.200164][ T6060] netlink: 'syz.2.74': attribute type 6 has an invalid length.
[   60.682816][ T6100] Illegal XDP return value 67 on prog  (id 21) dev N/A, expect packet loss!
[   61.048452][   T54] Bluetooth: hci0: command tx timeout
[   61.051269][   T54] Bluetooth: hci1: command tx timeout
[   61.073053][ T6120] Zero length message leads to an empty skb
[   61.128260][ T5224] Bluetooth: hci2: command tx timeout
[   61.267999][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   61.940228][ T6194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.136'.
[   62.840504][ T6252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.160'.
[   62.843654][ T6252] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0)
[   62.906456][ T6260] tipc: Started in network mode
[   62.908429][ T6260] tipc: Node identity 7, cluster identity 4711
[   62.910480][ T6260] tipc: Node number set to 7
[   63.128376][ T5224] Bluetooth: hci1: command tx timeout
[   63.130778][ T5224] Bluetooth: hci0: command tx timeout
[   63.209926][ T5224] Bluetooth: hci2: command tx timeout
[   64.913719][ T6418] delete_channel: no stack
[   65.091764][ T6433] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[   65.146430][ T6437] syz.1.241 uses obsolete (PF_INET,SOCK_PACKET)
[   65.311369][ T6446] batadv_slave_0: entered promiscuous mode
[   65.314819][ T6446] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'.
[   65.320458][ T6446] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   65.350584][ T6446] batadv_slave_0 (unregistering): left promiscuous mode
[   65.354059][ T6446] batman_adv: batadv0: Removing interface: batadv_slave_0
[   65.539166][ T6457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   66.530888][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.263'.
[   66.534816][ T6500] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   67.626488][ T6609] tipc: Failed to remove unknown binding: 66,1,1/0:2234436718/2234436720
[   68.086167][ T6649] netlink: 'syz.2.328': attribute type 84 has an invalid length.
[   68.360656][ T6672] netlink: 'syz.1.339': attribute type 9 has an invalid length.
[   68.365470][ T6672] netlink: 'syz.1.339': attribute type 7 has an invalid length.
[   68.371056][ T6672] netlink: 'syz.1.339': attribute type 8 has an invalid length.
[   68.834320][ T6724] netlink: 136 bytes leftover after parsing attributes in process `syz.0.362'.
[   68.839302][ T6724] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[   68.988864][ T6736] netlink: 96 bytes leftover after parsing attributes in process `syz.0.367'.
[   69.351360][ T6764] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[   69.969730][ T6835] netlink: 96 bytes leftover after parsing attributes in process `syz.0.414'.
[   70.166092][ T6858] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   70.183295][ T6858] syzkaller0: entered promiscuous mode
[   70.185510][ T6858] syzkaller0: entered allmulticast mode
[   70.216499][ T6858] tipc: Resetting bearer <eth:syzkaller0>
[   70.242348][ T6857] tipc: Resetting bearer <eth:syzkaller0>
[   70.257356][ T6857] tipc: Disabling bearer <eth:syzkaller0>
[   70.469160][ T6888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.439'.
[   70.971699][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   70.973954][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   73.305409][ T7092] netlink: 'syz.1.522': attribute type 17 has an invalid length.
[   73.563282][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[   73.575210][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.529'.
[   73.830328][ T7129] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.546414][ T7179] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   74.549919][ T7179] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   75.064022][ T7201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'.
[   77.881741][ T7386] lo: entered promiscuous mode
[   77.884541][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'.
[   78.008605][ T7385] lo: left promiscuous mode
[   78.334866][ T7396] geneve0: entered promiscuous mode
[   78.337146][ T7396] geneve0: entered allmulticast mode
[   78.869414][ T7435] netlink: 'syz.2.665': attribute type 1 has an invalid length.
[   78.872507][ T7435] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   78.952129][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.667'.
