last executing test programs: 1m8.90645051s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 57.085675095s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 46.386171526s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 40.641800367s ago: executing program 4 (id=1830): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000e4ff840000000f0000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x9, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x8fe3, 0x7, 0x2, 0xffff, 0xfff, 0x2, 0x4, 0x7, r4}, &(0x7f0000000300)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a09040000000000000000020000025c00048058000180080001006e6174004c000280080002400000000a080002400000000208000440461546c10800014000000001080005400000000108000740000000440800014000000001080002400000000a08001a40000000170900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x38) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000002a00)="8e1d5c610bfe415d01b31f79a031b5c018e0000060ffffffffff000000010000", 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="0200"], 0x10) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r10, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) unshare(0x22020400) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r11, 0x0) poll(&(0x7f0000000040)=[{r11, 0x2124}], 0x1, 0x11ff) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x0) close(r3) 39.705310328s ago: executing program 4 (id=1838): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x5e, 0x2}, 0x8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) getsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000080), &(0x7f0000000140)=0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000005c0)="0f8b", 0x2, 0x4004, &(0x7f0000000640)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) (async) sendto$inet6(r5, &(0x7f00000005c0)="0f8b", 0x2, 0x4004, &(0x7f0000000640)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r5, 0x1) (async) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x14}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) 39.333992611s ago: executing program 4 (id=1840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'pim6reg\x00'}) 34.501671558s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 30.552963688s ago: executing program 4 (id=1840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'pim6reg\x00'}) 19.035778053s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 17.321848094s ago: executing program 4 (id=1840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'pim6reg\x00'}) 3.583277854s ago: executing program 2 (id=2031): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000fe1f7025"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$sock_proto_private(0xffffffffffffffff, 0x8971, &(0x7f0000000000)="4be2c3db55f03a") (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r0, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) (async) r1 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) (async) r2 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x81, 0x39, 0x1, 0x101, 0x8]}, &(0x7f0000000080)=0x54) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x22011, r4, 0x0) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x20194fff, 0x100010, r4, 0x3000) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'virt_wifi0\x00', @random="0600002000"}) 3.4380196s ago: executing program 2 (id=2032): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRESHEX=r2, @ANYRES64=r3, @ANYRES32=r0, @ANYRES16=r3, @ANYRES16, @ANYBLOB="224bec1fa19f349cf84644fc1eaa84ed01132bdbbace067449cea00ef59b67d6453aa76b630a95aa1c383d471f5d601c3a91f60895f36223394911d5aac045b1fa0baf099a9c23d11c675d5bbcb2", @ANYRESDEC=r1], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000000000006b113600000000008510000002000000850000004c00000095000000000000009500a50500000000719837a62ecba6b4aca926e6c8a1e509afe04e27090b613f59968cc4b88b4ecb814f46ebe3d5e393478f148c05cb001274b4a292d599"], &(0x7f0000000080)='GPL\x00', 0x4, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffdcf, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xffffffee) socket$unix(0x1, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100001000000008568fb395ecaf5ea8271caa21613a0a40000000000fe880000000000000000000000000001fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000033000000fc0200000000000000000000000000010000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000190000000000000000000000000000000000000000000000000000000000000a00048000000000000000004c001400736d3300"/244], 0x13c}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) connect$tipc(r8, &(0x7f0000003100)=@id, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmmsg$inet(r8, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000040)=""/244, 0xf4, 0x1, 0x0, 0x0) bind$tipc(r8, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001e000100000000000000000002000000", @ANYRES8=r5, @ANYRES16=r4], 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x8044) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x200840d0}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.013136175s ago: executing program 2 (id=2036): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x3}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x41, 0x3, 0x258, 0x130, 0x0, 0x0, 0x130, 0x0, 0x1c0, 0x1f0, 0x1f0, 0x1c0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x108, 0x130, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@rateest={{0x68}, {'wlan1\x00', 'geneve1\x00', 0x0, 0x1, 0x2, 0x1, 0x8, 0x7, {0x67aceca0}}}, @common=@inet=@esp={{0x30}, {[0x4d3, 0x4d3], 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'veth1_to_team\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) 2.786164422s ago: executing program 2 (id=2040): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x9d741df904aad753, 0x0, 0x0, {{@in6=@empty, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in=@broadcast, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00', {}, {}, {}, 0x0, 0x0, 0xa, 0x2}}, 0xf0}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0xfffffffffffffee2, 0x407006}, 0x104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8}, @NFTA_NG_DREG={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}}, 0x0) 2.686105062s ago: executing program 1 (id=2042): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xf00, 0x0}, &(0x7f0000000180)=0x10) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$inet_dccp(0x2, 0x6, 0x0) (rerun: 32) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @multicast1}, &(0x7f00000000c0)=0xc) r4 = socket$rds(0x15, 0x5, 0x0) accept4$unix(r4, 0x0, 0x0, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@ipv4={""/10, ""/2, @dev}, 0x0}, &(0x7f00000001c0)=0x14) (async) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f00000004c0)={@mcast1, 0x0}, &(0x7f0000000500)=0x14) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0xd4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x240440f0}, 0x48081) (async, rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f449487219195806840106a86dd", 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000480)='gY', 0x4}, 0x50) (rerun: 64) 2.464363581s ago: executing program 1 (id=2043): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) (fail_nth: 3) 1.883846645s ago: executing program 3 (id=2044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='objagg_obj_root_destroy\x00', r0, 0x0, 0x1}, 0x89) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x37, 0x800000, 0x8, 0x9, 0x8000}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, 0x0, 0x0, 0x24004054) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="e3", 0x1}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000002000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x600, 0x48c, 0x0, 0x0) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) 1.785748565s ago: executing program 1 (id=2045): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000010) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={&(0x7f0000000140), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r3, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x24}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x20040000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={r0}) syz_genetlink_get_family_id$auto(&(0x7f0000000400)='devlink\x00', r5) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000480)={'virt_wifi0\x00', {0x2, 0x0, @dev}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, 0x0, 0x0, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x4000010) socket$inet6_udp(0xa, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r5) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x6}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) bind$alg(r5, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r9, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r10, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x85}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8801}, 0x4000001) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r5) sendmsg$TIPC_CMD_SET_LINK_TOL(r9, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x68, r11, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x8, @media='ib\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) setsockopt$inet_opts(r5, 0x0, 0x0, &(0x7f0000000b00)="51203502762dfdab5b47afb5a58767f22d125c108ec49a7a31e27f9f2702eb3c7ab9846696f835ef9e870932b92a685838f6d17ff5407c829713cfcf0d4aec44ec100e4d3d4fce836925a140fc8c82e168e172d03a2f", 0x56) r12 = gettid() syz_open_procfs$namespace(r12, &(0x7f0000000b80)='ns/time_for_children\x00') socket$kcm(0x29, 0x5, 0x0) sendmmsg$alg(r5, &(0x7f0000004f00)=[{0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000001bc0)="fb22272923ec3b084df9268b22d5e39644a087b0c5708617cb8c6929ff105e8c4321bc010b69828aa8781b30de8c89036a39354ff99f1222b7d29a694051a01c41b7980f5f03c8974d5bb4d09c2271b46127ff308d442a1057f469b3872808d78d4c1dd13dfb084f6f45677750382a53fcdcccf743a259", 0x77}, {&(0x7f0000001c40)="0072c5fb85da8886969af4cc714e9b9c5abdd7534028fe0a5f39e5200b7c2934e4852654fe11ba838c37c93490015fd38dc4dcd6103d95afe641e8", 0x3b}, {&(0x7f0000001c80)="b9de639705abd738a6bfd7f89c0cf1e1b2ce6a26eeced7da5dc9dcd35d7813b473545487813ce2c60c2e3c4b43befcdec7817ca929c2703aca439917ee6609aa1188d4e47f9e6e6f7b25b272cdcaa1c8716d979541da3e1918893af8f6473dda4f549ab08c2e5c7df1516667ecc8de2311f6aec5aadbd7b9c16db77492bc3c261323104f0c46554d3e7bdf15012b2c97fbb6fcdcdaa546a5cd585d9819e76ac5fb7666a48d210a06fce272aef4c0ed99f36c9fd47c693d", 0xb7}, {&(0x7f0000001d40)="533e000ec1d829582c32ef7e4bdd59eb24a33c0861b6ca71c3ee48267bce90fc28f272d2bc9eed4b97d1b7d6314f679b1fba5516c2270c9e83a7de59d92b1d05bf6fd449212c73c06bc0221dcb72b3831d761347dea0261c6312010bb7e4a531cd22395365d08c9ac675b70fe69502ea4f2fc7eb4caf3fc99c991364f22c536d1af5200fdad4e5eadc0b5f479036a92544d09c0d3a77e697574316f1ec22e6826100f36edf4a591163c2d717191089ae98", 0xb1}, {&(0x7f0000001e00)="f5c5a407982dc46d2e7f1f9b2a331ca6287b7b5f7b0acc289af91aaeb83c67de740ad6c70b2e5b39b4f7c3cfbcc42774f2e3fbe8c10448451d42c8f582818554f0b7be2102897970b74fa78393371f7bd8b8265d959fe4daf58193efb25ea78299695145890abf7981b6178e3a1e434e2a188865da0340e843bc86280c87f53a6909f9a21c34f3288a927766ccadff8027191b76520acfe73166773bd7fd6adc999172db38bcf84d70c74f7f7b", 0xad}, {&(0x7f0000001ec0)="2dc4dc268e290e87e63f6a3bccc1eeaba1016de6579ec8f737e4a062233450d26775e3244ec3ee1275acb0dfa5e42ab11039a773afb9e16f8426e590672defb1c4f3564a2e5ceeee2a93e2bd7bfe0ce54f9119c4385191aef277da6582f6a0de62681af88f196aa6333aae5ce7", 0x6d}], 0x7, &(0x7f0000001fc0)=[@iv={0x118, 0x117, 0x2, 0xfd, "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"}], 0x118, 0x20040004}, {0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000002100)="6adad90368ec5d730c8a828462b4dce9701deaeec27cb9ec8eb27e7635f76d149776b455551af997e8e4652ab825be88d447a58796fce5560d44cb40072528791a492adfee6814b5ae66a687cc238fee7f749891efcf050c8a90edbbccb13c53e10f90898afbc6c956069764467a5f18bf8682e8c0190d4ed60a0822343c45a441771b592faa698eeb54ca29205aa495070873a8cda1bcfb4259ed9266069492ac5d11a355c09245dc9f481a2379fdb442316839ac37fe8cbe054c6d1cfa722c14ea66719b154f2eb5ce886db956c7dd505f33cf2c1e487431b825641fe7a2912e129ee26ab74ee63d0a9071ce", 0xed}], 0x1, &(0x7f0000002240)=[@assoc={0x18, 0x117, 0x4, 0x10001}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}], 0x1030, 0x4}, {0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000003280)="6293d1b9977ec46191a4dea122bf1b52b6989fe9bb63a52cc0255af125aac3ea", 0x20}, {&(0x7f00000032c0)="9d9fad1ad121447d8ad5f4d623ace693564b57ef03448d43efcda9c045b41535d409", 0x22}, {&(0x7f0000003300)="5cb7ae1d0fb028b25444a5cf2ab2579aad372773e96cab4d2790b13ffae0dab97ed198d49c5b98b1435269dd951d9970bd22a4db3e", 0x35}], 0x3, &(0x7f0000003380)=[@op={0x18}, @iv={0x90, 0x117, 0x2, 0x76, "e55934c12388d7897b0102c0f79d8d665655e57101903a1a30cc056272efa77211423dd8658cb1c61829165dc49d1e82b371ea5200e44ea32026e52b0e0024d26cae8edc534c1594ff6b6ade330947014cbb114357191d40c9170f39076ffc841d02c3d9a25817a2ef4bab2dd06dac000e54b7399aa9"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x10000}, @iv={0xf8, 0x117, 0x2, 0xe2, "3ba50353bdce722aa8133fab3b17aa88e87433b945047b7e3b8297fd2adcd882109ce8477a185e8ed4778c074e7f1780ef8eb859aee71736a15d72938b68dc94c016d87049c40f53c938ed4cadf8c4b8de3138e5e889990683bfd36d7c6084521dbda0d0c3a62ec6743047c46a790f819b106049a881f07b7c9c4c405ff06aff5b5e0f4b0e09036a7cd815777c0a6b5a98419ee942ce5cc719b66c7191bbb278ab1da56648b88640314a09e92d5f0dd0790a8bdd1970a52e623faf9dbc388a2b574ca14d2c99e339c670d5d3f862f88e4c0ea1ca4c10019fd512fc8f28da8aeeee38"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x1e8, 0x801}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003580)="68510975f204012661facb2625d03aa954e33b62a15f9e93c95c6571c1f52a7a48dbef75eaa674219332565b", 0x2c}, {&(0x7f00000035c0)="3344212780ed18414426ca47fa3c6eb0051086cef819e347558ba296913c9ff28b5f763b07d6b3c561f923f5cae0796b42035c8d182bca922a4e1a83d330e7d085d244fdacaf80f9c86d862e16074deff36045dbe145518b42f44e0457bfbc47ddfecc476a80e0d9834fbd13c0a0122581e213b3beb234cc2599191b834a95e38e12f80f1fb463a49804a51e23f945361888b3661aebc8db8101fc69682a4edd47f706c3c8d3fcd1429777d3127f37aa5e686bdcc33d552e07b9868065d589a3cd0d079e2d3b6952749adb1a2909692194ecd909de077508b39f7a10d7fd", 0xde}, {&(0x7f00000036c0)="8a2cef28f8a675ec7961de1aca46f71fd463e460340d0d2d6f1ca97a06c16094597ce4367736628664eb4b739c91a5ee6c4b9123050a1b051ec8225e9d2bba5b33e1f47af82738ff8e264bc0691d50bd0fb267d9d0cdad785edc5e9ace343639b42d04a058d606aad5d703f706e92dd50151808043acaad5a1ef96cbfe4fc70751ee19536d4ca00a5a75", 0x8a}, {&(0x7f0000003780)="186b2ef4346ea4dd146c425fe37d2a", 0xf}, {&(0x7f00000037c0)="ea9036dcecabfee1c4e952f84dbb307e6c28187ccef321df051d56c3dbc3ca08dc464e279661b0335491829879c873f65f3772825f14135cc2ac97d33222ca46b362d3e8b4d8b4d13873141ec204bfcb722ad420549aadfa0d271287", 0x5c}, {&(0x7f0000003840)="b1d91b2d0b54e8f0a268c16ff41a63db345030b88f2fd79662ae76a4b92bbb177291030e29543608066f25fd68b71cd00d7096f951f632075e3c1053d984c82b1c0c08a3e0f4e97bd1308945ff2515125823ac3c57e77ef94e9af9594c7190a3c6a5a14b1508386e6076d5c34d2090", 0x6f}, {&(0x7f00000038c0)="15a3a3ee47cdf899dc2b32cb86e51d71f729d16d9985f1d19fe8ead239ae55d88e20e73337b5a12bacf0067b3202a4caa5303b4458a376656555ae5ea404535f461e4f07b63e2930df6d2528358cb551b126c52c4eecea4d8b4b6dcb29b3bd692122306ce8edf228a395da57350f50f42c7fdd0340ee97ab7fbf577445484b", 0x7f}], 0x7, &(0x7f00000039c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x4e, "dd6b3af3d4b83e46feb34535807d05883a8c8247f61cc371a4642ad81e6840232c56f381622ba9d8fa254ab738626576dbfddfd166a96410c0f5a6633e40c09e1a7735268d5f857bf8182b7ce2ee"}, @op={0x18, 0x117, 0x3, 0x218dee09206e0e09}, @op={0x18, 0x117, 0x3, 0x1}], 0xc8, 0x2000845}, {0x0, 0x0, &(0x7f0000004b80)=[{&(0x7f0000003ac0)="c39a0885ac4916469cd0937e3e53e1f08d08fbfad91a25aa535d84279fce5d2cd489bd884cd778b48a109ac14788fef40a88ba839adf5b70b53051f8b0709883bfb47d0c090b11051bd441c3f07d92da3e078d4bbfa7debde8fe07e3642c126262b7a231a608d9f9c28b3c21176b1af1ba0f573b769db988f74d9ee128ea6fa13e45299a24bb17ac30f68ffdeaf085a132dc5fa4023d99c96ac3bd4adc5299d65476f6e708e6f6984363557621f94a86e1ce89b419a9a650180326fca4a1925ea05a9fd9539676876b8491f97cd903a919d8aee693aa1a7b9d83d4136868fd0c32c9ef9889c03a5992a30b9f644b529fc4db36f1666bd80c59efe09fb480d97545cd9bdfcb3ce5f0a25c6bb5032f2e2a19c6a832d9e2521cb5c1cdfb355b24ee6023014cf00c2183e764b15eac68fa7938dd2d9e7c36524ae4145599e65c9a5718b6c5116a19d9a90aaf8a9e6941145e2860ff9214427a727cf0988fe48076415a53ab313a0774d756c42a3aaeeb122fd459e0749e3f8ecbca617327f4501a70c9492f3f6fad535bb4a43ea55c5aec136be37565df7c5f8d12954c3e5c8ef4d80179faafacb97bc2fa4a30e37311df4f28059dbc1457d3e0e5cfafc2414aac08ef03f1b92001979978bb980053dab1e353ccd97ddc94840d33eb44e86dc1224fd1e0ef40817b50f4e6ef116b7cc0504bea9d03e36d42fe805846e84020e151dbda515e7ee7832e4ab0be1ab9be1cc0fca19cc11d42f7e5beeac8a622ee6695a40516a57a98834662dcab68303a761bc309d85827d950919d7cff8f2e419a52ba831eefb086e72780bb8fad72972652373968532a60f80dbf710787fdb521cad7f931e6abdc2b8816420f6fd7e2c5710349554d854c5fb1c834dbecca090c17e6b992e12d4b17f418db6423bbaff34524f883ccca1eca1d088b069cef15f5ddacc7e8f07f70f1817a6253593dbbee6933e08fc5ba568a7664c1012d950f85744106ca3643c4ed51956b22f0c62e5c3b6717473f6757da8a8ee6169dc1eac37bf0297c67fe39f341b404c2e92fd9f263552b3184f17d1a45bab7a439edbe1697a4c2e1840cca64da42e3adbd093a6a6832a9630577288ed3474dd7babf5a507b6157417515b3b87f51437bc123fcf20faf7db4fc3824b3ffe3e5b1bed19937834d8cf971e2e714aa2441879ef37a943a1696b90f551b5ef481709c2f61f2719c9804d5481e6646e8af1bdcbc8b2de34be39ea263bf8e2e483dd8100ba43207b4d2274ba23e926ee3982ce6399932038650c3e7305e639d61d82c31fe0a18494a5ddbbd9537e3f87428b815a506302954060dc77b04c1eb63fd6bfbe23dbd3130c3878bc0ffc1cb62cd28ec3bdc8021b5489ae73ed58352b91cf6df49e51748cc05b04686ae14aa353f3324bbfa1cd7d6e7d39ee1467a98815349500045bdcecb65cf26e030abf9dd3f05e887acff9d65bfa95f9d99649d44bf11926fff54e77357359a1c2679bf274c03e6d80e9a0b34ce2d31bf51a937c5b23c87642fe51f41e1906cf47db374a7e5d3f71d3b91e9836dea90dcdf25e694026b29c8bfd5cb6f1468f437f7d84aa8a43f8b55ed7eb36e3d34c5f28a154c05d277c2ffabf1c28851fa431dfc43d49025e94140451b4ecabdaa80727c8f240c5f98bb147a3385be096eb297b6458b1e1d68daa496316a8183c62ee8f52ff0b7e52f3f135a27fb014d37f37357304a02a60ddad2c5022e347a19d5110d5f739397a814b644e998086fda7b148aec776b94811a9af9d85c6dc5897c11a57832b3c145d013d1effa839ecfc31e5238fc12e3a7a38dbc342701abf494e037bb215d9f40327d973273de6c89dfa36286b532b0e102599d5b8f4e8a9f74017300034e0e62a0a7c3d115fb5d4b952ff845eaecca7525b73d2149746c13155d7298f92f5f8a0ce5db51288d454f6f9da643ff2978af293303293efd18776d6c5f85ab91f67cfa4ab03df914c57faadaa542959d484e39e6fc9d00720505f77c41b042b876d6a812da7d9e9b57b71c625a9039494de737af8e0f6e9b55c37e08b215390c8fb9973c9608cd0385590e4d4e3c17a0d3c2ecca413e73de9ff09bb301867888dab6187f05ccb7005cc5bb13a37b420cbf7de2aee9486fe8cc560bd978284e5098c67f24b24322ba49831eb4f49dec5b6cd7ead644fb430090654bc8e03e9bfa7ede89e04bed64ea8837b594a2021eee868b7c0ffdb9e8bb7853c8b527b53fd229902be870e62895fed12522161e364281321e9ac39aa8fccffc2ddbaa90c63e361a766b740becae4393f345086c7538344711b8e479b7e736a4ec08014488be3a0b1f2888ea9d9633b39393e51fadf794dc5409e4bb71c842f63efc84dd0847dad0b368cb1bdee20271fa752fb658288b6df3e3a4c3000c86e893fc8741253cb477b0f685597e820449fa75e0fcbede4c1a0f84ba4a760b374b4b99639a41ea1796c198bc03c6c4d9e30d98f6d6179d711bf75e9a539674abdc3837a3c888a2a47b915de16e0679577feec21f03466bb8736a16561dc4a681776b14e3e555d28aabeb45fe3ffd913883d8a2f82a40420758b14fe37a22de035d48c3f31596b5979b42c0f895c15796f46753a19f21d453442a24c0cd54ed1e7be2cb9b48d2f7885146f089be1d47cc931a8013a6a2aae5d9a8329f9c0d98a3d8732b012ac9147867c4a8eb5758237116484f8fb77638a03d64bd8418382735a8b50794e96dbb5a348418dbfab7cf13d72636416fcad2bcff87f08a14904bf517ce6d0e29e6b7b29852cf35cd50455cf5853a3f876a9eecddabb320c35797fa71b65afb8c8eb45b4765bfc2b45e3b8ae226f1dcf8378938517cbe35bc76cccad15f4f48398e8d74192ed1db39eeee2cc83f92c8dc11d589db2b1f6c4f0a5b3cd587a0d75910d62450af011e23204a0090c5b950fa85289477762c84711e9c82d337da2871b31bf81fd8b61b9a7b7ea3bf71ec3e3621563279492c09687e8eaea2cee07befefb99bd368dd67e3889d703d2fd76888a43ecf73288bebcdbeaeac175cfabeafa021896ebaf41f038695cf596d162e1f1950a0f476c261d313d1763