last executing test programs: 8.709372765s ago: executing program 1 (id=789): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x8, 0x10, 0x9, 0x4, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xc9, 0x1, 0x3, [{@broadcast, 0xff}, {@local, 0xbfb0}, {@rand_addr=0x64010100, 0x39}, {@remote, 0x9932}]}, @lsrr={0x83, 0x17, 0x1b, [@local, @empty, @remote, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x8, 0x44, 0x0, 0x6, [0xfb]}, @generic={0x89, 0x10, "e52a1a0eaa71669455bb232841c9"}, @rr={0x7, 0x17, 0x4, [@loopback, @remote, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=@ipv6_getnetconf={0x4c, 0x52, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xfffffffd}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe}, @NETCONFA_IFINDEX={0x8}]}, 0x4c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r4}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) 8.486115849s ago: executing program 1 (id=794): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x2, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) 8.306197825s ago: executing program 1 (id=798): sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x90}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000000080)=0x10001, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000840)=ANY=[@ANYRES64=r1], &(0x7f0000000380)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000b00)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200000037153e370c040180060410004500", 0x2e}, {&(0x7f0000000100)="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", 0x407}], 0x2, 0x0, 0x0, 0x29000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000240)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r9, @ANYBLOB="0c0099000000000000000000140004006e696376663000000000000000"], 0x3c}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYRES16=r4, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x0, 0x3, 0x261, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) recvmmsg(r2, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.712304499s ago: executing program 4 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="034886dd010000000000400000006000000001002f00fe88a43de1a400000000000000007d01ff020000050000000000000000000001000022eb"], 0xfdef) 3.391940719s ago: executing program 4 (id=861): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fcffffffffffffab1e000100000000000000000000000000000000000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400"/112], 0xb8}}, 0x0) 3.173559563s ago: executing program 4 (id=865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0100001000130100000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001600001000000c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x14c}}, 0x0) 3.084124598s ago: executing program 4 (id=867): socket$kcm(0x21, 0x2, 0x2) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x4, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0xd8, "9c8715902e843a61788065edf63327c2ca8d68786ee058c3002c21b5ef690a740d4f2ee730216934d1f5725ba01f0e929618cfa8cafae5c46d43389e4e00ecaeb0c92b1a6df204d92a0be698bcc38a7f39dea8e87810e56905fe44ca45469810f37a62642d127edd7024738984536861ce894b46ecb2be8ddc3227fd77d2168ea87522623012fb593bef5761f987b8bfb1a87b41a61f4f2b68c69b97e9bdb4023d4c3203d28acc0739cf3a54a7dea6859fda31d89dee334f40ec3c3ffbc683e05abec24d54a6f08f40ffdb08bccb573936c57297b4b0957c"}, &(0x7f0000000080)=0xe0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000140)={r2, 0x7f}, &(0x7f0000000180)=0x8) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000080)=ANY=[@ANYBLOB='b ', @ANYRESOCT], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f00000000c0)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000680)=""/248, 0xf8}, {&(0x7f0000000780)=""/128, 0x80}], 0x2}, 0x1f00) sendmsg$tipc(r8, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r11, 0x8982, &(0x7f0000000180)={0x0, 'macsec0\x00'}) r12 = accept4(r3, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@typedef={0x8, 0x0, 0x0, 0x8, 0x2}, @volatile]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x2e]}}, &(0x7f0000000200)=""/201, 0x3b, 0xc9, 0x1}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r12, 0x89f0, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x7, 0x0, 0x7, 0x4, @empty, @local, 0x8000, 0x10, 0x1, 0x8001}}) 2.115619062s ago: executing program 4 (id=880): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x6, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$kcm(0x2, 0x7, 0x73) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x4}, 0x20) r3 = socket$inet6(0xa, 0x40000080806, 0x0) getsockopt$IP_SET_OP_VERSION(r3, 0x1, 0x53, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203000007000000001000000000000002000100000000000000000000000000030005000000000002001d0000ffffffff0000000000000000"], 0x38}, 0x1, 0x7}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x88}}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @loopback}}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x90) r6 = socket(0x400000000010, 0x3, 0x0) write(r6, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000cee0202001a000000", 0x33a) write$cgroup_devices(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='c *:* m '], 0x8) write$cgroup_devices(r5, &(0x7f0000000280)=ANY=[@ANYBLOB='a *:* wf'], 0x8) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES64, @ANYRES16=r4, @ANYRES8=r2], 0xf0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="3000000014000905000000000000000002190000", @ANYRES32=r10, @ANYBLOB="0800ff30ac1414aa08000400e000000208000800150a92ac"], 0x30}}, 0x0) 1.837368678s ago: executing program 4 (id=882): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bind$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c"], 0x28) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000140), 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[], 