[   78.956074][ T7439] netlink: 32 bytes leftover after parsing attributes in process `syz.2.667'.
[   78.973495][ T7439] gretap1: entered promiscuous mode
[   79.444098][ T7471] netlink: 'syz.2.681': attribute type 39 has an invalid length.
[   80.311067][ T7554] ip6gretap0: entered promiscuous mode
[   80.313562][ T7554] macsec1: entered allmulticast mode
[   80.315934][ T7554] ip6gretap0: entered allmulticast mode
[   80.322329][ T7554] ip6gretap0: left allmulticast mode
[   80.324997][ T7554] ip6gretap0: left promiscuous mode
[   81.209464][   T10] cfg80211: failed to load regulatory.db
[   81.787456][ T7656] netlink: 8 bytes leftover after parsing attributes in process `syz.1.760'.
[   81.953335][ T7655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.761'.
[   81.956427][ T7655] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'.
[   83.088065][ T7712] Cannot find set identified by id 1 to match
[   83.607834][   T54] Bluetooth: hci2: command 0x0405 tx timeout
[   83.906922][ T7785] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[   83.915640][ T5873] IPVS: starting estimator thread 0...
[   84.008362][ T7797] IPVS: using max 79 ests per chain, 189600 per kthread
[   84.361701][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.845'.
[   84.564469][ T7861] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'.
[   84.760858][ T7871] netlink: 'syz.0.856': attribute type 10 has an invalid length.
[   85.440672][ T7924] netlink: 56 bytes leftover after parsing attributes in process `syz.0.881'.
[   85.717889][ T5224] Bluetooth: hci2: command 0x0405 tx timeout
[   86.859855][   T33] audit: type=1800 audit(1752782322.484:2): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.914" name="memory.events" dev="tmpfs" ino=1611 res=0 errno=0
[   87.027325][ T8031] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   87.151837][ T8035] netlink: 'syz.0.927': attribute type 29 has an invalid length.
[   87.155893][ T8035] netlink: 'syz.0.927': attribute type 29 has an invalid length.
[   87.882734][ T8103] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   88.235616][ T8139] netlink: 'syz.2.973': attribute type 1 has an invalid length.
[   88.251804][ T8139] netlink: 172 bytes leftover after parsing attributes in process `syz.2.973'.
[   88.582919][ T8176] netlink: 40 bytes leftover after parsing attributes in process `syz.1.988'.
[   89.063805][ T8218] netlink: 'syz.0.1009': attribute type 25 has an invalid length.
[   89.067325][ T8218] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1009'.
[   89.554956][ T8244] gre1: entered promiscuous mode
[   89.574387][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[   89.580954][ T8246] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1023'.
[   89.584810][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1023'.
[   89.653023][ T8252] x_tables: duplicate underflow at hook 2
[   89.713657][ T8255] Bluetooth: MGMT ver 1.23
[   89.730693][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'.
[   89.926463][ T8274] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.1036'.
[   89.946349][ T8272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'.
[   90.483275][ T8313] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   90.490498][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1054'.
[   90.503475][ T8313] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.515054][ T8313] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.784956][ T8368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.855256][ T8356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   91.918228][ T8356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   92.754833][ T8427] af_packet: tpacket_rcv: packet too big, clamped from 59478 to 4294967272. macoff=96
[   93.929631][ T8445] macsec1: entered promiscuous mode
[   93.931960][ T8445] macsec1: entered allmulticast mode
[   94.328402][ T8484] netlink: 'syz.1.1120': attribute type 10 has an invalid length.
[   94.333452][ T8484] 8021q: adding VLAN 0 to HW filter on device team0
[   94.339826][ T8484] bond0: (slave team0): Enslaving as an active interface with an up link
[   94.704446][ T8515] __nla_validate_parse: 5 callbacks suppressed
[   94.704461][ T8515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1133'.