acb6f04cf89a0c9cb25d4a3acad37f85bcbcb25ca2befee79cf48b283f787cb41b3d0c608ad00ed336bfcfc77c3d4dee95dd7d983611bffc4513749ecb587ea49fe877ec846a5a90b06339dbd598a4a8e059b79a8842391af504a7a347ca132c8deabcfe440115aecb948da149f783dc5468f06a0611afb68fdd294db4675d6bfc4c7d4ee19c64d39d1b079ead20ea5374b679d95375cf033d56a4b952e58964c29285492e59dbe550f32304b36f7808f6c2eb03f0e2437ef7d7309b20f275adcf714b4c7d8c5d2c4d62a9a0fe1d50d9c64eee3c25ba82c05e9befa2b8a0914db5113bcbd5a2eeabab826cae85ff63285ba5525fef1a77a3abe9e6f42e28af3181c612bc4d5b0ebe3b56e58232baac5de8d6d0e25a4dde4f3efe6a1f899ccb3db266614f8c2b340346a5906cfcbc41ae5c1c77669b392da96650a98090f66ad52145f02a398d982c36c3c8ea110269e32988e3ff501e6e20ec88a4bd6e48e3200959984e763df5715c82b443203907958fe201a99b7fc11e1dc435c6a60948f0c3254b8ec5814b24d37329fe521a26b5bfa044e3e8c05a4f8edf274d081cc7f5c9246f42b4a92a456f2971eaad1b83abc3e05218c1c1eee3b1445efa61701c9dfdfb4673fcd833e65c159acf8a13bef996ebff1c69c61a1fde3427aa56b1eaa953d3c47f3987ff8dc0608e21a758a99da95a20e41e6eea660e73d98e985e2ca695fe3c6d819eac752f1da38eac0864965045b974d1a0729340fbed6d6b1da4c94be095dfddf3fb04dd156c929950a09e3b28eefb836912669c05527c57d77dc77e07f76168a3c01948b850e1e9fdfbf1a68427e1bf339cef886ce10a272876169a29c5ec996cab108e36c36f80edde9feccbb63b0d65158275e7aaf3cb9cfd12c29c528c79aa52f7dddd9bb203f3f7dece30bd8190857d80385811f556c0bec6ae378cc94e33610aa2b8aafcd5bcc5b84f70cee784edb42f4a06dcc9b4b048118680dea619e760aa783ee5a8e1e54c60f6ee555c959c8eb3b385534f36d77fbb46042ae0a8ce99b73ae5c2d4db31156f5fddad27e5089b3cd46529e10730bd7c302e935f3dea544b6921789cfe1057136971023d5fd51da45c5fa8c48111a62407ab9226f13edcb005faaceb8acbf77b182a2cbb8a60c45990ccb825433aae55bf76e4c4ae7204cdf8f8a3e86bcaffd96cc067e68be0477bf32fac7f1a993f7dc7b940654cbde1d8467def23c4d3866efd7b0c203a67abea1ee8564d0c5c2b91064e1b325641786c280654a7a00d4b492f49f2edb59743b958776e3ca87ec91914be6af71f38a1b45401322307b0a3e84f8226ecd7ac644d9347761945c8ecdf11e7cf35157a6f10a20e5a0cf2bc55c803882a7a15eaf57e7ebe059bb23ad60f96427d2aedd0c16236ed83a5696d8d3f5b8ae813b0f31e28865222daf1a336de93bf1061c11f4dfa66565fc6fc9adc815c923755111cce059fc82bda0d0aae550ebff4ff0583bb69b9e72f32e8401b4d1006c7fbed1b4eaaf43da4f3ad75654b4edc99663389ee84ca2eee6f8dfcd847bfe05b033398e80331d2874c36886195d7993df9853865669996be48777f2f9fb3712e2215cf5122c433db5a41799cd25f834aea14356c88ff8b8aff9dacea66b9f549aeab78b804618a72ac7f2dc4c95126ab6b9185b08c61a969583aa4606fad4ca01a2aac282a11350b695b7dd74e02157eb04982cce28456b707072468c99ac812dc9a3afcd5084d0215a9efcf28545614a41468e2d35c0a60099faa09a44053c40da05b6109ba48e2da7628242b66e8543657120dc0d1315ef887c75b865f52a6955f853e98014310048734ac63122b38513c71b7463485711dcf597ba533641c8a9b84476eef0d36561a57fb51414ae770ca86c28990c7027034c2e4c518fc048e7eceb6c2f9e40fe5904b690876433f88ed87d44134aa6f755c9dabdb06d9c69dce92dcb1c6426b4f6a2d93273b55981f50e28f672d612f661638e4b4fc7c3ec54ad88f0d45a7a0ce2a3c02a9ddaeb9e810a046b0fd1562de677f072199c91d375be901a3bc1e1873e16a123818fdb1ecd80c746e980058d03ce1ecc4b91e35b917f56cdbcadaa3b35322b56f17a60a791e02a724eb5ce4a212f538fe625743da3b68223b4aca37187858c32e62ab4ae346421fb50afc7bea9b2a0063bd8dd53bd2cb6f9118574aa4b164966d6e2e87cc0fcea5e0965b4012b0dd0caffb3ca55e3c31f025f44a212348a56901e7a08efa6b5ce67e4c72b29fc3978756dc395ea863d8af58ebb39204236b917884296dc59dbcb91d2959ab0c807cdcb59abda840a5bb8d740960847c7ffae2ba9b0bd8dc217a0c86a8e575438f756ab33df341852aaf9d7394c264ccdb8b84339195e2624f395d592c24172ecaf283b28a28a1ed70f8b388837451a966d904decac7b2926fb15f9b4a7a669fe300f9d5a9471fc7bc393f4892736a9a49d9c43c4803f849ee848e5c5745ca31604d997f545144a5f1c60708bf5e0963dfe7be9a251db2e56febe493d4b41261bce8c8707b02c5658f6e7c30fa1655d768627812793c4e2ebe9fade3e7cf5e51c91a2e313580fb21f70ca3ae3d9870fa028ff561061fd0c9c71f054c306443b0cd5249b955bbbe2f55cc56a0b73f4d38b7e7c2fe3f206fb5ba7199808a3abc29cb7ef1f", 0x1000}, {&(0x7f0000004ac0)="ebd5acc54ca60395e22312cdfeee0c30ed4b25cf1c1f98a7e43c5eb90261eb786645068e8fb93df4b8fab8ad6bbfe25641c1bfd292e4aa742998fb040ad2f96145131060c573d3c19b77a23fafa05b9b19f755549f832f2e9be4712b41bb8915581354c7315dda5b9c0bd8638352b316670ba3b906cb9b1d980d32e8ec0b886c933127d81c403f813e47d62e7672e1e4965564877042e123c60e2d709486332451ece619fa0a1fd2803dbcf1", 0xac}], 0x2, &(0x7f0000004bc0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x60, 0x81}, {0x0, 0x0, &(0x7f0000004e80)=[{&(0x7f0000004c40)="3ef3b8e57b859ea1c21f94a5016778ccc198080ac64a09ef4717581519d3319d862c85b808c146c42712a02a1d7d4df6d9e61ec602f52e6ce8bf0bceb25a05c1eff4ddcdb1b96213b16b282f60c1aadb6e93efd87d69da1f1b146d7356e567f0f2732d1a2f55ccdd7e4bb4604e1ecbb66052138c4c68d6ba21dfa2325a0e8389a2446e995a7ae0a574af2d95358b76f69a939cd4f17816d770b31c32c0b52f93946283966386cc6811", 0xa9}, {&(0x7f0000004d00)="52f1e8eb51c575220569ae9187c7fc6bdf81b26dee70125719fc00bca6e09c10a888fcb9339f7b5d40015d4b4c01e0cda1b088d1b04d5a4ca288df4abc6b15c6f87abfd206c8d717f3518f8d3daa267c2ce88ccf2ff1e0ded973be5fbef4ba6e0dd04862a7b9dd5a3657b3f4a08168d2f1428e939b4d1f0fbbf2a162e52eda68b77f30a724adadac4bcca331ae22f1dfa713626a887bc9321e12a84eddb2faeea83969a5e9ef4aee2eafc5fe84a2bfeb35a5fdb7b1932e8533384cd07ce17f79e64ab9f36f6fa2110d3650288498e4bd04f9e0686e4f721f3ff954ab67e62b4835f0f0a79c70425da58b682ccb43cc4c2ddc70", 0xf3}, {&(0x7f0000004e00)="95fdbf6adf5cdefe42d66fb46d294b41ce4379bac88d28e4985f9dc71b81e755cf481b67aec1a2e78d703fa11d29102d1fb3b3b416f712fb7f1f3fd723e12a5fe137e65659709f14333da8fc4d94aa14d1ac00b8", 0x54}], 0x3, &(0x7f0000004ec0)=[@assoc={0x18, 0x117, 0x4, 0x18a}, @assoc={0x18, 0x117, 0x4, 0x1ff}], 0x30, 0x4004440}], 0x6, 0x20000081) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000005180)={&(0x7f0000005080), 0xc, &(0x7f0000005140)={&(0x7f0000005100)={0x28, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x7, 0x5b}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x48094) 1.761426107s ago: executing program 0 (id=877): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) unshare(0x22020600) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x1c, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendto(r2, &(0x7f0000000080)="b1142e74a83f716d077d82cb9a01a5a85c243460e17921d201e687742df18b33164f1a699b992c10dd915f00a8bed1f5db8217e3ed106d27f73c0420f3be06f8dbd1419bc80c0b0e1f4949744e4dbb6ba05110d832e89108c32569e0d294a07ace32de87cb599446196713ed8fedd3be63a24e2415991e27ceb10524b30c4830eb8b3be82b4487ae98b9e3f819622535adb3972bc3e637f6707291130781dc82", 0xa0, 0x8000, &(0x7f0000000180)=@generic={0x3, "eb3ca737793be4a5e263196e6c16de8c712faf1d19330136a45a897b543a3abb05001d1464860d68005c6f7b0161d223afe33a6cedc3aad8fe0c525d55bd460bec3424e2c88e3651d771ff2fb9af9c564e776f83f408017ec9435c33c1bb3605a605b32a14611fc71003ef4c51ec31a7f24ea0761040e5af56c0c396cc7d"}, 0x80) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x5, 0x2, 0x81, 0xb20, 0x40004, r0, 0x6, '\x00', 0x0, r5, 0x0, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl(r2, 0x8b27, &(0x7f0000000040)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x4004743b, 0x0) 1.004944349s ago: executing program 1 (id=2046): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020d000014000000070000000000000005000600000000000a00000000000000fc010000000000000000000000000000000000001300000005000500000000000a0000000000000000000000000000000000000000000000000000000000000008001200020002000000000000000000120033000203"], 0xa0}}, 0x0) 1.00371325s ago: executing program 2 (id=2047): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000580)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000540)={&(0x7f0000001480)={0x1108, r0, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x10e0, 0x7d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1004, 0x1, "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"}, @NL80211_BAND_5GHZ={0xd6, 0x1, "4d60e55e6f7b509d4a33a939f1d0684c8545016a49ab83f8759ce8efcc851cdefab8cb26eadba423970dd63121ea8ac691dc8283abc9ad27c76254921675c50b6a84d2c29106846e4cbc5d7b4a961fb6ad652761edb989f027fe18d17443cc2a4dc29cb03aec0b0aa432be479b4f462d1c78c2dba7e2eb5d8692449c335d201472740b05e06fbe6595da211f91bf47a0461494df073c38902f507b90d84ff64d2b95f1b5fbce58a8ada74f290bf7f65e14243ed31eee0a16359ce992c072ef708d239855477600490a3147d626bd3d887f3b"}]}]}, 0x1108}, 0x1, 0x0, 0x0, 0x20008000}, 0x48004) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000f90480240001800b000100657874686472000014000280080001400000000005000200000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/127], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)=ANY=[@ANYBLOB="200000000201010100000000000000000a0000000c000180040003"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000480)={0x3c, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "677a747f68d5bc46961888b601453dd5"}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}}, 0x48040) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006600000008000300", @ANYRES32=r8, @ANYBLOB="080026007c15090008009f00070000000800b700", @ANYRES16], 0x34}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000025c0)={0x192c, r6, 0x300, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xbf}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}], @NL80211_ATTR_CSA_IES={0x18f4, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_PRESP={0x14, 0xbb, [0x0, 0x3, 0x8, 0xd4c, 0x1559, 0x0, 0x0, 0x4]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x10, 0xba, [0x2, 0x60, 0x3, 0x4, 0x9, 0x7fff]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x6, 0xba, [0xf801]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x3, 0x8, 0xff, 0x9, 0x8000, 0x81a, 0x4, 0xe]}, @beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x698, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x9}, @broadcast, @broadcast, @random="af11e944c21c", {0x7, 0x30f}}, 0x64c, @random=0x63b8, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x5, 0x4, 0x8, 0x81}}, @void, @void, @val={0x25, 0x3, {0x0, 0x28, 0x3}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x50, 0x20}}, @val={0x76, 0x6, {0x10, 0x0, 0x2d, 0x8001}}, [{0xdd, 0x20, "3e6364b30e3f68ab9128248d0ec4fe5b3e3284be09c683de01d6b91f7ce3888c"}, {0xdd, 0x64, "58f9a7b02b97460d97dab620ad862c687e3fdc107910582d4f7bd53d0803fbc1f4da96710225631f860e96131acf8a257dcbb85b1f2b33d1cc4b12023974bff50efc16b23c21b608666860a121200530cd6c3f5e04255a9730f4e367f2a26e8ef835f6f5"}, {0xdd, 0xdd, "72a504485da25620e99e73763f41c6839cebdc4c39f82a44924f8798167bebf55dd49776710e895930dd45ff3148fb389514d86b08a7ecfccf2537f18ceafc3fa471bd17143731c9f11ac9ea75ce79389cd2c154172314fc39e3cebe2b3fde7dd3e38f0373c4e149ad9c45b085a16cc874c109b6fb6084a8ecff24b025d83804c2d828af874e63a19c9b6fc1d065ce9d7d051491a697b6c1f7c9e8779dc4bd3098fe7d965955951bab46f20658647cfd105f98deca69a6646ec60097afaa24d8ba70d006694dee4738b07186f8069ca2592fb259a98d8f32fc2db5a728"}, {0xdd, 0xa2, "c3503dd69fb32900821f151be9359dfda5f0a05349ecd3623f2d58064c2b150870b017955ffcb9d2c4cdce2600a4511bbc34c2a6746a394d40a5c713eaaec0fd13a917683eb3ffeda495ceb54759850eecc3192dd9a6608efc7223eeb709ccd021036d91d76bbe6338cd3dc9433c2c71409c787b39d1078cfd164d0744fa3acda5416c030703c86edf54ed6e4743fabb328a9dc83dccf7259bb7a289d151e6baa038"}, {0xdd, 0xd2, "aa0b9679d1379111a705a0648671fafe8b89ee895b680745d460a53f1aedb578515d1b1d3cc426a983f0b3317fa8614a743ce5c3dce7ea8b496d7e02722761455703e86b2c045f09df66962560c59f14a8b152fb46efda31892fc13068f3b1b4e8bf13f106f3388629efbfa13f33c5633f5770597cc7c647817bab947fa7c101d0193ce17f0a697f5d834258eb86549d63f87ac69e634028250871a2cacbd6c043f55ecb0b5e223316e192ca5ebc1aa2b272f4fba0ab81f168108e745424ba4ef9ac905c69b282f2dc63630116e7d5847ad9"}, {0xdd, 0xcb, "c4320976b49e1744e4d61d8ff1f02a718c8c480a7ed7b9818da5fb31475abe67ed04e93338588fca000ed7c7252803e1b6d3d2cd8a7ccf78a4364eeda7dabcb0c3c47b0de7aa11229e863130547a085346ded5be0cfd78006f05d88d4d97ffebfbef658701c496c0831c262cbde981098d6d8cf811e2400b2822c1caffefe890dd293741e4286e4d0f4dee78494ded6a08bf3f0026acc644f99a496ba9b7ddd97d90fd435987bd1fd58d1bf95a03b64c83202ac37f8b0b2d5e712aa8358702e116b913a4353eb229f2efa2"}, {0xdd, 0x4d, "2a37245b47c5c762a0542375635076f18c80b3863c3998a4e207355bcdcbb3f51410bc95b68f65b57f15a86da7225cebbeb46fffad07e5d31418ab46d23d4c9e1a2a93c4d65a9271d3daea5841"}, {0xdd, 0xfc, "96f185773b08089180d0eacc58fa1eebef8c1c345e6f41251ca8f7dab53756229b26d06ddc9e9eab7f3d097ba20d50dfa7f97a0600a87f27468a9ed75839bc5191565a8ad9108cb23ee4037608a1fb2ceced5943336042334f3389c1e81e5159a024925fbe73b2b11b6eb228cdcc6078c12021eed13de148aedf470ed87766d2a956724d94a0a566c7b4f972eba686c6f4a1ff2614eef78a0765811f0157de1edf9d360e69984281fe328ea4c82e91a0b407402099793a5a9f78c9069753dea6781a1256e57687f7ca9406d75d236468f880b839af2bf83ae416cc989b243b0c71dbd70416323afa3526d7aa3ec15f3d6bc91def5c314a3ebf9a6d49"}, {0xdd, 0x97, "133d7d6abceadfcb343b9eb0aa9c36b5a83ef414b88d1c9bd2ef3dea8c7fcaee1a8c9b0e0e9c6efeb579406346d361c8b28b4da8c34a3f029fc166128df67c5aab4d6c2b847cb547976b2b61bc664a2ae7c31ee3a29557e74533cc89ffa850fbb994d9f143766bb9d2fd504260880e46543a57f7652c48ef822abfa5011574a61d2984e49dfcb8e7f36b4d66793e2df26f25ef34480ba1"}, {0xdd, 0xb3, "37b9d2ff393e86b2ef9165ae16b28e4b8a82a84cbf405f276c0ac3067b7a828c26544f6ec81e7930913178617da2a8a7afc6b77fe1a0cc1180da51560c234e3cc42e4f4306da41427511b67d09b2b65abaa4e791f628f258f4fb02c795bd4527949801527348621e818231939170fc67b18a0fd455fce24b62d8b182b2416c895e1314fb13284129f27b51f125c17dda2499b85832bf032a4930c59d02237dcb22ae0b69304d8666fb4d56cb301317b76dade4"}]}}, @NL80211_ATTR_BEACON_TAIL={0x6d, 0xf, [@ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x2, 0xe}}, @dsss={0x3, 0x1, 0x40}, @tim={0x5, 0x41, {0x3, 0xb7, 0x7f, "f46ebf343b470f66534e16a48ae5467be02d7e0924beb3fb7f84c5807a0d589853dc026badc273fb662a730c32c4c5f14902c1d54b6ac69d18e183bacbc9"}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @chsw_timing={0x68, 0x4, {0x9}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x253, 0x7f, [@fast_bss_trans={0x37, 0x143, {0x7, 0x9, "cee3429c25a47494ba1cdbdaa63f7014", "03659a0917bc77b5386130e413fc695fa11babcdec0f7530b82262b3fb74fc5d", "0aaa0b008f3671385f7b20c1e12b2a7cea60a694a7bd34dd943e31de014d47f7", [{0x2, 0x12, "84eba987156ed3b124b657af825657f2409d"}, {0x3, 0x12, "edbab5ed01233b4670d8a601aa17ace8e1c8"}, {0x3, 0x21, "fe586091bc2f24cd10140769b5d5d1c231c36a11a0ba4128079a8e124c59dfc58b"}, {0x4, 0x26, "40de87a88c6a56136fb5fa036450a9307fc346520435d4780df152387b20f811263b57559740"}, {0x4, 0xc, "bb9c36319eee69fccc2255da"}, {0x4, 0x20, "355334507fbe74a74b3b5702df459e8326657fd03c759a530ae0158ca3e3cc04"}, {0x2, 0x1e, "994d7693be3be83703027f0cf5d6af0ec94b58e6cf2fdf7a7712a0be96d2"}, {0x4, 0x27, "4e2a05869726da0314ddb51e23ed3ca41e60152a8c3ad2b57f3bf712d6853b338bacac65a1b9cb"}, {0x3, 0x3, "0a16ad"}]}}, @perr={0x84, 0x108, {0x0, 0x10, [{{0x0, 0x1}, @broadcast, 0x4, @value=@device_b, 0x3}, {{}, @device_b, 0xf, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x5}, {{0x0, 0x1}, @device_a, 0x2, @value, 0x3d}, {{}, @broadcast, 0x4, @void, 0x10}, {{0x0, 0x1}, @device_b, 0x18000000, @value=@device_b, 0x9}, {{}, @broadcast, 0x81, @void, 0x6}, {{}, @device_b, 0x5, @void, 0x5}, {{}, @device_a, 0x0, @void, 0x2a}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x1a}, {{0x0, 0x1}, @device_b, 0x7fff, @value=@broadcast, 0x27}, {{}, @device_b, 0x1, @void, 0x3b}, {{0x0, 0x1}, @broadcast, 0x301, @value, 0xa}, {{0x0, 0x1}, @device_a, 0x1000, @value=@broadcast, 0x30}, {{}, @device_a, 0x830, @void, 0x3c}, {{0x0, 0x1}, @device_a, 0x8000, @value=@broadcast, 0x39}]}}]}, @NL80211_ATTR_PROBE_RESP={0x663, 0x91, "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"}, @NL80211_ATTR_IE={0x4b, 0x2a, [@random={0x0, 0x5, "631a42a2ac"}, @peer_mgmt={0x75, 0x14, {0x1, 0x0, @void, @void, @val="dd2e0dc24454dd879fd45b56ac078ba4"}}, @gcr_ga={0xbd, 0x6}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0x53, 0x6, @device_b, 0x357, 0x1000, 0xffffffff}}, @channel_switch={0x25, 0x3, {0x0, 0x68}}, @challenge={0x10, 0x1, 0xca}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0xdc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x5e, 0x3, "b9824f738896e9d44e10297ec63140cb7308b5ab25b239dc5cae34c17439d6bb438cc1a5e7b4c7da8a225a7b927d37cd009954687f8a13a8d3c8a89f38fe2beedbbe6738a80e578ab9a1a44eeb051a4f11d021c305599bd17ff4"}, @NL80211_FTM_RESP_ATTR_LCI={0x7, 0x2, "555490"}, @NL80211_FTM_RESP_ATTR_LCI={0x70, 0x2, "df324c2e3bacf3041fd2f2b4b202dc6109c1143293dd329c0fb8a9c3119a73e770b330f99ca494308624d60b5197ec954b991ca8731a225412672326a41dd290d74df5503a34447657304b67076c93419d9d2efd44e781093f252df33d4e25e0e75d7fb89f62a50ea3e8a420"}]}, @NL80211_ATTR_BEACON_HEAD={0x576, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {}, @device_b, @device_a, @random="03e8684ac713", {0x8, 0x7f}, @value=@ver_80211n={0x0, 0x6, 0x2}}, 0xffff, @default, 0x240, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x84}, @val={0x4, 0x6, {0x8, 0x3, 0x101, 0x9}}, @val={0x6, 0x2, 0xfff8}, @void, @val={0x25, 0x3, {0x0, 0xb5, 0x1e}}, @val={0x2a, 0x1}, @val={0x3c, 0x4, {0x0, 0x5, 0x9, 0x7}}, @val={0x2d, 0x1a, {0x4000, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x800, 0xffffff13, 0x2}}, @void, @void, @void, [{0xdd, 0xe9, "d3b924a6422c05c9ab9ff3e82c381e106bbde7c5b20090f01f2d2b54a31b7db822b9bb0dbec06bf107c287562aedac0c366a6f2ec48cbd4cc123d7b6eaba31cd7acdc66a595f60b8528686c1b6e23baf71c6b3f7ca711c35ffb79ccbde2a9cd5ef8194ea704aaab7c8715e560be62389d9e35f62d5289bcc32321ec77978d26cd25dc1fd5b0fefd0e42814099566bc4100f0f88eea5a4d1f01ba8529090fab09abda786bc55491e1cfcc4ec64f42c4a64cb4456247f50730e684848d3037434ec06d5aa20db4516ecbf1ed3852d22a340b6899052afcd192456f8942e997a27c329edfd1bfd6718a95"}, {0xdd, 0xe1, "ec3f3125702e5e401b7bb5289b4bcbeac847c301a7339afb0d0523617aa36c22f45383a63f67eaabcb1937576097353e8148e1922b8d12f92cd627350ef2bd02a1996bb7ed662f123d0927735e9b0324f459ebf0f4b773ae54f17ffa9be704bf136973d1301fdb6953fe807814483b77cbf7cac163e9fa3dab8c82861cff7d2fa8c3f000e3f5b4b004e0ab7983ba5f2450ad222f7d492dbb66bd90e59346be7658758b5f355e990a6ba397642084466a7b5b20d95c177ee33d96205c886bfcdb4b78cbbc0457a13535495ad9e0b5efcb539c06bd2c81d031dcde2ad1c5e5477883"}, {0xdd, 0x22, "563b79f60947aea534c45dd62e63924fb8929d482d97c5afbbc144d779b96cc1b111"}, {0xdd, 0xf0, "ecde634e3921cc55155419693821eac8c24e92d960d362f518db427f8bd915a46d798a941151f06123449c2e7471237704c3d661aeb9eb2e21b07b1ca8bd5a3238e733ce53abb1058b5da7110eb0b914b4a297dc3fa136b66123eceedf0ccf0da4d1ae804d2827491d04468b55c61e9659c72b18073068afea08367f4aaeac3e3c7da2b34753214b257c12b99e03727070d1b23c0b108912fcb9599aec78f247240a52086bfda8318a43052cfbc9f369cc5be9eba645fd4db60a919f100e485559cc20142536db06e84ebb3d9842127fdf00234a3e0cfbb17626e0a08be4a55a77ab5c03e4adc0f156feb4a31838d406"}, {0xdd, 0xe4, "ce49cef33deba49340b12187a37bb7c66a41ea4ee724c3189b2a7c69e20ecead309c00710f1abba0ceae9b68e0cff335175eee039a38669cafd92de7caf5db447c8249a3c28b575004c77a9b1f48960946eaf0a283d19ee31afc7a7c31a4c37c5fd37798f037b0cdd56f4fcb34cadc3de2a729697d7a62cb1f88db19d430054c52ec701c7acdc344ae75009138ceb027c34d45b1b0917d33c49244db8365718c94714af5bab7dd6979e9b1407c98e32f4d3f3004e3fdedad100d9bcde3c61fa53a0d2a1011a45b742508641cf1e9446f32261d11f418786e7a9a4dbad5d8e0e8209154de"}, {0xdd, 0x94, "32b0f24947f22a5984dda9625da8d4a6a329ce464b63eb5c3fa3c15a06367cb533133c23a3789e5d381614b4494f5dc401aabf955e1ec4d74031661d35c7b2e0c7703d5fb1b23de7ae632067530e15d7e7229ee077470aa0b81b5ed671967b7fbdd729d0362e789b1009da58780655db10e3a110a833e4f852cb8ac2695cf09350f4bd8af7690f0712b681a0cdad45501a05f75a"}, {0xdd, 0xa7, "5db69eb60a1e8159bce256f99e7f864dbb9a5da3dcd13fbf69f1b91f987795fca411d57d3874d3610c99dc81ed77146a993fdf3f224f80175eee7729a3c6f41e2fbf6eee76e66607e9db8d1cdca871b5759ff36235742e16ebe6c9ec26fb76b8155c76628ecdfbfd4ef8b929468cf6527a943073b2a0041a09a2d1b365bab8c3dc958fed337459622d4090a2c08e6f6d3e65aaa06a8b907981e12fdc308c70d48848de5b110100"}]}}], @beacon_params=[@NL80211_ATTR_IE={0x52, 0x2a, [@perr={0x84, 0x2, {0x3}}, @mic={0x8c, 0x10, {0x6da, "31ec6f1b19ca", @short="06443beef267a49c"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @mic={0x8c, 0x18, {0x580, "eaab6293b5d9", @long="2e7a71266c0537bd38aeb6f2b0e768e6"}}, @dsss={0x3, 0x1, 0xac}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_IE={0x2d, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0x13, 0xe, 0x607}}, @prep={0x83, 0x1f, {{}, 0x7, 0x4, @device_b, 0x4, @void, 0xfde3, 0x2, @broadcast, 0x4}}]}, @NL80211_ATTR_BEACON_HEAD={0x1b3, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0xf}, @device_a, @device_b, @random="0e067a696d57", {0x1, 0x1}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x2, @random=0x1, 0x820, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @void, @val={0x6, 0x2, 0x81}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0xf3, 0x2c, 0x1}}, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0xf7, "b476758d7e227e0e221df328ad93db57634879fb2bddc8b0eba05c6fe8796bd922d9a9ece62058160900c5bf5008bda918a7458739d3d3ebfd5020d6a5cd958cba0ee111739c13751f4df539a7f30fcadbef9db87ed175bf2f7cabd9c139e41f4e672e23e99d79b4248558d74bea2bb8de825bee87fac971b5d94d1dab290302e8bcff9511606a6835bf6fabe213b9f442135b6d38b556e231e8a16b120d94787518348ba7be4e28caea84b5d0fbac2f49e900835b61184ba6581d5b229e5b2ad4e059ca2e06dba749e0921bd2b793108f6fd98b11bb1dfec968036972829345ec6a303e2d0379305a4bfa23a918d27665b205e67fc62b"}, {0xdd, 0x6a, "261bb167c20749c11664b0dcacd0835fcec55ef7208f85244afed55c7e90102378e18dbe4de4421b325ee790450ad309b5ca8d492cbbb8b48b0a1ed38f742fd434bb38c30f02e50699ac2bd69cf2b2c4e550f97bdd9264ea55ec7bcd75e10b82f8de5569f7397ffed948"}, {0xdd, 0x6, "4f68be9cb408"}]}}], @NL80211_ATTR_CSA_C_OFF_BEACON={0xe, 0xba, [0x9b, 0x0, 0x0, 0x401, 0x5]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x80]}]}]}, 0x192c}, 0x1, 0x0, 0x0, 0x4000}, 0x24050000) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xa, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x36, &(0x7f00000000c0)=""/54, 0x82000, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0x4, 0x9}, {0x0, 0x1, 0xb, 0x3}, {0x2, 0x1, 0x1}, {0x2, 0x1, 0x10, 0xd}, {0x0, 0x1, 0x10, 0x6}, {0x0, 0x4, 0xe, 0x5}, {0x1, 0x3, 0x2, 0x1}, {0x1, 0x5, 0x7, 0x11}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000480)={r11, 0x0, 0xcb, 0x0, &(0x7f00000002c0)="4c6f078ed59c129b2072d80d080d1eca2f0c6367a62783b6920195e1a039b99e13c244c0b92b191da621671008e44b3cbb9d1d5bdccf08dcb9e5e2268e8e94fa9644b08936dc768c414183124dec13ab74099548aff4a0f3cf9762144979930bb0fd68fc8d388bd2ceb0a49c185c399b4aab616751726f82b5363075da29c625e97040bde147f67ecabd4feb953dcd547cbd149ed8ea285a523b826f04ee562c28d81cdcc50d722c363a96857cc54807b44c5c230ea4e51585d99c54c6eecee65d98fb2b7ec238d92a4692", 0x0, 0x1, 0x0, 0x83, 0x0, &(0x7f00000003c0)="925e644e6ce2f5e929d23e59ef80e1e8b4c6a8c83e3d2b6be971ea91c135f7b678f908d084a54b1b1e5838130ef37aea594b247db877c2936f6100a9bc1c544440b41ebb5a7e3d7d8304ab81f9f4000954b4345a439377a4af365758805f8a4ec5f66c1a66075ae554fd87d2b94e29da431b6c871d392694c2b6f3fcffcd3e0205685c", 0x0, 0x2, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo_reply={0x0, 0x0, 0x0, 0x67, 0x18}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.0003979s ago: executing program 3 (id=2048): ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) socket(0x1e, 0x4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) socket(0x1e, 0x4, 0x0) socket(0x2, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000001800dd8d00000000000000000200000400000006"], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x20, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0) 998.018122ms ago: executing program 4 (id=1840): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000300)={'pim6reg\x00'}) 530.204237ms ago: executing program 1 (id=2049): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfe) 527.111309ms ago: executing program 3 (id=2050): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000711227000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 341.850812ms ago: executing program 1 (id=2051): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'xfrm0\x00', 0x0}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) recvfrom$rxrpc(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r7 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="a5bfa888000000001c00128009000100766c616e000000000c000280060001000005000000000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 291.224977ms ago: executing program 3 (id=2052): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="c0000000190001000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000080000000000000000000000000008001f0003"], 0xc0}}, 0x0) 126.146876ms ago: executing program 3 (id=2053): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xf068, 0x2, 0x4, 0x80000001, 0x7ff, 0x30, 0x8f, 0x7, r2}, &(0x7f00000000c0)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x9, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0x817602958ebaf3cf, 0x0, 0xffffffffffffffff, 0xfffffc64, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 40.588986ms ago: executing program 2 (id=2054): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (fail_nth: 13) 0s ago: executing program 3 (id=2055): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x48005) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x9, 0x810, r0, 0xfa8dc000) kernel console output (not intermixed with test programs): 463.773109][T10933] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1529'. [ 463.911064][T10938] netlink: 'syz.3.1531': attribute type 4 has an invalid length. [ 463.984960][T10937] netlink: 'syz.3.1531': attribute type 11 has an invalid length. [ 463.993979][T10937] netlink: 'syz.3.1531': attribute type 5 has an invalid length. [ 464.002250][ T5239] Bluetooth: hci1: command tx timeout [ 464.189962][T10947] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1533'. [ 464.190413][T10952] netlink: 232 bytes leftover after parsing attributes in process `syz.3.1536'. [ 464.201761][T10948] netlink: 'syz.2.1534': attribute type 10 has an invalid length. [ 464.235499][T10948] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 464.291525][T10768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 464.326909][T10768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 464.341946][T10768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 464.389506][T10768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 464.586429][T10768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.607059][T10768] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.634955][T10964] bridge_slave_0: left allmulticast mode [ 464.650631][T10964] bridge_slave_0: left promiscuous mode [ 464.656623][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.672830][T10964] bridge_slave_1: left allmulticast mode [ 464.678981][T10964] bridge_slave_1: left promiscuous mode [ 464.684727][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.698929][T10964] bond0: (slave bond_slave_0): Releasing backup interface [ 464.712383][T10964] bond0: (slave bond_slave_1): Releasing backup interface [ 464.741667][T10964] team0: Port device team_slave_0 removed [ 464.754345][T10964] team0: Port device team_slave_1 removed [ 464.761216][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.769198][T10964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.777598][T10964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.786180][T10964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.806861][T10964] team0: Port device macvlan1 removed [ 464.815097][T10964] bond0: (slave netdevsim0): Releasing backup interface [ 464.851965][T10963] netlink: 'syz.1.1541': attribute type 10 has an invalid length. [ 464.866784][T10963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.875944][T10963] team0: Port device bond0 added [ 464.920331][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.927551][ T8490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.966491][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.968937][T10969] __nla_validate_parse: 1 callbacks suppressed [ 464.968959][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1542'. [ 464.973691][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.199194][T10977] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 465.433603][T10768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.520864][T10768] veth0_vlan: entered promiscuous mode [ 465.553106][T10768] veth1_vlan: entered promiscuous mode [ 465.633254][T11001] bond0: (slave bridge0): Releasing backup interface [ 465.662930][T11001] bond0: (slave G): Releasing backup interface [ 465.715760][T10768] veth0_macvtap: entered promiscuous mode [ 465.733193][T10997] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1550'. [ 465.739881][T11001] sctp: [Deprecated]: syz.2.1550 (pid 11001) Use of struct sctp_assoc_value in delayed_ack socket option. [ 465.739881][T11001] Use struct sctp_sack_info instead [ 465.758753][T10768] veth1_macvtap: entered promiscuous mode [ 465.795470][T10768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.835283][T10768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.857178][T10768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.877202][T10768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.900471][T10768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.917779][T10768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.061035][ T8492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.078159][ T5247] Bluetooth: hci1: command tx timeout [ 466.094239][ T8492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.232602][ T2553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.247579][ T2553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.767418][T11058] sctp: [Deprecated]: syz.4.1567 (pid 11058) Use of int in maxseg socket option. [ 466.767418][T11058] Use struct sctp_assoc_value instead [ 467.073067][T11070] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1572'. [ 467.095701][T11070] netlink: 'syz.4.1572': attribute type 10 has an invalid length. [ 467.116103][T11070] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1572'. [ 467.263666][T11089] bond0: (slave team0): Releasing backup interface [ 467.325900][T11089] bond0: (slave bond_slave_0): Releasing backup interface [ 467.389244][T11089] bond0: (slave bond_slave_1): Releasing backup interface [ 467.462970][T11089] team0: Port device team_slave_0 removed [ 467.532364][T11089] team0: Port device team_slave_1 removed [ 467.616168][ T8489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.000448][ T54] Bluetooth: hci3: command 0x0406 tx timeout [ 468.002173][ T5247] Bluetooth: hci2: command 0x0406 tx timeout [ 468.355433][ T8489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.599194][T11100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1581'. [ 468.610408][T11105] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 468.758970][T11116] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 468.920177][ T8489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.995579][T11106] vlan1: entered allmulticast mode [ 469.014902][T11106] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 469.059828][T11106] mac80211_hwsim hwsim32 wlan1: left allmulticast mode [ 469.072234][ T5245] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.081995][ T5245] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.091855][ T5245] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.101300][ T5245] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.111221][ T5245] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 469.119039][ T5245] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 469.314849][ T8489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.334308][T11146] netlink: 'syz.1.1590': attribute type 4 has an invalid length. [ 469.344638][T11146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 469.362416][T11146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 469.582027][T11138] lo speed is unknown, defaulting to 1000 [ 469.602334][ T8489] bridge_slave_1: left allmulticast mode [ 469.610363][ T8489] bridge_slave_1: left promiscuous mode [ 469.616163][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.639417][ T8489] bridge_slave_0: left allmulticast mode [ 469.645146][ T8489] bridge_slave_0: left promiscuous mode [ 469.658028][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.736820][T11174] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1596'. [ 470.133322][ T8489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.147285][ T8489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.162575][ T8489] bond0 (unregistering): Released all slaves [ 470.178214][T11168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1597'. [ 470.188177][T11184] netlink: 'syz.4.1601': attribute type 1 has an invalid length. [ 470.439133][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1603'. [ 470.514040][T11196] tun0: tun_chr_ioctl cmd 1074025677 [ 470.520687][T11196] tun0: linktype set to 823 [ 470.604327][T11205] netlink: 264 bytes leftover after parsing attributes in process `syz.1.1607'. [ 470.637609][ T46] IPVS: starting estimator thread 0... [ 470.692593][ T8489] hsr_slave_0: left promiscuous mode [ 470.729736][ T8489] hsr_slave_1: left promiscuous mode [ 470.737924][T11209] IPVS: using max 24 ests per chain, 57600 per kthread [ 470.744974][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.768636][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.780153][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.800158][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.835769][ T8489] veth1_macvtap: left promiscuous mode [ 470.842316][ T8489] veth0_macvtap: left promiscuous mode [ 470.848874][ T8489] veth1_vlan: left promiscuous mode [ 470.865746][ T8489] veth0_vlan: left promiscuous mode [ 471.198637][ T5245] Bluetooth: hci1: command tx timeout [ 471.400681][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 471.446956][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 472.193956][T11138] chnl_net:caif_netlink_parms(): no params data found [ 472.273107][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 472.312374][T11246] macvlan0: entered allmulticast mode [ 472.335856][T11246] veth1_vlan: entered allmulticast mode [ 472.545112][T11259] netlink: 'syz.2.1623': attribute type 12 has an invalid length. [ 472.553504][T11266] pim6reg: left allmulticast mode [ 472.610939][T11138] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.628686][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.646419][T11138] bridge_slave_0: entered allmulticast mode [ 472.657566][T11138] bridge_slave_0: entered promiscuous mode [ 472.694914][T11138] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.714593][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.725140][T11138] bridge_slave_1: entered allmulticast mode [ 472.733462][T11279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1627'. [ 472.744205][T11138] bridge_slave_1: entered promiscuous mode [ 472.856646][T11138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.882128][T11138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.021321][T11138] team0: Port device team_slave_0 added [ 473.033847][T11293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.059285][T11138] team0: Port device team_slave_1 added [ 473.215128][T11138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.233558][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.268716][T11138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.278112][ T5245] Bluetooth: hci1: command tx timeout [ 475.074080][T11138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.081758][T11138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.109141][T11138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.222805][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1643'. [ 475.264362][T11138] hsr_slave_0: entered promiscuous mode [ 475.286182][T11138] hsr_slave_1: entered promiscuous mode [ 475.294138][T11138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.301977][T11138] Cannot create hsr debugfs directory [ 475.325105][T11329] macsec1: entered promiscuous mode [ 475.338516][T11329] batadv0: entered promiscuous mode [ 475.344615][T11329] macsec1: entered allmulticast mode [ 475.354614][T11329] batadv0: entered allmulticast mode [ 475.361213][ T5245] Bluetooth: hci1: command tx timeout [ 475.394872][T11331] team0: Port device bond0 removed [ 475.488812][T11339] vlan1: entered promiscuous mode [ 475.594322][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1649'. [ 475.596073][T11351] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1650'. [ 475.609846][T11350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1648'. [ 475.760251][T11361] macvlan3: entered allmulticast mode [ 475.782196][T11361] team0: Device macvlan3 is of different type [ 475.863616][T11363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1652'. [ 475.878252][T11365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1648'. [ 476.104866][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 476.131418][T11385] lo: Caught tx_queue_len zero misconfig [ 476.166343][T11385] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1655'. [ 476.421287][T11138] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 476.437150][T11138] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 476.460752][T11138] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 476.491236][T11138] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 476.650329][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 476.653042][T11138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.672804][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 476.705603][T11138] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.730258][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.737488][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.753258][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.760617][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 476.814806][T11421] ip6tnl0: Caught tx_queue_len zero misconfig [ 476.936490][T11422] xt_l2tp: v2 doesn't support IP mode [ 477.088948][T11432] netlink: 'syz.2.1669': attribute type 12 has an invalid length. [ 477.236544][T11138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.294825][T11138] veth0_vlan: entered promiscuous mode [ 477.327469][T11138] veth1_vlan: entered promiscuous mode [ 477.392817][T11138] veth0_macvtap: entered promiscuous mode [ 477.432310][T11138] veth1_macvtap: entered promiscuous mode [ 477.437997][ T5245] Bluetooth: hci1: command tx timeout [ 477.492920][T11138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.544640][T11138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.567198][T11138] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.602126][T11138] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.625360][T11138] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.650712][T11138] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.791680][ T2553] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.807562][ T2553] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.860463][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.872972][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.071785][T11448] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 478.283655][T11478] pimreg3: entered allmulticast mode [ 478.410860][T11478] pimreg3: left allmulticast mode [ 478.607461][T11498] netlink: 'syz.3.1693': attribute type 6 has an invalid length. [ 478.834843][T11517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.835742][T11514] lo speed is unknown, defaulting to 1000 [ 478.981577][T11514] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 479.278468][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 479.288574][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.300862][ T961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.325766][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.561839][ T961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.619968][T11547] netlink: 'syz.3.1705': attribute type 1 has an invalid length. [ 480.636151][T11547] __nla_validate_parse: 7 callbacks suppressed [ 480.636173][T11547] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1705'. [ 480.670727][T11541] vlan1: entered promiscuous mode [ 480.677251][T11540] vlan1: left promiscuous mode [ 