[   95.243196][ T8553] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.246539][ T8553] IPv6: NLM_F_CREATE should be set when creating new route
[   95.249781][ T8553] IPv6: NLM_F_CREATE should be set when creating new route
[   95.840302][ T8611] vcan0: tx drop: invalid sa for name 0xffffffffffffffff
[   96.824304][ T8723] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1202'.
[   97.407374][ T8759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.486267][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.528624][ T8777] gretap0: entered promiscuous mode
[   97.530941][ T8777] vlan3: entered promiscuous mode
[   97.548825][ T8765] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.681714][ T8783] ------------[ cut here ]------------
[   97.684086][ T8783] intf 08:02:11:00:00:00 [link=0]: bad STA 08:02:11:00:00:01 bandwidth 20 MHz (0) > channel config 10 MHz (7)
[   97.690630][ T8783] WARNING: CPU: 0 PID: 8783 at drivers/net/wireless/virtual/mac80211_hwsim.c:2653 mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.694886][ T8783] Modules linked in:
[   97.696785][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.1.1225 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   97.702045][ T8783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.706193][ T8783] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   97.710278][ T8783] Code: 71 17 00 00 48 c7 c7 c0 ac 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 e0 9c 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd b2 cd fa 90 0f 0b 90 e9 fe fe ff
[   97.717864][ T8783] RSP: 0018:ffffc90002caefd0 EFLAGS: 00010282
[   97.719864][ T8783] RAX: c6c9df8ce806e600 RBX: 0000000000000014 RCX: 0000000000080000
[   97.722520][ T8783] RDX: ffffc90004272000 RSI: 000000000000197e RDI: 000000000000197f
[   97.725053][ T8783] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[   97.728239][ T8783] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 0000000000000000
[   97.731073][ T8783] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[   97.733928][ T8783] FS:  00007fb5e52ab6c0(0000) GS:ffff8880b8626000(0000) knlGS:0000000000000000
[   97.736799][ T8783] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   97.739205][ T8783] CR2: 0000200000001080 CR3: 00000001227da000 CR4: 00000000000006f0
[   97.742003][ T8783] Call Trace:
[   97.743143][ T8783]  <TASK>
[   97.744149][ T8783]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[   97.746346][ T8783]  mac80211_hwsim_sta_add+0xa3/0x310
[   97.748299][ T8783]  drv_sta_state+0x8c1/0x1840
[   97.749991][ T8783]  sta_info_insert_rcu+0xd32/0x1940
[   97.751745][ T8783]  ? sta_info_insert_rcu+0x2ce/0x1940
[   97.753556][ T8783]  sta_info_insert+0x16/0xc0
[   97.755071][ T8783]  rdev_add_station+0x108/0x290
[   97.756709][ T8783]  nl80211_new_station+0x1723/0x1b40
[   97.758940][ T8783]  ? __pfx_nl80211_new_station+0x10/0x10
[   97.761412][ T8783]  ? netdev_run_todo+0xe1d/0xea0
[   97.763551][ T8783]  ? nl80211_pre_doit+0x4f1/0x930
[   97.765707][ T8783]  genl_family_rcv_msg_doit+0x215/0x300
[   97.768183][ T8783]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   97.770698][ T8783]  ? bpf_lsm_capable+0x9/0x20
[   97.772774][ T8783]  ? security_capable+0x7e/0x2e0
[   97.774912][ T8783]  genl_rcv_msg+0x60e/0x790
[   97.776879][ T8783]  ? __pfx_genl_rcv_msg+0x10/0x10
[   97.779304][ T8783]  ? ref_tracker_free+0x63a/0x7d0
[   97.781502][ T8783]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   97.783880][ T8783]  ? __pfx_nl80211_new_station+0x10/0x10
[   97.786299][ T8783]  ? __pfx_nl80211_post_doit+0x10/0x10
[   97.788759][ T8783]  ? __pfx_ref_tracker_free+0x10/0x10
[   97.791031][ T8783]  netlink_rcv_skb+0x208/0x470
[   97.793391][ T8783]  ? __pfx_genl_rcv_msg+0x10/0x10
[   97.795534][ T8783]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   97.797824][ T8783]  ? down_read+0x1ad/0x2e0
[   97.799773][ T8783]  genl_rcv+0x28/0x40
[   97.801499][ T8783]  netlink_unicast+0x75c/0x8e0
[   97.803557][ T8783]  netlink_sendmsg+0x805/0xb30
[   97.805602][ T8783]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.807953][ T8783]  ? aa_sock_msg_perm+0x94/0x160
[   97.810254][ T8783]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   97.812508][ T8783]  ? __pfx_netlink_sendmsg+0x10/0x10
[   97.814890][ T8783]  __sock_sendmsg+0x21c/0x270
[   97.816992][ T8783]  ____sys_sendmsg+0x505/0x830
[   97.819267][ T8783]  ? __pfx_____sys_sendmsg+0x10/0x10
[   97.821773][ T8783]  ? import_iovec+0x74/0xa0
[   97.823862][ T8783]  ___sys_sendmsg+0x21f/0x2a0
[   97.825966][ T8783]  ? __pfx____sys_sendmsg+0x10/0x10
[   97.828404][ T8783]  ? __fget_files+0x2a/0x420
[   97.830459][ T8783]  ? __fget_files+0x3a0/0x420
[   97.832529][ T8783]  __x64_sys_sendmsg+0x19b/0x260
[   97.834702][ T8783]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   97.837105][ T8783]  ? rcu_is_watching+0x15/0xb0
[   97.839485][ T8783]  ? do_syscall_64+0xbe/0x3b0
[   97.841695][ T8783]  do_syscall_64+0xfa/0x3b0
[   97.843760][ T8783]  ? lockdep_hardirqs_on+0x9c/0x150
[   97.845993][ T8783]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.848876][ T8783]  ? exc_page_fault+0x9f/0xf0
[   97.850877][ T8783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   97.853595][ T8783] RIP: 0033:0x7fb5e438e929
[   97.855680][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   97.864353][ T8783] RSP: 002b:00007fb5e52ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   97.867881][ T8783] RAX: ffffffffffffffda RBX: 00007fb5e45b5fa0 RCX: 00007fb5e438e929
[   97.871351][ T8783] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[   97.874854][ T8783] RBP: 00007fb5e4410ca1 R08: 0000000000000000 R09: 0000000000000000
[   97.878865][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   97.882335][ T8783] R13: 0000000000000000 R14: 00007fb5e45b5fa0 R15: 00007fff6872cb88
[   97.885750][ T8783]  </TASK>
[   97.887160][ T8783] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   97.890339][ T8783] CPU: 0 UID: 0 PID: 8783 Comm: syz.1.1225 Not tainted 6.16.0-rc5-syzkaller-00159-g47c84997c686-dirty #0 PREEMPT(full) 
[   97.895444][ T8783] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   97.899627][ T8783] Call Trace:
[   97.901020][ T8783]  <TASK>
[   97.902288][ T8783]  dump_stack_lvl+0x99/0x250
[   97.904388][ T8783]  ? __asan_memcpy+0x40/0x70
[   97.906573][ T8783]  ? __pfx_dump_stack_lvl+0x10/0x10
[   97.908797][ T8783]  ? __pfx__printk+0x10/0x10
[   97.910725][ T8783]  panic+0x2db/0x790
[   97.912391][ T8783]  ? __pfx_panic+0x10/0x10