480.729596][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.744127][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.761866][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.773948][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.785389][ T961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.801863][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 480.814527][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.964556][ T961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.994302][T11552] lo speed is unknown, defaulting to 1000 [ 481.055457][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.157011][T11562] veth0_to_team: entered promiscuous mode [ 481.166647][T11562] veth0_to_team: entered allmulticast mode [ 481.295265][T11552] chnl_net:caif_netlink_parms(): no params data found [ 481.391362][ T9320] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.407839][ T961] bridge_slave_1: left allmulticast mode [ 481.413849][ T961] bridge_slave_1: left promiscuous mode [ 481.419714][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.442398][ T961] bridge_slave_0: left allmulticast mode [ 481.448349][ T961] bridge_slave_0: left promiscuous mode [ 481.454248][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.520731][T11597] netlink: 'syz.2.1716': attribute type 9 has an invalid length. [ 481.557781][T11597] netlink: 'syz.2.1716': attribute type 6 has an invalid length. [ 481.912423][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 481.924974][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 481.941128][ T961] bond0 (unregistering): Released all slaves [ 482.147355][T11552] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.155472][T11552] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.169617][T11552] bridge_slave_0: entered allmulticast mode [ 482.184560][T11552] bridge_slave_0: entered promiscuous mode [ 482.186695][T11609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1719'. [ 482.196060][T11552] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.227565][T11552] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.239841][T11552] bridge_slave_1: entered allmulticast mode [ 482.253126][T11552] bridge_slave_1: entered promiscuous mode [ 482.266172][T11619] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 482.410466][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.443638][T11552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.471996][T11552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.515457][T11626] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1724'. [ 482.731846][T11552] team0: Port device team_slave_0 added [ 482.741851][T11552] team0: Port device team_slave_1 added [ 482.763788][ T961] hsr_slave_0: left promiscuous mode [ 482.771345][ T961] hsr_slave_1: left promiscuous mode [ 482.784600][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.794451][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.809999][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 482.817559][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.848063][ T961] veth1_macvtap: left promiscuous mode [ 482.853667][ T961] veth0_macvtap: left promiscuous mode [ 482.859762][ T961] veth1_vlan: left promiscuous mode [ 482.865119][ T961] veth0_vlan: left promiscuous mode [ 482.878828][ T5245] Bluetooth: hci1: command tx timeout [ 483.380626][ T961] team0 (unregistering): Port device team_slave_1 removed [ 483.443226][ T961] team0 (unregistering): Port device team_slave_0 removed [ 483.450969][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.895008][T11637] netlink: 'syz.4.1726': attribute type 1 has an invalid length. [ 483.903598][T11637] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 483.924840][T11631] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 483.935367][T11643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1727'. [ 484.079757][ T9308] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.196682][T11552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.217142][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.282148][T11552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.319656][T11552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.326660][T11552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.384623][T11552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.496720][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.562425][T11552] hsr_slave_0: entered promiscuous mode [ 484.575892][T11681] netlink: 'syz.4.1740': attribute type 11 has an invalid length. [ 484.698598][T11552] hsr_slave_1: entered promiscuous mode [ 484.711739][T11552] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 484.723475][T11552] Cannot create hsr debugfs directory [ 484.734843][T11673] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1738'. [ 484.861666][T11687] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1741'. [ 484.958224][ T5245] Bluetooth: hci1: command tx timeout [ 485.165988][T11706] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1745'. [ 485.377519][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.415314][T11711] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 485.433502][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.465944][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.480178][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.488973][T11723] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.520367][ T9321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.531157][T11724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.540724][T11728] macsec1: entered promiscuous mode [ 485.545971][T11728] macvlan1: entered promiscuous mode [ 485.560391][T11728] macsec1: entered allmulticast mode [ 485.598170][T11728] macvlan1: entered allmulticast mode [ 485.625192][T11728] veth1_vlan: entered allmulticast mode [ 485.670568][T11728] macvlan1: left allmulticast mode [ 485.675975][T11728] veth1_vlan: left allmulticast mode [ 485.691434][T11728] macvlan1: left promiscuous mode [ 485.746649][T11729] netlink: 'syz.4.1751': attribute type 29 has an invalid length. [ 485.935882][T11742] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1756'. [ 485.963101][T11738] team0: Port device wg2 added [ 485.988644][T11737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1754'. [ 486.335679][T11737] lo speed is unknown, defaulting to 1000 [ 486.452817][T11764] netlink: 'syz.3.1763': attribute type 1 has an invalid length. [ 486.482869][T11764] netlink: 'syz.3.1763': attribute type 2 has an invalid length. [ 486.558276][T11759] lo speed is unknown, defaulting to 1000 [ 486.752626][T11552] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.796009][T11552] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.920364][T11552] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.948837][T11552] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 487.038053][ T5245] Bluetooth: hci1: command tx timeout [ 487.332546][T11552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.356348][T11552] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.444951][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.452309][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.475094][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.482313][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.569588][T11806] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1773'. [ 487.669292][T11810] netlink: 'syz.1.1775': attribute type 1 has an invalid length. [ 487.883635][T11552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.960158][T11552] veth0_vlan: entered promiscuous mode [ 487.970021][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1778'. [ 487.986566][T11825] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1778'. [ 488.026955][T11552] veth1_vlan: entered promiscuous mode [ 488.051000][T11552] veth0_macvtap: entered promiscuous mode [ 488.105869][T11552] veth1_macvtap: entered promiscuous mode [ 488.115505][T11830] lo speed is unknown, defaulting to 1000 [ 488.128064][T11825] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1778'. [ 488.140105][T11552] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 488.150674][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1779'. [ 488.156536][T11552] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 488.172517][T11552] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.182908][T11552] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.191774][T11552] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.200868][T11552] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.372975][T11837] netlink: 'syz.1.1781': attribute type 50 has an invalid length. [ 488.411963][ T8484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.421484][ T8484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.494131][ T8492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.511621][ T8492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.671681][T11842] ieee802154 phy0 wpan0: encryption failed: -90 [ 489.088639][T11858] net_ratelimit: 14 callbacks suppressed [ 489.088662][T11858] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 489.163561][T11862] team0: Port device wg2 added [ 489.286830][T11873] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1791'. [ 489.991800][ T8489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.367552][ T8489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.514158][ T8489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.666404][ T8489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.680415][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.697460][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.713658][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.761242][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.773195][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 491.788266][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.927165][T11922] lo speed is unknown, defaulting to 1000 [ 492.054833][ T8489] bridge_slave_1: left allmulticast mode [ 492.075438][ T8489] bridge_slave_1: left promiscuous mode [ 492.101906][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.152574][ T8489] bridge_slave_0: left allmulticast mode [ 492.167095][ T8489] bridge_slave_0: left promiscuous mode [ 492.176505][T11934] netlink: 'syz.3.1804': attribute type 30 has an invalid length. [ 492.184868][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.301781][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 492.312187][T11940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1807'. [ 493.498743][ T8489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 493.513502][ T8489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 493.526123][ T8489] bond0 (unregistering): Released all slaves [ 493.605123][ T5239] Bluetooth: hci4: command 0x0405 tx timeout [ 493.651148][T11961] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 493.685488][T11961] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1812'. [ 493.722810][T11922] chnl_net:caif_netlink_parms(): no params data found [ 493.899719][T11965] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1814'. [ 493.919963][ T5245] Bluetooth: hci1: command tx timeout [ 493.928597][T11973] can: request_module (can-proto-5) failed. [ 493.949005][T11979] netlink: 'syz.2.1818': attribute type 10 has an invalid length. [ 494.014999][T11965] xt_NFQUEUE: number of total queues is 0 [ 494.033214][T11979] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 494.232656][T11988] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1819'. [ 494.400832][ T8489] hsr_slave_0: left promiscuous mode [ 494.407143][ T8489] hsr_slave_1: left promiscuous mode [ 494.415082][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.448150][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.459161][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.466600][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.511505][ T8489] veth1_macvtap: left promiscuous mode [ 494.517105][ T8489] veth0_macvtap: left promiscuous mode [ 494.523368][ T8489] veth1_vlan: left promiscuous mode [ 494.535830][ T8489] veth0_vlan: left promiscuous mode [ 495.112620][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 495.155045][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 495.551813][T11922] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.559504][T11922] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.566766][T11922] bridge_slave_0: entered allmulticast mode [ 495.578267][T11922] bridge_slave_0: entered promiscuous mode [ 495.597069][T11922] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.604602][T11922] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.611938][T11922] bridge_slave_1: entered allmulticast mode [ 495.621516][T11922] bridge_slave_1: entered promiscuous mode [ 495.636516][T12034] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 495.648090][T12030] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1829'. [ 495.663569][T12033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 495.753109][T11922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.777600][T11922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.821954][T12037] wireguard1: entered promiscuous mode [ 495.828104][T12037] wireguard1: entered allmulticast mode [ 495.867342][T12042] wireguard2: entered promiscuous mode [ 495.873715][T12042] wireguard2: entered allmulticast mode [ 495.922621][T11922] team0: Port device team_slave_0 added [ 495.934155][T11922] team0: Port device team_slave_1 added [ 495.975922][T11922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.983397][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.014242][ T5245] Bluetooth: hci1: command tx timeout [ 496.020746][T11922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.034164][T11922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.041999][T11922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.068671][T11922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.184393][T11922] hsr_slave_0: entered promiscuous mode [ 496.195265][T11922] hsr_slave_1: entered promiscuous mode [ 496.209881][T11922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.224376][T11922] Cannot create hsr debugfs directory [ 496.275859][T12058] netlink: 'syz.3.1836': attribute type 6 has an invalid length. [ 496.802449][T11922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 496.813239][T11922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 496.823384][T11922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 496.834782][T11922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 496.874384][ T2553] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.983948][ T2553] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.063157][ T2553] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.153224][ T2553] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.206977][T11922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.250103][ T5239] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 497.259860][T11922] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.268758][ T5239] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 497.278819][ T5239] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 497.291018][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.298195][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.309404][ T5239] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 497.320801][ T5239] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 497.331831][ T5239] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 497.365271][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.372506][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.479613][T12071] lo speed is unknown, defaulting to 1000 [ 497.879086][ T2553] bond0 (unregistering): Released all slaves [ 497.937094][T11922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 497.975576][ T2553] tipc: Disabling bearer [ 497.986893][ T2553] tipc: Left network mode [ 498.097929][ T5245] Bluetooth: hci1: command tx timeout [ 498.245062][T12071] chnl_net:caif_netlink_parms(): no params data found [ 498.424735][ T2553] hsr_slave_0: left promiscuous mode [ 498.434862][ T2553] hsr_slave_1: left promiscuous mode [ 498.470531][ T2553] veth1_macvtap: left promiscuous mode [ 498.476540][ T2553] veth0_macvtap: left promiscuous mode [ 498.483173][ T2553] veth1_vlan: left promiscuous mode [ 498.490437][ T2553] veth0_vlan: left promiscuous mode [ 499.162677][ T2553] team0 (unregistering): Port device wg2 removed [ 499.371229][ T5245] Bluetooth: hci4: command tx timeout [ 499.473697][T12098] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1846'. [ 499.492010][ T5315] lo speed is unknown, defaulting to 1000 [ 499.492911][T12103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1847'. [ 499.658902][T11922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 499.676201][T12071] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.693754][T12071] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.719380][T12071] bridge_slave_0: entered allmulticast mode [ 499.727120][T12071] bridge_slave_0: entered promiscuous mode [ 499.742738][T12071] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.754162][T12071] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.762485][T12071] bridge_slave_1: entered allmulticast mode [ 499.770576][T12071] bridge_slave_1: entered promiscuous mode [ 499.951047][T12071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.973590][T12071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.006940][T11922] veth0_vlan: entered promiscuous mode [ 500.125832][T12071] team0: Port device team_slave_0 added [ 500.150779][T12071] team0: Port device team_slave_1 added [ 500.168759][ T5245] Bluetooth: hci1: command tx timeout [ 500.184482][T11922] veth1_vlan: entered promiscuous mode [ 500.224568][T12071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.232620][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.262543][T12071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.276024][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1853'. [ 500.286161][T12126] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1852'. [ 500.307654][T12071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.314833][T12071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.351640][T12071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.429373][T12132] vlan2: entered promiscuous mode [ 500.504135][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.524961][T12071] hsr_slave_0: entered promiscuous mode [ 500.549356][T12071] hsr_slave_1: entered promiscuous mode [ 500.576792][T11922] veth0_macvtap: entered promiscuous mode [ 500.616929][T11922] veth1_macvtap: entered promiscuous mode [ 500.709046][T11922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 500.746171][T11922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 500.779688][T11922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.789037][T11922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.798576][T11922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.807286][T11922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 500.891018][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.907873][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.954568][ T8489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.965813][ T8489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.112296][T12149] xt_CT: You must specify a L4 protocol and not use inversions on it [ 501.262652][T12071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.283592][T12071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.313287][T12154] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1864'. [ 501.324567][T12154] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1864'. [ 501.333942][T12071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.344509][T12071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.376275][T12154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1864'. [ 501.437968][ T5245] Bluetooth: hci4: command