[   97.914342][ T8783]  __warn+0x31b/0x4b0
[   97.916013][ T8783]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.918651][ T8783]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.921211][ T8783]  report_bug+0x2be/0x4f0
[   97.923054][ T8783]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.925591][ T8783]  ? mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.928142][ T8783]  ? mac80211_hwsim_sta_rc_update+0x6f7/0x860
[   97.930732][ T8783]  handle_bug+0x84/0x160
[   97.932587][ T8783]  exc_invalid_op+0x1a/0x50
[   97.934497][ T8783]  asm_exc_invalid_op+0x1a/0x20
[   97.936510][ T8783] RIP: 0010:mac80211_hwsim_sta_rc_update+0x6f5/0x860
[   97.939327][ T8783] Code: 71 17 00 00 48 c7 c7 c0 ac 2d 8c 48 8b 74 24 28 89 ea 48 8b 4c 24 10 41 89 d8 45 89 f9 41 56 50 e8 e0 9c 91 fa 48 83 c4 10 90 <0f> 0b 90 90 e9 0c ff ff ff e8 cd b2 cd fa 90 0f 0b 90 e9 fe fe ff
[   97.947213][ T8783] RSP: 0018:ffffc90002caefd0 EFLAGS: 00010282
[   97.949730][ T8783] RAX: c6c9df8ce806e600 RBX: 0000000000000014 RCX: 0000000000080000
[   97.953024][ T8783] RDX: ffffc90004272000 RSI: 000000000000197e RDI: 000000000000197f
[   97.956320][ T8783] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004
[   97.959705][ T8783] R10: dffffc0000000000 R11: fffffbfff1bfaa64 R12: 0000000000000000
[   97.963026][ T8783] R13: dffffc0000000000 R14: 0000000000000007 R15: 0000000000000000
[   97.966356][ T8783]  ? mac80211_hwsim_sta_rc_update+0x73/0x860
[   97.968883][ T8783]  mac80211_hwsim_sta_add+0xa3/0x310
[   97.971104][ T8783]  drv_sta_state+0x8c1/0x1840
[   97.973131][ T8783]  sta_info_insert_rcu+0xd32/0x1940
[   97.975336][ T8783]  ? sta_info_insert_rcu+0x2ce/0x1940
[   97.977595][ T8783]  sta_info_insert+0x16/0xc0
[   97.979558][ T8783]  rdev_add_station+0x108/0x290
[   97.981640][ T8783]  nl80211_new_station+0x1723/0x1b40
[   97.983851][ T8783]  ? __pfx_nl80211_new_station+0x10/0x10
[   97.986214][ T8783]  ? netdev_run_todo+0xe1d/0xea0
[   97.988318][ T8783]  ? nl80211_pre_doit+0x4f1/0x930
[   97.990442][ T8783]  genl_family_rcv_msg_doit+0x215/0x300
[   97.992751][ T8783]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[   97.995320][ T8783]  ? bpf_lsm_capable+0x9/0x20
[   97.997328][ T8783]  ? security_capable+0x7e/0x2e0
[   97.999410][ T8783]  genl_rcv_msg+0x60e/0x790
[   98.001343][ T8783]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.003471][ T8783]  ? ref_tracker_free+0x63a/0x7d0
[   98.005591][ T8783]  ? __pfx_nl80211_pre_doit+0x10/0x10
[   98.007842][ T8783]  ? __pfx_nl80211_new_station+0x10/0x10
[   98.010239][ T8783]  ? __pfx_nl80211_post_doit+0x10/0x10
[   98.012498][ T8783]  ? __pfx_ref_tracker_free+0x10/0x10
[   98.014707][ T8783]  netlink_rcv_skb+0x208/0x470
[   98.016740][ T8783]  ? __pfx_genl_rcv_msg+0x10/0x10
[   98.018861][ T8783]  ? __pfx_netlink_rcv_skb+0x10/0x10
[   98.021085][ T8783]  ? down_read+0x1ad/0x2e0
[   98.023010][ T8783]  genl_rcv+0x28/0x40
[   98.024721][ T8783]  netlink_unicast+0x75c/0x8e0
[   98.026752][ T8783]  netlink_sendmsg+0x805/0xb30
[   98.028803][ T8783]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.031092][ T8783]  ? aa_sock_msg_perm+0x94/0x160
[   98.033248][ T8783]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[   98.035435][ T8783]  ? __pfx_netlink_sendmsg+0x10/0x10
[   98.037674][ T8783]  __sock_sendmsg+0x21c/0x270
[   98.039667][ T8783]  ____sys_sendmsg+0x505/0x830
[   98.041670][ T8783]  ? __pfx_____sys_sendmsg+0x10/0x10
[   98.043917][ T8783]  ? import_iovec+0x74/0xa0
[   98.045911][ T8783]  ___sys_sendmsg+0x21f/0x2a0
[   98.047988][ T8783]  ? __pfx____sys_sendmsg+0x10/0x10
[   98.050295][ T8783]  ? __fget_files+0x2a/0x420
[   98.052233][ T8783]  ? __fget_files+0x3a0/0x420
[   98.054224][ T8783]  __x64_sys_sendmsg+0x19b/0x260
[   98.056278][ T8783]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[   98.058394][ T8783]  ? rcu_is_watching+0x15/0xb0
[   98.060420][ T8783]  ? do_syscall_64+0xbe/0x3b0
[   98.062491][ T8783]  do_syscall_64+0xfa/0x3b0
[   98.064520][ T8783]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.066732][ T8783]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.069279][ T8783]  ? exc_page_fault+0x9f/0xf0
[   98.071416][ T8783]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   98.073952][ T8783] RIP: 0033:0x7fb5e438e929
[   98.075853][ T8783] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   98.083851][ T8783] RSP: 002b:00007fb5e52ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[   98.087218][ T8783] RAX: ffffffffffffffda RBX: 00007fb5e45b5fa0 RCX: 00007fb5e438e929
[   98.090447][ T8783] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005
[   98.093747][ T8783] RBP: 00007fb5e4410ca1 R08: 0000000000000000 R09: 0000000000000000
[   98.097101][ T8783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   98.100385][ T8783] R13: 0000000000000000 R14: 00007fb5e45b5fa0 R15: 00007fff6872cb88
[   98.103642][ T8783]  </TASK>
[   98.105771][ T8783] Kernel Offset: disabled
[   98.107610][ T8783] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:58:53  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000d8c4 RDI=000000000000d8c5 RBP=00000000000003f8 RSP=ffffc90002cae770
R8 =ffff888108c28237 R9 =1ffff11021185046 R10=dffffc0000000000 R11=ffffffff85460dc0
R12=dffffc0000000000 R13=ffffffff99aee890 R14=ffffffff99df32e0 R15=0000000000000000
RIP=ffffffff85460e3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb5e52ab6c0 ffffffff 00c00000
GS =0000 ffff8880b8626000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000001080 CR3=00000001227da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 000000306e616c77
XMM02=00007fb5e4586478 00007fb5e4586450 XMM03=00007fb5e4586488 00007fb5e4586480
XMM04=00007fb5e50ed100 00007fb5e4586440 XMM05=00007fb5e4586458 00007fb5e45864a0
XMM06=00007fb5e4586498 00007fb5e4586490 XMM07=00007fb5e4586488 00007fb5e4586480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fb5e4411df9
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000006dd RBX=0000000000000005 RCX=0000000000000006 RDX=0000000000000003
RSI=0000000000000003 RDI=ffff888021519cc0 RBP=0000000000000000 RSP=ffffc900001dfac8
R8 =0000000000000000 R9 =ffffffff8172aae5 R10=ffffc900001dfd18 R11=ffffffff81ad03a0
R12=0000000000000003 R13=0000000000000001 R14=ffff88802151a8a0 R15=ffff88802151a898
RIP=ffffffff819e471c RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2a44edc800 ffffffff 00c00000
GS =0000 ffff8881a3c26000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a566080000 CR3=000000011015c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