tx timeout [ 501.540063][T12071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.570181][T12071] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.599407][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.606741][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.633626][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.640846][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.715814][T12071] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 501.758585][T12071] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 501.771122][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.861704][ T8489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.003656][ T8489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.091210][ T8489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.197290][ T8489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.224054][T12071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.417104][ T8489] bridge_slave_1: left allmulticast mode [ 502.422956][ T8489] bridge_slave_1: left promiscuous mode [ 502.429086][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.439041][ T8489] bridge_slave_0: left allmulticast mode [ 502.444715][ T8489] bridge_slave_0: left promiscuous mode [ 502.450825][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.790068][ T8489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.804856][ T8489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.815792][ T8489] bond0 (unregistering): Released all slaves [ 502.853765][T12071] veth0_vlan: entered promiscuous mode [ 502.871029][T12071] veth1_vlan: entered promiscuous mode [ 502.912147][T12071] veth0_macvtap: entered promiscuous mode [ 502.923220][T12071] veth1_macvtap: entered promiscuous mode [ 502.954965][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.966436][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.980788][T12071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.017643][T12071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.028762][T12071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.040948][T12071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.052020][T12071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.061188][T12071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.070291][T12071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.079310][T12071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.194102][ T8489] hsr_slave_0: left promiscuous mode [ 503.202243][ T8489] hsr_slave_1: left promiscuous mode [ 503.209062][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.216485][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.224517][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.232174][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.255010][ T8489] veth1_macvtap: left promiscuous mode [ 503.262227][ T8489] veth0_macvtap: left promiscuous mode [ 503.268192][ T8489] veth1_vlan: left promiscuous mode [ 503.273491][ T8489] veth0_vlan: left promiscuous mode [ 503.378215][T12179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1868'. [ 503.518155][ T5245] Bluetooth: hci4: command tx timeout [ 503.635100][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 503.645273][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 503.654294][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 503.666060][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 503.681896][ T5239] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 503.696115][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.015476][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 504.062345][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 504.499346][ T8492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.513818][T12188] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 504.525904][ T8492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.549370][T12188] team0: Device dummy0 is of different type [ 504.705836][ T2553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.733321][ T2553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.920483][ T5239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 504.955862][ T5239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 504.966691][ T5239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 504.983202][ T5239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 504.988554][T12185] chnl_net:caif_netlink_parms(): no params data found [ 504.991788][ T5239] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 505.005266][ T5239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 505.355749][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.382915][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.405841][T12185] bridge_slave_0: entered allmulticast mode [ 505.425399][T12185] bridge_slave_0: entered promiscuous mode [ 505.468704][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.476079][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.491369][T12185] bridge_slave_1: entered allmulticast mode [ 505.529147][T12185] bridge_slave_1: entered promiscuous mode [ 505.556289][T12217] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1879'. [ 505.605308][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1879'. [ 505.614967][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1879'. [ 505.714979][T12221] batadv1: entered promiscuous mode [ 505.761351][T12221] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 505.768621][ T5239] Bluetooth: hci1: command tx timeout [ 505.838628][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.877896][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.989165][T12230] sctp: [Deprecated]: syz.3.1882 (pid 12230) Use of int in max_burst socket option deprecated. [ 505.989165][T12230] Use struct sctp_assoc_value instead [ 506.028316][T12185] team0: Port device team_slave_0 added [ 506.038111][T12231] sctp: [Deprecated]: syz.3.1882 (pid 12231) Use of int in max_burst socket option deprecated. [ 506.038111][T12231] Use struct sctp_assoc_value instead [ 506.041290][T12198] chnl_net:caif_netlink_parms(): no params data found [ 506.125686][T12185] team0: Port device team_slave_1 added [ 506.216084][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.229808][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.257542][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.289032][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.296040][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.323416][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.415086][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 506.424976][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 506.433552][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 506.448996][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 506.465423][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 506.475473][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 506.535067][ T8489] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.585466][T12185] hsr_slave_0: entered promiscuous mode [ 506.592659][T12185] hsr_slave_1: entered promiscuous mode [ 506.605583][T12185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.613592][T12185] Cannot create hsr debugfs directory [ 506.651768][ T8489] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.747218][ T8489] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.774127][T12198] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.782340][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.790166][T12198] bridge_slave_0: entered allmulticast mode [ 506.797055][T12198] bridge_slave_0: entered promiscuous mode [ 506.817520][T12256] tipc: Started in network mode [ 506.826083][T12256] tipc: Node identity 028085d6cd9e, cluster identity 4711 [ 506.835156][T12256] tipc: Enabled bearer , priority 0 [ 506.864757][ T8489] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.882092][T12198] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.895570][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.903020][T12198] bridge_slave_1: entered allmulticast mode [ 506.918801][T12198] bridge_slave_1: entered promiscuous mode [ 506.971850][T12254] tipc: Resetting bearer [ 507.062844][T12198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.087647][T12198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.117919][ T5239] Bluetooth: hci5: command tx timeout [ 507.186347][T12198] team0: Port device team_slave_0 added [ 507.196767][ T8489] bridge_slave_1: left allmulticast mode [ 507.202951][ T8489] bridge_slave_1: left promiscuous mode [ 507.208857][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.218491][ T8489] bridge_slave_0: left allmulticast mode [ 507.224216][ T8489] bridge_slave_0: left promiscuous mode [ 507.230687][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.627317][ T8489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.644244][ T8489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.655081][ T8489] bond0 (unregistering): Released all slaves [ 507.670768][T12198] team0: Port device team_slave_1 added [ 507.691689][T12253] tipc: Resetting bearer [ 507.834166][ T9321] tipc: Node number set to 3474884054 [ 507.838994][ T5239] Bluetooth: hci1: command tx timeout [ 508.563924][ T5239] Bluetooth: hci4: command tx timeout [ 509.198018][ T5239] Bluetooth: hci5: command tx timeout [ 509.556105][T12253] tipc: Disabling bearer [ 509.878478][T12198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.896811][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.934210][ T5239] Bluetooth: hci1: command tx timeout [ 509.943959][T12198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 510.030606][T12198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 510.040439][T12198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 510.066949][T12198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.208155][ T8489] hsr_slave_0: left promiscuous mode [ 510.226773][ T8489] hsr_slave_1: left promiscuous mode [ 510.249396][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.256879][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.292537][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.301404][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.337118][ T8489] veth1_macvtap: left promiscuous mode [ 510.347562][ T8489] veth0_macvtap: left promiscuous mode [ 510.353552][ T8489] veth1_vlan: left promiscuous mode [ 510.359486][ T8489] veth0_vlan: left promiscuous mode [ 510.638071][ T5239] Bluetooth: hci4: command tx timeout [ 511.055757][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 511.104933][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 511.277983][ T5239] Bluetooth: hci5: command tx timeout [ 511.319249][T12308] FAULT_INJECTION: forcing a failure. [ 511.319249][T12308] name failslab, interval 1, probability 0, space 0, times 0 [ 511.332637][T12308] CPU: 0 UID: 0 PID: 12308 Comm: syz.3.1903 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 511.343442][T12308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 511.353515][T12308] Call Trace: [ 511.356824][T12308] [ 511.359799][T12308] dump_stack_lvl+0x241/0x360 [ 511.364540][T12308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.369789][T12308] ? __pfx__printk+0x10/0x10 [ 511.374439][T12308] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 511.380021][T12308] ? __pfx___might_resched+0x10/0x10 [ 511.385344][T12308] should_fail_ex+0x3b0/0x4e0 [ 511.390051][T12308] ? vm_area_dup+0x27/0x290 [ 511.394583][T12308] should_failslab+0xac/0x100 [ 511.399284][T12308] ? vm_area_dup+0x27/0x290 [ 511.403813][T12308] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 511.409220][T12308] vm_area_dup+0x27/0x290 [ 511.413575][T12308] __split_vma+0x1cb/0xc50 [ 511.418036][T12308] ? __pfx___split_vma+0x10/0x10 [ 511.423001][T12308] ? mas_find+0x950/0xbb0 [ 511.427361][T12308] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 511.432849][T12308] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 511.438776][T12308] ? mas_find+0x8c0/0xbb0 [ 511.443148][T12308] mmap_region+0x817/0x2990 [ 511.447705][T12308] ? __pfx_validate_chain+0x10/0x10 [ 511.453101][T12308] ? mark_lock+0x9a/0x360 [ 511.457465][T12308] ? __pfx_mmap_region+0x10/0x10 [ 511.462466][T12308] ? __pfx_lock_acquire+0x10/0x10 [ 511.467537][T12308] ? mm_get_unmapped_area+0xa8/0xd0 [ 511.472758][T12308] ? bpf_lsm_mmap_addr+0x9/0x10 [ 511.477711][T12308] ? security_mmap_addr+0x6f/0x250 [ 511.482857][T12308] ? __get_unmapped_area+0x2ed/0x350 [ 511.488178][T12308] do_mmap+0x8f0/0x1000 [ 511.492561][T12308] ? __pfx_do_mmap+0x10/0x10 [ 511.497164][T12308] ? __pfx_down_write_killable+0x10/0x10 [ 511.502831][T12308] ? apparmor_mmap_file+0xc3/0xe0 [ 511.507894][T12308] vm_mmap_pgoff+0x1dd/0x3d0 [ 511.512516][T12308] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 511.517647][T12308] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 511.524012][T12308] ? do_syscall_64+0x100/0x230 [ 511.528799][T12308] ? ksys_mmap_pgoff+0xdf/0x720 [ 511.533691][T12308] ? __x64_sys_mmap+0x7f/0x140 [ 511.538473][T12308] do_syscall_64+0xf3/0x230 [ 511.543002][T12308] ? clear_bhb_loop+0x35/0x90 [ 511.547697][T12308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.553614][T12308] RIP: 0033:0x7f1890f7dff9 [ 511.558053][T12308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.577696][T12308] RSP: 002b:00007f1890df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 511.586147][T12308] RAX: ffffffffffffffda RBX: 00007f1891135f80 RCX: 00007f1890f7dff9 [ 511.594133][T12308] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 511.602126][T12308] RBP: 00007f1890df9090 R08: ffffffffffffffff R09: 0000000000000000 [ 511.610221][T12308] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 511.618393][T12308] R13: 0000000000000000 R14: 00007f1891135f80 R15: 00007ffd2b71ac28 [ 511.626393][T12308] [ 511.951736][T12244] chnl_net:caif_netlink_parms(): no params data found [ 512.000569][ T5239] Bluetooth: hci1: command tx timeout [ 512.061222][T12198] hsr_slave_0: entered promiscuous mode [ 512.079112][T12198] hsr_slave_1: entered promiscuous mode [ 512.208997][T12315] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 512.718800][ T5245] Bluetooth: hci4: command tx timeout [ 512.744533][T12244] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.752772][T12244] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.760313][T12244] bridge_slave_0: entered allmulticast mode [ 512.767601][T12244] bridge_slave_0: entered promiscuous mode [ 512.775391][T12185] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 512.799018][T12185] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 512.877159][T12244] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.885232][T12244] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.893377][T12244] bridge_slave_1: entered allmulticast mode [ 512.904359][T12244] bridge_slave_1: entered promiscuous mode [ 512.927770][T12185] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 512.941963][T12185] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 512.995090][T12337] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 513.120804][T12244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 513.133392][T12244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 513.291273][T12244] team0: Port device team_slave_0 added [ 513.300861][T12244] team0: Port device team_slave_1 added [ 513.352494][T12244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 513.359679][ T5245] Bluetooth: hci5: command tx timeout [ 513.369784][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.396703][T12244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 513.411056][T12244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 513.418277][T12244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 513.445028][T12244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 513.566052][T12244] hsr_slave_0: entered promiscuous mode [ 513.576739][T12244] hsr_slave_1: entered promiscuous mode [ 513.593497][T12244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.601599][T12244] Cannot create hsr debugfs directory [ 513.660983][T12198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 513.681190][T12198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 513.727060][T12198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 513.774105][T12198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.805647][T12350] FAULT_INJECTION: forcing a failure. [ 513.805647][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 513.808330][T12185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.833101][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.1.1914 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 513.843933][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 513.854023][T12350] Call Trace: [ 513.857323][T12350] [ 513.860291][T12350] dump_stack_lvl+0x241/0x360 [ 513.865001][T12350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 513.870211][T12350] ? __pfx__printk+0x10/0x10 [ 513.874855][T12350] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 513.880449][T12350] ? __pfx___might_resched+0x10/0x10 [ 513.885769][T12350] should_fail_ex+0x3b0/0x4e0 [ 513.890555][T12350] ? vm_area_dup+0x61/0x290 [ 513.895070][T12350] should_failslab+0xac/0x100 [ 513.899759][T12350] ? vm_area_dup+0x61/0x290 [ 513.904272][T12350] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 513.909656][T12350] vm_area_dup+0x61/0x290 [ 513.913998][T12350] __split_vma+0x1cb/0xc50 [ 513.918440][T12350] ? __pfx___split_vma+0x10/0x10 [ 513.923408][T12350] ? mas_find+0x950/0xbb0 [ 513.927786][T12350] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 513.933305][T12350] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 513.939273][T12350] ? mas_find+0x8c0/0xbb0 [ 513.943624][T12350] mmap_region+0x817/0x2990 [ 513.948174][T12350] ? __pfx_validate_chain+0x10/0x10 [ 513.953396][T12350] ? mark_lock+0x9a/0x360 [ 513.957759][T12350] ? __pfx_mmap_region+0x10/0x10 [ 513.962751][T12350] ? __pfx_lock_acquire+0x10/0x10 [ 513.967826][T12350] ? mm_get_unmapped_area+0xa8/0xd0 [ 513.973078][T12350] ? bpf_lsm_mmap_addr+0x9/0x10 [ 513.977949][T12350] ? security_mmap_addr+0x6f/0x250 [ 513.983091][T12350] ? __get_unmapped_area+0x2ed/0x350 [ 513.988410][T12350] do_mmap+0x8f0/0x1000 [ 513.992619][T12350] ? __pfx_do_mmap+0x10/0x10 [ 513.997329][T12350] ? __pfx_down_write_killable+0x10/0x10 [ 514.003083][T12350] ? apparmor_mmap_file+0xc3/0xe0 [ 514.008136][T12350] vm_mmap_pgoff+0x1dd/0x3d0 [ 514.012779][T12350] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 514.017900][T12350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 514.024246][T12350] ? do_syscall_64+0x100/0x230 [ 514.029040][T12350] ? ksys_mmap_pgoff+0xdf/0x720 [ 514.033921][T12350] ? __x64_sys_mmap+0x7f/0x140 [ 514.038701][T12350] do_syscall_64+0xf3/0x230 [ 514.043219][T12350] ? clear_bhb_loop+0x35/0x90 [ 514.047911][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.053828][T12350] RIP: 0033:0x7fe16397dff9 [ 514.058249][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.077949][T12350] RSP: 002b:00007fe1646ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 514.086402][T12350] RAX: ffffffffffffffda RBX: 00007fe163b35f80 RCX: 00007fe16397dff9 [ 514.094388][T12350] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 514.102376][T12350] RBP: 00007fe1646ee090 R08: ffffffffffffffff R09: 0000000000000000 [ 514.110465][T12350] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 514.118455][T12350] R13: 0000000000000000 R14: 00007fe163b35f80 R15: 00007fffcb223fe8 [ 514.126450][T12350] [ 514.301394][T12185] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.323930][T12355] tipc: Started in network mode [ 514.345137][T12355] tipc: Node identity 7f000001, cluster identity 4711 [ 514.359366][T12355] tipc: Enabled bearer , priority 10 [ 514.366701][ T9306] IPVS: starting estimator thread 0... [ 514.377446][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.384660][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.396319][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.403621][ T8489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.458180][T12362] IPVS: using max 21 ests per chain, 50400 per kthread [ 514.535792][T12185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 514.589767][T12198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.626489][T12198] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.652714][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.659924][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.715857][ T8489] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.723075][ T8489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.800013][ T5239] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 514.806834][ T5239] Bluetooth: hci4: command tx timeout [ 514.812937][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 514.929872][T12244] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 514.945423][T12244] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 514.956454][T12185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.969115][T12244] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 514.985217][T12244] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 515.049732][T12373] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 515.076095][T12185] veth0_vlan: entered promiscuous mode [ 515.100473][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1921'. [ 515.100544][T12185] veth1_vlan: entered promiscuous mode [ 515.145524][T12373] nbd: must specify at least one socket [ 515.172265][T12185] veth0_macvtap: entered promiscuous mode [ 515.205717][T12185] veth1_macvtap: entered promiscuous mode [ 515.269880][T12185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.322204][T12185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.359163][T12185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.370588][T12383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1923'. [ 515.372380][T12185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.392218][T12185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.401427][T12185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.416053][T12383] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1923'. [ 515.445660][T12198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.489178][ T1180] tipc: Node number set to 2130706433 [ 515.513180][T12244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.597125][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.625255][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.694552][T12244] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.732309][T12198] veth0_vlan: entered promiscuous mode [ 515.741631][ T8492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.754116][ T8484] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.761442][ T8484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.778585][ T8492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.793167][T12388] FAULT_INJECTION: forcing a failure. [ 515.793167][T12388] name failslab, interval 1, probability 0, space 0, times 0 [ 515.810138][T12198] veth1_vlan: entered promiscuous mode [ 515.815784][T12388] CPU: 0 UID: 0 PID: 12388 Comm: syz.3.1925 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 515.826592][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 515.836681][T12388] Call Trace: [ 515.840000][T12388] [ 515.842960][T12388] dump_stack_lvl+0x241/0x360 [ 515.847683][T12388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.852945][T12388] ? __pfx__printk+0x10/0x10 [ 515.857665][T12388] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 515.863259][T12388] ? __pfx___might_resched+0x10/0x10 [ 515.868610][T12388] should_fail_ex+0x3b0/0x4e0 [ 515.873345][T12388] ? mas_alloc_nodes+0x26c/0x840 [ 515.878326][T12388] should_failslab+0xac/0x100 [ 515.883045][T12388] ? mas_alloc_nodes+0x26c/0x840 [ 515.888021][T12388] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 515.893445][T12388] mas_alloc_nodes+0x26c/0x840 [ 515.898266][T12388] mas_preallocate+0x554/0x8c0 [ 515.903207][T12388] ? __pfx_mas_preallocate+0x10/0x10 [ 515.908549][T12388] ? __mas_set_range+0x133/0x3c0 [ 515.913532][T12388] __split_vma+0x302/0xc50 [ 515.918014][T12388] ? __pfx___split_vma+0x10/0x10 [ 515.923004][T12388] ? mas_find+0x950/0xbb0 [ 515.927379][T12388] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 515.932924][T12388] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 515.938875][T12388] ? mas_find+0x8c0/0xbb0 [ 515.943353][T12388] mmap_region+0x817/0x2990 [ 515.948204][T12388] ? __pfx_validate_chain+0x10/0x10 [ 515.953455][T12388] ? mark_lock+0x9a/0x360 [ 515.957836][T12388] ? __pfx_mmap_region+0x10/0x10 [ 515.962852][T12388] ? __pfx_lock_acquire+0x10/0x10 [ 515.967947][T12388] ? mm_get_unmapped_area+0xa8/0xd0 [ 515.973208][T12388] ? bpf_lsm_mmap_addr+0x9/0x10 [ 515.978386][T12388] ? security_mmap_addr+0x6f/0x250 [ 515.983570][T12388] ? __get_unmapped_area+0x2ed/0x350 [ 515.984096][T12244] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 515.988892][T12388] do_mmap+0x8f0/0x1000 [ 515.989052][T12388] ? __pfx_do_mmap+0x10/0x10 [ 516.008725][T12388] ? __pfx_down_write_killable+0x10/0x10 [ 516.012196][T12244] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 516.014387][T12388] ? apparmor_mmap_file+0xc3/0xe0 [ 516.029771][T12388] vm_mmap_pgoff+0x1dd/0x3d0 [ 516.034402][T12388] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 516.039540][T12388] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 516.045921][T12388] ? do_syscall_64+0x100/0x230 [ 516.050731][T12388] ? ksys_mmap_pgoff+0xdf/0x720 [ 516.055634][T12388] ? __x64_sys_mmap+0x7f/0x140 [ 516.060486][T12388] do_syscall_64+0xf3/0x230 [ 516.064508][ T8484] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.065010][T12388] ? clear_bhb_loop+0x35/0x90 [ 516.072337][ T8484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.076869][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.090047][T12388] RIP: 0033:0x7f1890f7dff9 [ 516.094501][T12388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.114143][T12388] RSP: 002b:00007f1890df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 516.122610][T12388] RAX: ffffffffffffffda RBX: 00007f1891135f80 RCX: 00007f1890f7dff9 [ 516.130628][T12388] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 516.138646][T12388] RBP: 00007f1890df9090 R08: ffffffffffffffff R09: 0000000000000000 [ 516.146662][T12388] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 516.151062][T12198] veth0_macvtap: entered promiscuous mode [ 516.154646][T12388] R13: 0000000000000000 R14: 00007f1891135f80 R15: 00007ffd2b71ac28 [ 516.168485][T12388] [ 516.169720][T12198] veth1_macvtap: entered promiscuous mode [ 516.269698][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.294521][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.319932][T12198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.360955][T12198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.394183][T12198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.418742][T12395] netlink: 'syz.3.1926': attribute type 3 has an invalid length. [ 516.435618][T12198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 516.518815][T12198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.535724][T12198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.545385][T12198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.563456][T12198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.644341][T12244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.784732][ T8489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.807843][ T8489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.872040][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.886165][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.037970][ T5239] Bluetooth: hci0: command 0x0406 tx timeout [ 517.045464][ T5245] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 517.144579][T12422] netlink: 404 bytes leftover after parsing attributes in process `syz.1.1931'. [ 517.223515][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1931'. [ 517.233513][T12422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1931'. [ 517.287253][T12422] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1931'. [ 517.495386][ T8489] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.522391][T12244] veth0_vlan: entered promiscuous mode [ 517.539368][T12244] veth1_vlan: entered promiscuous mode [ 517.566000][T12244] veth0_macvtap: entered promiscuous mode [ 517.578833][T12244] veth1_macvtap: entered promiscuous mode [ 517.595841][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.606636][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.617475][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.628364][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.641153][T12244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.653947][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.665134][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.676220][T12244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.690832][T12244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.701915][T12244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.718774][T12244] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.727505][T12244] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.736558][T12244] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.748740][T12244] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.821268][ T961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.829673][ T961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.860353][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.868726][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.085340][ T8489] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.155972][ T8489] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.241254][ T8489] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.325324][ T8489] bridge_slave_1: left allmulticast mode [ 518.332489][ T8489] bridge_slave_1: left promiscuous mode [ 518.340165][ T8489] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.350225][ T8489] bridge_slave_0: left allmulticast mode [ 518.355999][ T8489] bridge_slave_0: left promiscuous mode [ 518.362034][ T8489] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.731628][ T8489] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.746369][ T8489] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.765807][ T8489] bond0 (unregistering): Released all slaves [ 518.984922][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1933'. [ 519.016713][T12437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1935'. [ 519.118755][ T5245] Bluetooth: hci0: command 0x0406 tx timeout [ 519.170559][T12442] FAULT_INJECTION: forcing a failure. [ 519.170559][T12442] name failslab, interval 1, probability 0, space 0, times 0 [ 519.267750][T12442] CPU: 0 UID: 0 PID: 12442 Comm: syz.2.1936 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 519.278605][T12442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 519.288719][T12442] Call Trace: [ 519.292034][T12442] [ 519.295002][T12442] dump_stack_lvl+0x241/0x360 [ 519.299732][T12442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.304976][T12442] ? __pfx__printk+0x10/0x10 [ 519.309617][T12442] ? kmem_cache_alloc_bulk_noprof+0x51/0x7c0 [ 519.315623][T12442] ? __pfx___might_resched+0x10/0x10 [ 519.321055][T12442] should_fail_ex+0x3b0/0x4e0 [ 519.325852][T12442] should_failslab+0xac/0x100 [ 519.330557][T12442] kmem_cache_alloc_bulk_noprof+0x7d/0x7c0 [ 519.336404][T12442] ? mas_alloc_nodes+0x26c/0x840 [ 519.341452][T12442] ? mas_alloc_nodes+0x26c/0x840 [ 519.346420][T12442] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 519.351926][T12442] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 519.357587][T12442] mas_alloc_nodes+0x3d5/0x840 [ 519.362388][T12442] mas_preallocate+0x554/0x8c0 [ 519.367183][T12442] ? __pfx_mas_preallocate+0x10/0x10 [ 519.372497][T12442] ? __mas_set_range+0x133/0x3c0 [ 519.377455][T12442] __split_vma+0x302/0xc50 [ 519.381919][T12442] ? __pfx___split_vma+0x10/0x10 [ 519.386895][T12442] ? mas_find+0x950/0xbb0 [ 519.391331][T12442] vms_gather_munmap_vmas+0x4b2/0x15d0 [ 519.396824][T12442] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 519.402739][T12442] ? mas_find+0x8c0/0xbb0 [ 519.407088][T12442] mmap_region+0x817/0x2990 [ 519.411626][T12442] ? __pfx_validate_chain+0x10/0x10 [ 519.416847][T12442] ? mark_lock+0x9a/0x360 [ 519.421228][T12442] ? __pfx_mmap_region+0x10/0x10 [ 519.426208][T12442] ? __pfx_lock_acquire+0x10/0x10 [ 519.431276][T12442] ? mm_get_unmapped_area+0xa8/0xd0 [ 519.436500][T12442] ? bpf_lsm_mmap_addr+0x9/0x10 [ 519.441793][T12442] ? security_mmap_addr+0x6f/0x250 [ 519.446922][T12442] ? __get_unmapped_area+0x2ed/0x350 [ 519.452325][T12442] do_mmap+0x8f0/0x1000 [ 519.456508][T12442] ? __pfx_do_mmap+0x10/0x10 [ 519.461118][T12442] ? __pfx_down_write_killable+0x10/0x10 [ 519.466788][T12442] ? apparmor_mmap_file+0xc3/0xe0 [ 519.471836][T12442] vm_mmap_pgoff+0x1dd/0x3d0 [ 519.476444][T12442] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 519.481565][T12442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 519.487915][T12442] ? do_syscall_64+0x100/0x230 [ 519.492691][T12442] ? ksys_mmap_pgoff+0xdf/0x720 [ 519.497559][T12442] ? __x64_sys_mmap+0x7f/0x140 [ 519.502421][T12442] do_syscall_64+0xf3/0x230 [ 519.506959][T12442] ? clear_bhb_loop+0x35/0x90 [ 519.511676][T12442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.517585][T12442] RIP: 0033:0x7f64e1f7dff9 [ 519.522017][T12442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.541724][T12442] RSP: 002b:00007f64e2d74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 519.550164][T12442] RAX: ffffffffffffffda RBX: 00007f64e2135f80 RCX: 00007f64e1f7dff9 [ 519.558148][T12442] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 519.566131][T12442] RBP: 00007f64e2d74090 R08: ffffffffffffffff R09: 0000000000000000 [ 519.574200][T12442] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 519.582265][T12442] R13: 0000000000000000 R14: 00007f64e2135f80 R15: 00007ffc1bcf0fc8 [ 519.590351][T12442] [ 519.750707][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1938'. [ 519.832980][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 519.863084][ T5247] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 519.876588][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 519.887044][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 519.901266][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 519.912144][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 519.921194][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 519.931874][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 519.955053][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 519.985356][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 520.016659][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 520.033667][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 520.119544][T12464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1943'. [ 520.258150][T12444] team0 (unregistering): Port device wg2 removed [ 520.306421][ T8489] hsr_slave_0: left promiscuous mode [ 520.320795][ T8489] hsr_slave_1: left promiscuous mode [ 520.327175][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 520.347950][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 520.372449][ T8489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.391843][ T8489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.450192][ T8489] veth1_macvtap: left promiscuous mode [ 520.456049][ T8489] veth0_macvtap: left promiscuous mode [ 520.463297][ T8489] veth1_vlan: left promiscuous mode [ 520.473726][ T8489] veth0_vlan: left promiscuous mode [ 521.194878][ T8489] team0 (unregistering): Port device team_slave_1 removed [ 521.268716][ T8489] team0 (unregistering): Port device team_slave_0 removed [ 521.894506][T12469] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1945'. [ 521.997864][ T5247] Bluetooth: hci1: command tx timeout [ 522.107311][T12469] macvlan1 (unregistering): left promiscuous mode [ 522.158195][ T5247] Bluetooth: hci4: command tx timeout [ 522.463202][T12508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1954'. [ 522.576262][T12512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1953'. [ 522.619466][T12454] chnl_net:caif_netlink_parms(): no params data found [ 523.085902][T12545] FAULT_INJECTION: forcing a failure. [ 523.085902][T12545] name failslab, interval 1, probability 0, space 0, times 0 [ 523.086469][ T961] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.106198][T12545] CPU: 0 UID: 0 PID: 12545 Comm: syz.1.1960 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 523.120010][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 523.130120][T12545] Call Trace: [ 523.133438][T12545] [ 523.136572][T12545] dump_stack_lvl+0x241/0x360 [ 523.141309][T12545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 523.146585][T12545] ? __pfx__printk+0x10/0x10 [ 523.151228][T12545] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 523.156783][T12545] ? __pfx___might_resched+0x10/0x10 [ 523.162094][T12545] should_fail_ex+0x3b0/0x4e0 [ 523.166801][T12545] ? vm_area_alloc+0x24/0x1d0 [ 523.171495][T12545] should_failslab+0xac/0x100 [ 523.176189][T12545] ? vm_area_alloc+0x24/0x1d0 [ 523.180879][T12545] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 523.186291][T12545] vm_area_alloc+0x24/0x1d0 [ 523.190812][T12545] mmap_region+0x1132/0x2990 [ 523.195439][T12545] ? mark_lock+0x9a/0x360 [ 523.199790][T12545] ? __pfx_mmap_region+0x10/0x10 [ 523.204776][T12545] ? __pfx_lock_acquire+0x10/0x10 [ 523.209842][T12545] ? mm_get_unmapped_area+0xa8/0xd0 [ 523.215069][T12545] ? bpf_lsm_mmap_addr+0x9/0x10 [ 523.219935][T12545] ? security_mmap_addr+0x6f/0x250 [ 523.225127][T12545] ? __get_unmapped_area+0x2ed/0x350 [ 523.230436][T12545] do_mmap+0x8f0/0x1000 [ 523.234618][T12545] ? __pfx_do_mmap+0x10/0x10 [ 523.239248][T12545] ? __pfx_down_write_killable+0x10/0x10 [ 523.244914][T12545] ? apparmor_mmap_file+0xc3/0xe0 [ 523.249968][T12545] vm_mmap_pgoff+0x1dd/0x3d0 [ 523.254580][T12545] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 523.260065][T12545] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 523.266416][T12545] ? do_syscall_64+0x100/0x230 [ 523.271193][T12545] ? ksys_mmap_pgoff+0xdf/0x720 [ 523.276058][T12545] ? __x64_sys_mmap+0x7f/0x140 [ 523.280832][T12545] do_syscall_64+0xf3/0x230 [ 523.285352][T12545] ? clear_bhb_loop+0x35/0x90 [ 523.290060][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.295962][T12545] RIP: 0033:0x7fe16397dff9 [ 523.300387][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.320013][T12545] RSP: 002b:00007fe1646ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 523.328440][T12545] RAX: ffffffffffffffda RBX: 00007fe163b35f80 RCX: 00007fe16397dff9 [ 523.336422][T12545] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 523.344402][T12545] RBP: 00007fe1646ee090 R08: ffffffffffffffff R09: 0000000000000000 [ 523.352432][T12545] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 523.360882][T12545] R13: 0000000000000000 R14: 00007fe163b35f80 R15: 00007fffcb223fe8 [ 523.368879][T12545] [ 523.447609][T12451] chnl_net:caif_netlink_parms(): no params data found [ 523.577292][ T961] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.634015][T12454] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.644146][T12559] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1966'. [ 523.655204][T12454] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.662755][T12454] bridge_slave_0: entered allmulticast mode [ 523.670397][T12454] bridge_slave_0: entered promiscuous mode [ 523.679073][T12454] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.686347][T12454] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.695309][T12454] bridge_slave_1: entered allmulticast mode [ 523.703794][T12454] bridge_slave_1: entered promiscuous mode [ 523.718014][T12559] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1966'. [ 523.831837][ T961] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.969881][T12454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.025977][ T961] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.064886][T12454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.077863][ T5247] Bluetooth: hci1: command 0x041b tx timeout [ 524.079149][T12572] ipvlan2: entered promiscuous mode [ 524.099798][T12572] batman_adv: batadv0: Adding interface: ipvlan2 [ 524.106291][T12572] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.132923][T12572] batman_adv: batadv0: Interface activated: ipvlan2 [ 524.235837][T12586] FAULT_INJECTION: forcing a failure. [ 524.235837][T12586] name failslab, interval 1, probability 0, space 0, times 0 [ 524.253389][T12586] CPU: 0 UID: 0 PID: 12586 Comm: syz.3.1972 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 524.264673][T12586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 524.275213][T12586] Call Trace: [ 524.278532][T12586] [ 524.281500][T12586] dump_stack_lvl+0x241/0x360 [ 524.286245][T12586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 524.287787][ T5245] Bluetooth: hci4: command tx timeout [ 524.291486][T12586] ? __pfx__printk+0x10/0x10 [ 524.291525][T12586] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 524.291559][T12586] ? __pfx___might_resched+0x10/0x10 [ 524.312410][T12586] should_fail_ex+0x3b0/0x4e0 [ 524.317121][T12586] ? vm_area_alloc+0x10e/0x1d0 [ 524.321914][T12586] should_failslab+0xac/0x100 [ 524.326618][T12586] ? vm_area_alloc+0x10e/0x1d0 [ 524.331404][T12586] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 524.338119][T12586] vm_area_alloc+0x10e/0x1d0 [ 524.343586][T12586] mmap_region+0x1132/0x2990 [ 524.348229][T12586] ? mark_lock+0x9a/0x360 [ 524.352583][T12586] ? __pfx_mmap_region+0x10/0x10 [ 524.357584][T12586] ? __pfx_lock_acquire+0x10/0x10 [ 524.363701][T12586] ? mm_get_unmapped_area+0xa8/0xd0 [ 524.368958][T12586] ? bpf_lsm_mmap_addr+0x9/0x10 [ 524.374045][T12586] ? security_mmap_addr+0x6f/0x250 [ 524.379228][T12586] ? __get_unmapped_area+0x2ed/0x350 [ 524.384555][T12586] do_mmap+0x8f0/0x1000 [ 524.388757][T12586] ? __pfx_do_mmap+0x10/0x10 [ 524.393372][T12586] ? __pfx_down_write_killable+0x10/0x10 [ 524.399026][T12586] ? apparmor_mmap_file+0xc3/0xe0 [ 524.404080][T12586] vm_mmap_pgoff+0x1dd/0x3d0 [ 524.408695][T12586] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 524.413818][T12586] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 524.420169][T12586] ? do_syscall_64+0x100/0x230 [ 524.424958][T12586] ? ksys_mmap_pgoff+0xdf/0x720 [ 524.429826][T12586] ? __x64_sys_mmap+0x7f/0x140 [ 524.434612][T12586] do_syscall_64+0xf3/0x230 [ 524.439145][T12586] ? clear_bhb_loop+0x35/0x90 [ 524.443844][T12586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.449749][T12586] RIP: 0033:0x7f1890f7dff9 [ 524.454693][T12586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.474833][T12586] RSP: 002b:00007f1890df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 524.483262][T12586] RAX: ffffffffffffffda RBX: 00007f1891135f80 RCX: 00007f1890f7dff9 [ 524.491249][T12586] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 524.499230][T12586] RBP: 00007f1890df9090 R08: ffffffffffffffff R09: 0000000000000000 [ 524.507313][T12586] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 524.515327][T12586] R13: 0000000000000000 R14: 00007f1891135f80 R15: 00007ffd2b71ac28 [ 524.523362][T12586] [ 524.557277][T12454] team0: Port device team_slave_0 added [ 524.590456][T12451] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.597612][T12451] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.637242][T12451] bridge_slave_0: entered allmulticast mode [ 524.670922][T12451] bridge_slave_0: entered promiscuous mode [ 524.707576][T12454] team0: Port device team_slave_1 added [ 524.756317][T12454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.770411][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 524.816474][T12454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.849005][T12451] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.858005][T12451] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.870926][T12451] bridge_slave_1: entered allmulticast mode [ 524.880392][T12451] bridge_slave_1: entered promiscuous mode [ 524.912245][T12454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.944175][T12454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 525.008022][T12454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.074328][T12451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.084081][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1980'. [ 525.106406][T12451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.286898][ T961] bridge_slave_1: left allmulticast mode [ 525.308869][ T961] bridge_slave_1: left promiscuous mode [ 525.316391][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.350191][ T961] bridge_slave_0: left allmulticast mode [ 525.359251][ T961] bridge_slave_0: left promiscuous mode [ 525.368988][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.010118][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.027630][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.045465][ T961] bond0 (unregistering): Released all slaves [ 526.063221][T12454] hsr_slave_0: entered promiscuous mode [ 526.073607][T12454] hsr_slave_1: entered promiscuous mode [ 526.083093][T12454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 526.095520][T12454] Cannot create hsr debugfs directory [ 526.137206][T12451] team0: Port device team_slave_0 added [ 526.145989][T12627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1984'. [ 526.158224][ T5245] Bluetooth: hci1: command 0x041b tx timeout [ 526.318028][ T5245] Bluetooth: hci4: command tx timeout [ 526.351004][T12451] team0: Port device team_slave_1 added [ 526.567584][T12451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.583141][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.637958][T12451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.650802][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 526.707321][T12655] ieee802154 phy0 wpan0: encryption failed: -22 [ 526.714389][T12451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.732973][T12451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.763906][T12451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.925727][T12665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'. [ 527.010747][ T961] hsr_slave_0: left promiscuous mode [ 527.033489][ T961] hsr_slave_1: left promiscuous mode [ 527.042516][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.050278][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.064327][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.076341][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.126889][ T961] veth1_macvtap: left promiscuous mode [ 527.136686][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1996'. [ 527.144885][ T961] veth0_macvtap: left promiscuous mode [ 527.152966][ T961] veth1_vlan: left promiscuous mode [ 527.165569][ T961] veth0_vlan: left promiscuous mode [ 527.799251][T12685] IPVS: set_ctl: invalid protocol: 58 172.20.20.170:20002 [ 527.855753][ T961] team0 (unregistering): Port device team_slave_1 removed [ 527.903766][ T961] team0 (unregistering): Port device team_slave_0 removed [ 528.253520][ T5245] Bluetooth: hci1: command 0x041b tx timeout [ 528.394408][T12674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1998'. [ 528.408017][ T5245] Bluetooth: hci4: command tx timeout [ 528.465050][T12451] hsr_slave_0: entered promiscuous mode [ 528.500175][T12451] hsr_slave_1: entered promiscuous mode [ 528.537203][T12451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.546057][T12451] Cannot create hsr debugfs directory [ 528.576990][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2002'. [ 528.598458][T12690] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2002'. [ 528.607565][T12690] netlink: 'syz.2.2002': attribute type 3 has an invalid length. [ 528.637200][T12690] netlink: 'syz.2.2002': attribute type 2 has an invalid length. [ 528.654319][T12690] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2002'. [ 528.840661][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2004'. [ 529.047270][T12705] FAULT_INJECTION: forcing a failure. [ 529.047270][T12705] name failslab, interval 1, probability 0, space 0, times 0 [ 529.080357][T12705] CPU: 1 UID: 0 PID: 12705 Comm: syz.1.2006 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 529.091291][T12705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 529.101392][T12705] Call Trace: [ 529.104698][T12705] [ 529.107657][T12705] dump_stack_lvl+0x241/0x360 [ 529.112375][T12705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 529.117587][T12705] ? __pfx__printk+0x10/0x10 [ 529.122637][T12705] ? fs_reclaim_acquire+0x93/0x130 [ 529.127794][T12705] ? __pfx___might_resched+0x10/0x10 [ 529.133301][T12705] ? lockdep_init_map_type+0xa1/0x910 [ 529.138712][T12705] should_fail_ex+0x3b0/0x4e0 [ 529.143523][T12705] ? security_inode_alloc+0x37/0x310 [ 529.148866][T12705] should_failslab+0xac/0x100 [ 529.153563][T12705] ? security_inode_alloc+0x37/0x310 [ 529.158890][T12705] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 529.164568][T12705] security_inode_alloc+0x37/0x310 [ 529.169711][T12705] inode_init_always_gfp+0x988/0xcd0 [ 529.175456][T12705] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 529.181138][T12705] alloc_inode+0x9f/0x1a0 [ 529.185522][T12705] new_inode+0x22/0x1d0 [ 529.189713][T12705] shmem_get_inode+0x34a/0xd70 [ 529.194551][T12705] __shmem_file_setup+0x171/0x2c0 [ 529.199612][T12705] shmem_zero_setup+0x91/0x140 [ 529.204469][T12705] mmap_region+0x1c5f/0x2990 [ 529.209209][T12705] ? __pfx_mmap_region+0x10/0x10 [ 529.214205][T12705] ? __pfx_lock_acquire+0x10/0x10 [ 529.219324][T12705] ? mm_get_unmapped_area+0xa8/0xd0 [ 529.224585][T12705] ? bpf_lsm_mmap_addr+0x9/0x10 [ 529.229475][T12705] ? security_mmap_addr+0x6f/0x250 [ 529.234645][T12705] ? __get_unmapped_area+0x2ed/0x350 [ 529.239995][T12705] do_mmap+0x8f0/0x1000 [ 529.244393][T12705] ? __pfx_do_mmap+0x10/0x10 [ 529.246003][T12708] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2007'. [ 529.249010][T12705] ? __pfx_down_write_killable+0x10/0x10 [ 529.249048][T12705] ? apparmor_mmap_file+0xc3/0xe0 [ 529.249087][T12705] vm_mmap_pgoff+0x1dd/0x3d0 [ 529.273326][T12705] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 529.278487][T12705] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 529.285058][T12705] ? do_syscall_64+0x100/0x230 [ 529.289876][T12705] ? ksys_mmap_pgoff+0xdf/0x720 [ 529.294789][T12705] ? __x64_sys_mmap+0x7f/0x140 [ 529.296232][T12708] netlink: 'syz.2.2007': attribute type 11 has an invalid length. [ 529.299716][T12705] do_syscall_64+0xf3/0x230 [ 529.299752][T12705] ? clear_bhb_loop+0x35/0x90 [ 529.299784][T12705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.299810][T12705] RIP: 0033:0x7fe16397dff9 [ 529.299839][T12705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.299859][T12705] RSP: 002b:00007fe1646ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 529.299886][T12705] RAX: ffffffffffffffda RBX: 00007fe163b35f80 RCX: 00007fe16397dff9 [ 529.299904][T12705] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 529.299920][T12705] RBP: 00007fe1646ee090 R08: ffffffffffffffff R09: 0000000000000000 [ 529.299936][T12705] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 529.299951][T12705] R13: 0000000000000000 R14: 00007fe163b35f80 R15: 00007fffcb223fe8 [ 529.395556][T12705] [ 529.941602][T12451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 529.972086][T12451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 529.999977][T12451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 530.101710][T12451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 530.144186][T12454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 530.181724][T12454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 530.221415][T12454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 530.301483][T12454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 530.325650][ T5245] Bluetooth: hci1: command 0x041b tx timeout [ 530.377254][T12740] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 530.444202][T12741] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 530.556192][T12451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 530.636488][T12743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.651431][T12451] 8021q: adding VLAN 0 to HW filter on device team0 [ 530.655911][T12750] FAULT_INJECTION: forcing a failure. [ 530.655911][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 530.707803][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.3.2019 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 530.718649][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 530.728747][T12750] Call Trace: [ 530.732058][T12750] [ 530.735021][T12750] dump_stack_lvl+0x241/0x360 [ 530.739757][T12750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.745006][T12750] ? __pfx__printk+0x10/0x10 [ 530.749731][T12750] ? kmem_cache_alloc_lru_noprof+0x49/0x2b0 [ 530.755687][T12750] ? __pfx___might_resched+0x10/0x10 [ 530.761031][T12750] should_fail_ex+0x3b0/0x4e0 [ 530.765774][T12750] ? __d_alloc+0x31/0x700 [ 530.770151][T12750] should_failslab+0xac/0x100 [ 530.774878][T12750] ? __d_alloc+0x31/0x700 [ 530.779256][T12750] kmem_cache_alloc_lru_noprof+0x71/0x2b0 [ 530.785122][T12750] __d_alloc+0x31/0x700 [ 530.789423][T12750] d_alloc_pseudo+0x1f/0xb0 [ 530.794176][T12750] alloc_file_pseudo+0x123/0x290 [ 530.799532][T12750] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 530.805055][T12750] ? shmem_get_inode+0xad5/0xd70 [ 530.810078][T12750] __shmem_file_setup+0x237/0x2c0 [ 530.813998][T12451] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 530.815131][T12750] shmem_zero_setup+0x91/0x140 [ 530.815182][T12750] mmap_region+0x1c5f/0x2990 [ 530.826907][T12451] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 530.830278][T12750] ? __pfx_mmap_region+0x10/0x10 [ 530.830345][T12750] ? __pfx_lock_acquire+0x10/0x10 [ 530.830401][T12750] ? mm_get_unmapped_area+0xa8/0xd0 [ 530.830451][T12750] ? bpf_lsm_mmap_addr+0x9/0x10 [ 530.865585][T12750] ? security_mmap_addr+0x6f/0x250 [ 530.870731][T12750] ? __get_unmapped_area+0x2ed/0x350 [ 530.876045][T12750] do_mmap+0x8f0/0x1000 [ 530.880239][T12750] ? __pfx_do_mmap+0x10/0x10 [ 530.884861][T12750] ? __pfx_down_write_killable+0x10/0x10 [ 530.890520][T12750] ? apparmor_mmap_file+0xc3/0xe0 [ 530.895574][T12750] vm_mmap_pgoff+0x1dd/0x3d0 [ 530.900189][T12750] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 530.905320][T12750] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 530.911677][T12750] ? do_syscall_64+0x100/0x230 [ 530.916460][T12750] ? ksys_mmap_pgoff+0xdf/0x720 [ 530.921440][T12750] ? __x64_sys_mmap+0x7f/0x140 [ 530.926237][T12750] do_syscall_64+0xf3/0x230 [ 530.930766][T12750] ? clear_bhb_loop+0x35/0x90 [ 530.935467][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.941412][T12750] RIP: 0033:0x7f1890f7dff9 [ 530.945885][T12750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.965528][T12750] RSP: 002b:00007f1890df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 530.973984][T12750] RAX: ffffffffffffffda RBX: 00007f1891135f80 RCX: 00007f1890f7dff9 [ 530.982022][T12750] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 530.990048][T12750] RBP: 00007f1890df9090 R08: ffffffffffffffff R09: 0000000000000000 [ 530.998168][T12750] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 531.006963][T12750] R13: 0000000000000000 R14: 00007f1891135f80 R15: 00007ffd2b71ac28 [ 531.014966][T12750] [ 531.095622][T12747] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 531.115207][T12753] netlink: 'syz.3.2020': attribute type 7 has an invalid length. [ 531.125132][ T8490] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.132295][ T8490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.144865][ T8490] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.152050][ T8490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.223620][T12454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.277605][T12454] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.338167][ T8489] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.345345][ T8489] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.393009][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.400227][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.573289][T12454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.724098][T12451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 531.901859][T12451] veth0_vlan: entered promiscuous mode [ 531.928525][T12451] veth1_vlan: entered promiscuous mode [ 531.981785][T12454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.215496][T12451] veth0_macvtap: entered promiscuous mode [ 532.250294][T12451] veth1_macvtap: entered promiscuous mode [ 532.264245][T12795] FAULT_INJECTION: forcing a failure. [ 532.264245][T12795] name failslab, interval 1, probability 0, space 0, times 0 [ 532.277407][T12795] CPU: 1 UID: 0 PID: 12795 Comm: syz.2.2030 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 532.288221][T12795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.298311][T12795] Call Trace: [ 532.301622][T12795] [ 532.304585][T12795] dump_stack_lvl+0x241/0x360 [ 532.309321][T12795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.314523][T12451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.314547][T12451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.314565][T12795] ? __pfx__printk+0x10/0x10 [ 532.339562][T12795] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 532.345203][T12795] ? __pfx___might_resched+0x10/0x10 [ 532.350547][T12795] should_fail_ex+0x3b0/0x4e0 [ 532.355275][T12795] ? alloc_empty_file+0x9e/0x1d0 [ 532.359353][T12451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.360249][T12795] should_failslab+0xac/0x100 [ 532.372155][T12795] ? alloc_empty_file+0x9e/0x1d0 [ 532.377135][T12795] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 532.382564][T12795] alloc_empty_file+0x9e/0x1d0 [ 532.387383][T12795] alloc_file_pseudo+0x1da/0x290 [ 532.392367][T12795] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 532.397342][T12451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.397898][T12795] ? shmem_get_inode+0xad5/0xd70 [ 532.397943][T12795] __shmem_file_setup+0x237/0x2c0 [ 532.397974][T12795] shmem_zero_setup+0x91/0x140 [ 532.398004][T12795] mmap_region+0x1c5f/0x2990 [ 532.398069][T12795] ? __pfx_mmap_region+0x10/0x10 [ 532.398127][T12795] ? __pfx_lock_acquire+0x10/0x10 [ 532.398181][T12795] ? mm_get_unmapped_area+0xa8/0xd0 [ 532.398229][T12795] ? bpf_lsm_mmap_addr+0x9/0x10 [ 532.398251][T12795] ? security_mmap_addr+0x6f/0x250 [ 532.398285][T12795] ? __get_unmapped_area+0x2ed/0x350 [ 532.398325][T12795] do_mmap+0x8f0/0x1000 [ 532.398369][T12795] ? __pfx_do_mmap+0x10/0x10 [ 532.398400][T12795] ? __pfx_down_write_killable+0x10/0x10 [ 532.398434][T12795] ? apparmor_mmap_file+0xc3/0xe0 [ 532.398471][T12795] vm_mmap_pgoff+0x1dd/0x3d0 [ 532.398504][T12795] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 532.398535][T12795] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 532.398570][T12795] ? do_syscall_64+0x100/0x230 [ 532.398598][T12795] ? ksys_mmap_pgoff+0xdf/0x720 [ 532.398629][T12795] ? __x64_sys_mmap+0x7f/0x140 [ 532.428540][T12451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.433376][T12795] do_syscall_64+0xf3/0x230 [ 532.459792][T12451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.463117][T12795] ? clear_bhb_loop+0x35/0x90 [ 532.484387][T12451] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.488208][T12795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.488242][T12795] RIP: 0033:0x7f64e1f7dff9 [ 532.488264][T12795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.488285][T12795] RSP: 002b:00007f64e2d74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 532.488311][T12795] RAX: ffffffffffffffda RBX: 00007f64e2135f80 RCX: 00007f64e1f7dff9 [ 532.488330][T12795] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 532.488347][T12795] RBP: 00007f64e2d74090 R08: ffffffffffffffff R09: 0000000000000000 [ 532.488363][T12795] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 532.488379][T12795] R13: 0000000000000000 R14: 00007f64e2135f80 R15: 00007ffc1bcf0fc8 [ 532.488415][T12795] [ 532.651272][T12451] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.660271][T12451] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.677298][T12451] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.895999][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 532.927088][T12451] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 532.936699][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 532.960241][T12451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.976124][T12807] netlink: 332 bytes leftover after parsing attributes in process `syz.1.2033'. [ 532.995092][T12805] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2032'. [ 533.006272][T12807] netlink: 'syz.1.2033': attribute type 3 has an invalid length. [ 533.051648][ T8484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.070446][ T8484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.104706][T12454] veth0_vlan: entered promiscuous mode [ 533.169862][T12454] veth1_vlan: entered promiscuous mode [ 533.225350][T12816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 533.263069][T12454] veth0_macvtap: entered promiscuous mode [ 533.276689][T12454] veth1_macvtap: entered promiscuous mode [ 533.330368][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.350378][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.367242][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 533.385409][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.397127][T12454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 533.544024][T12834] FAULT_INJECTION: forcing a failure. [ 533.544024][T12834] name failslab, interval 1, probability 0, space 0, times 0 [ 533.544169][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.587515][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.587979][T12834] CPU: 0 UID: 0 PID: 12834 Comm: syz.3.2041 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 533.608253][T12834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.618362][T12834] Call Trace: [ 533.621669][T12834] [ 533.624625][T12834] dump_stack_lvl+0x241/0x360 [ 533.625151][T12454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 533.629334][T12834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.629369][T12834] ? __pfx__printk+0x10/0x10 [ 533.650180][T12834] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 533.655782][T12834] ? __pfx___might_resched+0x10/0x10 [ 533.661127][T12834] should_fail_ex+0x3b0/0x4e0 [ 533.661469][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 533.665846][T12834] ? security_file_alloc+0x32/0x310 [ 533.665884][T12834] should_failslab+0xac/0x100 [ 533.677594][T12454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 533.680965][T12834] ? security_file_alloc+0x32/0x310 [ 533.681005][T12834] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 533.681041][T12834] security_file_alloc+0x32/0x310 [ 533.681077][T12834] init_file+0x93/0x1e0 [ 533.681110][T12834] alloc_empty_file+0xb8/0x1d0 [ 533.681142][T12834] alloc_file_pseudo+0x1da/0x290 [ 533.681176][T12834] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 533.681208][T12834] ? shmem_get_inode+0xad5/0xd70 [ 533.681251][T12834] __shmem_file_setup+0x237/0x2c0 [ 533.681283][T12834] shmem_zero_setup+0x91/0x140 [ 533.681314][T12834] mmap_region+0x1c5f/0x2990 [ 533.681382][T12834] ? __pfx_mmap_region+0x10/0x10 [ 533.681445][T12834] ? __pfx_lock_acquire+0x10/0x10 [ 533.724821][T12454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.729790][T12834] ? mm_get_unmapped_area+0xa8/0xd0 [ 533.734963][T12454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.739813][T12834] ? bpf_lsm_mmap_addr+0x9/0x10 [ 533.739840][T12834] ? security_mmap_addr+0x6f/0x250 [ 533.739875][T12834] ? __get_unmapped_area+0x2ed/0x350 [ 533.739914][T12834] do_mmap+0x8f0/0x1000 [ 533.739959][T12834] ? __pfx_do_mmap+0x10/0x10 [ 533.739992][T12834] ? __pfx_down_write_killable+0x10/0x10 [ 533.740032][T12834] ? apparmor_mmap_file+0xc3/0xe0 [ 533.740071][T12834] vm_mmap_pgoff+0x1dd/0x3d0 [ 533.740106][T12834] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 533.740130][T12834] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 533.740167][T12834] ? do_syscall_64+0x100/0x230 [ 533.740195][T12834] ? ksys_mmap_pgoff+0xdf/0x720 [ 533.740230][T12834] ? __x64_sys_mmap+0x7f/0x140 [ 533.740257][T12834] do_syscall_64+0xf3/0x230 [ 533.740284][T12834] ? clear_bhb_loop+0x35/0x90 [ 533.740315][T12834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.740340][T12834] RIP: 0033:0x7f1890f7dff9 [ 533.740361][T12834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.740382][T12834] RSP: 002b:00007f1890df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 533.740410][T12834] RAX: ffffffffffffffda RBX: 00007f1891135f80 RCX: 00007f1890f7dff9 [ 533.740428][T12834] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 533.740444][T12834] RBP: 00007f1890df9090 R08: ffffffffffffffff R09: 0000000000000000 [ 533.740459][T12834] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 533.740473][T12834] R13: 0000000000000000 R14: 00007f1891135f80 R15: 00007ffd2b71ac28 [ 533.740512][T12834] [ 533.753843][T12454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.890222][T12841] FAULT_INJECTION: forcing a failure. [ 533.890222][T12841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.890258][T12841] CPU: 0 UID: 0 PID: 12841 Comm: syz.1.2043 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 533.890284][T12841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 533.890297][T12841] Call Trace: [ 533.890305][T12841] [ 533.890316][T12841] dump_stack_lvl+0x241/0x360 [ 533.890351][T12841] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.890379][T12841] ? __pfx__printk+0x10/0x10 [ 533.890409][T12841] ? __pfx_lock_release+0x10/0x10 [ 533.890454][T12841] should_fail_ex+0x3b0/0x4e0 [ 533.890493][T12841] _copy_from_iter+0x1ed/0x1d60 [ 533.890521][T12841] ? __virt_addr_valid+0x183/0x530 [ 533.890547][T12841] ? __pfx_lock_release+0x10/0x10 [ 533.890591][T12841] ? __pfx__copy_from_iter+0x10/0x10 [ 533.890629][T12841] ? __virt_addr_valid+0x183/0x530 [ 533.890652][T12841] ? __virt_addr_valid+0x183/0x530 [ 534.045986][T12841] ? __virt_addr_valid+0x45f/0x530 [ 534.051118][T12841] ? __check_object_size+0x48e/0x900 [ 534.056428][T12841] hci_sock_sendmsg+0x4f1/0x11c0 [ 534.061390][T12841] ? __pfx_aa_sk_perm+0x10/0x10 [ 534.066443][T12841] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 534.071823][T12841] ? __pfx_aa_file_perm+0x10/0x10 [ 534.076877][T12841] ? aa_sock_msg_perm+0x91/0x160 [ 534.081830][T12841] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 534.087228][T12841] __sock_sendmsg+0x221/0x270 [ 534.092050][T12841] sock_write_iter+0x2d7/0x3f0 [ 534.096832][T12841] ? __pfx_sock_write_iter+0x10/0x10 [ 534.102231][T12841] ? bpf_lsm_file_permission+0x9/0x10 [ 534.107611][T12841] ? security_file_permission+0x74/0x280 [ 534.113269][T12841] vfs_write+0xa6d/0xc90 [ 534.117522][T12841] ? __pfx_sock_write_iter+0x10/0x10 [ 534.122844][T12841] ? __pfx_vfs_write+0x10/0x10 [ 534.127627][T12841] ? fdget_pos+0x19a/0x320 [ 534.132061][T12841] ksys_write+0x183/0x2b0 [ 534.136487][T12841] ? __pfx_ksys_write+0x10/0x10 [ 534.141431][T12841] ? do_syscall_64+0x100/0x230 [ 534.146208][T12841] ? do_syscall_64+0xb6/0x230 [ 534.150905][T12841] do_syscall_64+0xf3/0x230 [ 534.155419][T12841] ? clear_bhb_loop+0x35/0x90 [ 534.160112][T12841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.166016][T12841] RIP: 0033:0x7fe16397dff9 [ 534.170443][T12841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.190057][T12841] RSP: 002b:00007fe1646ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 534.198503][T12841] RAX: ffffffffffffffda RBX: 00007fe163b35f80 RCX: 00007fe16397dff9 [ 534.206486][T12841] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 0000000000000004 [ 534.214465][T12841] RBP: 00007fe1646ee090 R08: 0000000000000000 R09: 0000000000000000 [ 534.222959][T12841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.230937][T12841] R13: 0000000000000000 R14: 00007fe163b35f80 R15: 00007fffcb223fe8 [ 534.238926][T12841] [ 534.284066][T12454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.404696][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2044'. [ 534.644653][ T8492] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.741641][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.758040][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 534.784162][T12454] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 534.805689][T12454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 534.829498][ T8490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 534.837420][ T8490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 535.036808][ T8492] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.121362][ T8492] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.228960][ T8492] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.316967][T12855] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2047'. [ 535.398603][T12855] netlink: 'syz.2.2047': attribute type 3 has an invalid length. [ 535.428733][T12860] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2048'. [ 535.509878][ T8492] bridge_slave_1: left allmulticast mode [ 535.525891][ T8492] bridge_slave_1: left promiscuous mode [ 535.544363][ T8492] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.586976][ T8492] bridge_slave_0: left allmulticast mode [ 535.606557][ T8492] bridge_slave_0: left promiscuous mode [ 535.619113][ T5247] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 535.625023][ T8492] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.636127][ T5247] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 535.655963][ T5247] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 535.668419][ T5247] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 535.676207][ T5247] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 535.684552][ T5247] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 536.276712][ T5245] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.278861][T12877] FAULT_INJECTION: forcing a failure. [ 536.278861][T12877] name failslab, interval 1, probability 0, space 0, times 0 [ 536.311058][ T5245] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.311308][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.2.2054 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 536.328835][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.338940][T12877] Call Trace: [ 536.342253][T12877] [ 536.345390][T12877] dump_stack_lvl+0x241/0x360 [ 536.350124][T12877] ? __pfx_dump_stack_lvl+0x10/0x10 [ 536.355365][T12877] ? __pfx__printk+0x10/0x10 [ 536.360116][T12877] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 536.365334][ T5245] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.365688][T12877] ? __pfx___might_resched+0x10/0x10 [ 536.378123][T12877] should_fail_ex+0x3b0/0x4e0 [ 536.382828][T12877] ? mas_alloc_nodes+0x26c/0x840 [ 536.387780][T12877] should_failslab+0xac/0x100 [ 536.392483][T12877] ? mas_alloc_nodes+0x26c/0x840 [ 536.397432][T12877] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 536.402916][T12877] mas_alloc_nodes+0x26c/0x840 [ 536.407703][T12877] mas_preallocate+0x554/0x8c0 [ 536.412575][T12877] ? shmem_get_inode+0xad5/0xd70 [ 536.417541][T12877] ? __pfx_mas_preallocate+0x10/0x10 [ 536.422853][T12877] ? __shmem_file_setup+0x263/0x2c0 [ 536.428077][T12877] ? shmem_zero_setup+0x12b/0x140 [ 536.433241][T12877] mmap_region+0x1ea1/0x2990 [ 536.437988][T12877] ? __pfx_mmap_region+0x10/0x10 [ 536.442982][T12877] ? __pfx_lock_acquire+0x10/0x10 [ 536.448054][T12877] ? mm_get_unmapped_area+0xa8/0xd0 [ 536.453319][T12877] ? bpf_lsm_mmap_addr+0x9/0x10 [ 536.458200][T12877] ? security_mmap_addr+0x6f/0x250 [ 536.463346][T12877] ? __get_unmapped_area+0x2ed/0x350 [ 536.468920][T12877] do_mmap+0x8f0/0x1000 [ 536.473119][T12877] ? __pfx_do_mmap+0x10/0x10 [ 536.477729][T12877] ? __pfx_down_write_killable+0x10/0x10 [ 536.483384][T12877] ? apparmor_mmap_file+0xc3/0xe0 [ 536.488435][T12877] vm_mmap_pgoff+0x1dd/0x3d0 [ 536.493044][T12877] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 536.498167][T12877] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 536.504523][T12877] ? do_syscall_64+0x100/0x230 [ 536.509299][T12877] ? ksys_mmap_pgoff+0xdf/0x720 [ 536.514173][T12877] ? __x64_sys_mmap+0x7f/0x140 [ 536.518954][T12877] do_syscall_64+0xf3/0x230 [ 536.523473][T12877] ? clear_bhb_loop+0x35/0x90 [ 536.528166][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.534163][T12877] RIP: 0033:0x7f64e1f7dff9 [ 536.538698][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 536.558316][T12877] RSP: 002b:00007f64e2d74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 536.566747][T12877] RAX: ffffffffffffffda RBX: 00007f64e2135f80 RCX: 00007f64e1f7dff9 [ 536.574730][T12877] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 536.582728][T12877] RBP: 00007f64e2d74090 R08: ffffffffffffffff R09: 0000000000000000 [ 536.590883][T12877] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 536.598884][T12877] R13: 0000000000000000 R14: 00007f64e2135f80 R15: 00007ffc1bcf0fc8 [ 536.606909][T12877] [ 536.632324][T12877] ------------[ cut here ]------------ [ 536.640132][T12877] kernel BUG at mm/page_table_check.c:87! [ 536.646134][T12877] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 536.653106][T12877] CPU: 0 UID: 0 PID: 12877 Comm: syz.2.2054 Not tainted 6.12.0-rc2-syzkaller-00631-g6d858708d465 #0 [ 536.660203][ T5245] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.663871][T12877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 536.663889][T12877] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 536.663926][T12877] Code: 4a fd ff ff e8 dc 74 89 ff 90 0f 0b e8 d4 74 89 ff 90 0f 0b e8 cc 74 89 ff 90 0f 0b e8 c4 74 89 ff 90 0f 0b e8 bc 74 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 84 79 89 [ 536.671671][ T5245] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.680894][T12877] RSP: 0018:ffffc90004aa71a0 EFLAGS: 00010293 [ 536.680921][T12877] RAX: ffffffff820b7294 RBX: ffff88801d43c098 RCX: ffff888066810000 [ 536.680938][T12877] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 536.680953][T12877] RBP: 00000000ffffffff R08: ffffffff820b7165 R09: 1ffff11003a87813 [ 536.687845][ T5245] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.706783][T12877] R10: dffffc0000000000 R11: ffffed1003a87814 R12: ffff88801d43c09c [ 536.706807][T12877] R13: ffff88801d43c050 R14: 1ffffffff34887b4 R15: 0000000000000001 [ 536.706823][T12877] FS: 00007f64e2d746c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 536.706842][T12877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.706856][T12877] CR2: 00007fd9ba843e96 CR3: 0000000058498000 CR4: 00000000003526f0 [ 536.706875][T12877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 536.706888][T12877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 536.706902][T12877] Call Trace: [ 536.706911][T12877] [ 536.706919][T12877] ? __die_body+0x5f/0xb0 [ 536.706945][T12877] ? die+0x9e/0xc0 [ 536.706965][T12877] ? do_trap+0x15a/0x3a0 [ 536.706996][T12877] ? page_table_check_clear+0x3a5/0x550 [ 536.707025][T12877] ? do_error_trap+0x1dc/0x2c0 [ 536.707053][T12877] ? page_table_check_clear+0x3a5/0x550 [ 536.707081][T12877] ? __pfx_do_error_trap+0x10/0x10 [ 536.846146][T12877] ? handle_invalid_op+0x34/0x40 [ 536.851119][T12877] ? page_table_check_clear+0x3a5/0x550 [ 536.856673][T12877] ? exc_invalid_op+0x38/0x50 [ 536.861358][T12877] ? asm_exc_invalid_op+0x1a/0x20 [ 536.866839][T12877] ? page_table_check_clear+0x275/0x550 [ 536.872409][T12877] ? page_table_check_clear+0x3a4/0x550 [ 536.877991][T12877] ? page_table_check_clear+0x3a5/0x550 [ 536.883564][T12877] zap_huge_pmd+0x940/0xc40 [ 536.888076][T12877] unmap_page_range+0x762/0x40e0 [ 536.893108][T12877] ? __pfx_validate_chain+0x10/0x10 [ 536.898330][T12877] ? __lock_acquire+0x1384/0x2050 [ 536.903395][T12877] ? __pfx_unmap_page_range+0x10/0x10 [ 536.908797][T12877] ? __pfx_lock_acquire+0x10/0x10 [ 536.913846][T12877] ? unmap_vmas+0x1f1/0x5f0 [ 536.918362][T12877] ? __pfx_lock_release+0x10/0x10 [ 536.923423][T12877] ? unmap_single_vma+0x1bd/0x2b0 [ 536.928475][T12877] unmap_vmas+0x3cc/0x5f0 [ 536.932819][T12877] ? __pfx_unmap_vmas+0x10/0x10 [ 536.937722][T12877] ? tlb_gather_mmu+0x24e/0x310 [ 536.942600][T12877] unmap_region+0x214/0x380 [ 536.947225][T12877] ? __pfx_unmap_region+0x10/0x10 [ 536.952269][T12877] ? __mas_set_range+0x133/0x3c0 [ 536.957214][T12877] ? fput+0x1af/0x230 [ 536.961211][T12877] mmap_region+0x22f9/0x2990 [ 536.965824][T12877] ? __pfx_mmap_region+0x10/0x10 [ 536.970781][T12877] ? __pfx_lock_acquire+0x10/0x10 [ 536.975957][T12877] ? mm_get_unmapped_area+0xa8/0xd0 [ 536.981650][T12877] ? bpf_lsm_mmap_addr+0x9/0x10 [ 536.986588][T12877] ? security_mmap_addr+0x6f/0x250 [ 536.991706][T12877] ? __get_unmapped_area+0x2ed/0x350 [ 536.997100][T12877] do_mmap+0x8f0/0x1000 [ 537.001301][T12877] ? __pfx_do_mmap+0x10/0x10 [ 537.005920][T12877] ? __pfx_down_write_killable+0x10/0x10 [ 537.011568][T12877] ? apparmor_mmap_file+0xc3/0xe0 [ 537.016606][T12877] vm_mmap_pgoff+0x1dd/0x3d0 [ 537.021202][T12877] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 537.026424][T12877] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 537.032782][T12877] ? do_syscall_64+0x100/0x230 [ 537.037550][T12877] ? ksys_mmap_pgoff+0xdf/0x720 [ 537.042417][T12877] ? __x64_sys_mmap+0x7f/0x140 [ 537.047196][T12877] do_syscall_64+0xf3/0x230 [ 537.051805][T12877] ? clear_bhb_loop+0x35/0x90 [ 537.056517][T12877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.062502][T12877] RIP: 0033:0x7f64e1f7dff9 [ 537.066913][T12877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.086765][T12877] RSP: 002b:00007f64e2d74038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 537.095189][T12877] RAX: ffffffffffffffda RBX: 00007f64e2135f80 RCX: 00007f64e1f7dff9 [ 537.103173][T12877] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 537.111156][T12877] RBP: 00007f64e2d74090 R08: ffffffffffffffff R09: 0000000000000000 [ 537.119169][T12877] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000002 [ 537.127162][T12877] R13: 0000000000000000 R14: 00007f64e2135f80 R15: 00007ffc1bcf0fc8 [ 537.135162][T12877] [ 537.138721][T12877] Modules linked in: [ 537.142884][T12877] ---[ end trace 0000000000000000 ]--- [ 537.154168][T12877] RIP: 0010:page_table_check_clear+0x3a5/0x550 [ 537.160574][T12877] Code: 4a fd ff ff e8 dc 74 89 ff 90 0f 0b e8 d4 74 89 ff 90 0f 0b e8 cc 74 89 ff 90 0f 0b e8 c4 74 89 ff 90 0f 0b e8 bc 74 89 ff 90 <0f> 0b f3 0f 1e fa 4c 89 fe 48 81 e6 c0 0f 00 00 31 ff e8 84 79 89 [ 537.180734][T12877] RSP: 0018:ffffc90004aa71a0 EFLAGS: 00010293 [ 537.186845][T12877] RAX: ffffffff820b7294 RBX: ffff88801d43c098 RCX: ffff888066810000 [ 537.195064][T12877] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 537.203633][T12877] RBP: 00000000ffffffff R08: ffffffff820b7165 R09: 1ffff11003a87813 [ 537.212243][T12877] R10: dffffc0000000000 R11: ffffed1003a87814 R12: ffff88801d43c09c [ 537.220299][T12877] R13: ffff88801d43c050 R14: 1ffffffff34887b4 R15: 0000000000000001 [ 537.228340][T12877] FS: 00007f64e2d746c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 537.237584][T12877] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 537.244734][T12877] CR2: 00007fd9ba843e96 CR3: 0000000058498000 CR4: 00000000003526f0 [ 537.252831][T12877] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 537.260886][T12877] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 537.269266][T12877] Kernel panic - not syncing: Fatal exception [ 537.275494][T12877] Kernel Offset: disabled [ 537.279830][T12877] Rebooting in 86400 seconds..