0x3c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0xc3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x400448ca, 0x0) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000000)={0x0, 0x0, "97dded"}) write$binfmt_misc(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="73ffffffff40ca0130cf55cec0c91c"], 0xf) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'team_slave_1\x00'}) socket$inet_sctp(0x2, 0x5, 0x84) 1.386560756s ago: executing program 2 (id=885): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fcffffffffffffab1e000100000000000000000000000000000000000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffff8000"/112], 0xb8}}, 0x0) 1.385502671s ago: executing program 1 (id=886): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, 0x0, &(0x7f0000000280)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r2) syz_emit_ethernet(0x3b6, &(0x7f0000000d00)={@random="ba652685c741", @remote, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff06732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f9af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a04084cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de520700d3f5a84ceed38f42b31f63001effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb82e80c9331abb8f2ea05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2da93e44547fce9f3a1aa374ca42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb63"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f00000001c0), 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x88}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) 1.301183215s ago: executing program 2 (id=887): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x4380000, @remote}, 0x1c) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000040)=[@op={0x10, 0x29, 0x4}], 0x18}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000032c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x84}}, 0x0) socket$rxrpc(0x21, 0x2, 0xa) connect$802154_dgram(r2, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'macvtap0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x24, 0x0, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffffa}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x4011) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="93630100200501001c00128009000100766c616e000000000c00028006000100000000000800", @ANYRES32=r8, @ANYBLOB='\b'], 0x4c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6_vti0\x00', 0x0, 0x2f, 0x20, 0x2, 0x7ff, 0x2b, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0xd}, 0x6, 0x40, 0x200, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x2, 0x39c4, 0x11, @private0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x700, 0x8, 0x800, 0x800}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000004c0)={'erspan0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x2, 0x400, {{0x8, 0x4, 0x1, 0x20, 0x20, 0x68, 0x0, 0x8, 0x2f, 0x0, @empty, @loopback, {[@timestamp_addr={0x44, 0xc, 0xb9, 0x1, 0xe, [{@rand_addr=0x64010100, 0x7fff}]}]}}}}}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYBLOB="54010000", @ANYRES16=0x0, @ANYBLOB="08002abd7000ffdbdf250600000054000180140002006272696467655f736c6176655f31000008000100", @ANYRES32=r4, @ANYBLOB="0800030002000000080003000200000008000300d99f94e008000100", @ANYRES32=r5, @ANYBLOB="1400020073797a5f74756e00000000000000000034000180140002007866726d30000000000000000000000014000200626f6e645f736c6176655f31000000000800030000000000540001800800030000000000080003000100000008000100", @ANYRES32=r8, @ANYBLOB="1400020070696d3fa3cef7cfc66d6d33f189bde3b7db0b30eac872656700000000000100", @ANYRES32=r9, @ANYBLOB="1400020076657468315f766972745f776966690008000300020000001800018014000200776c616e3000000000000000000000004c00018008000100", @ANYRES32=r10, @ANYBLOB="08000300010000001400020069703665727370616e300000000000000800030003000000140002007665746830000000000000000000000008000100", @ANYRES32=r11, @ANYBLOB], 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x40d0) sendmsg$802154_dgram(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004000) r12 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r12, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.146400652s ago: executing program 2 (id=889): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfffffffd, 0xb}}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 982.325165ms ago: executing program 0 (id=891): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000500)="91", 0x0}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) unshare(0x4000400) syz_emit_ethernet(0xea, &(0x7f0000000940)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x1f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd00, 0x0, 0x1}], @ipv4=@icmp={{0x32, 0x4, 0x0, 0x27, 0xd0, 0x66, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x0, 0xcc, 0x1, 0x5, [{@private=0xa010102, 0x401}, {@broadcast, 0x8001}, {@remote, 0x6}, {@multicast1, 0xdd93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@broadcast, 0x9c}, {@remote, 0xd3a}]}, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0xe, [{@rand_addr=0x64010101, 0x5}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x22}, {@broadcast}, {@multicast1, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x12, "2d12dd593f3b2dd942a53a0df1c535f5"}]}, @rr={0x7, 0xffffffffffffff2c, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@rand_addr=0x64010101, 0xb7}, {@local, 0x80000000}, {@private=0xa010102, 0x3ff}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xa0, 0x0, 0xc}, @end]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xed1, 0x32f, 0xfd, 0x8e]}) socket(0x2, 0x80805, 0x0) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 980.750961ms ago: executing program 1 (id=892): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0), 0x48) (async) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x8, 0x6, 0x620, 0x0, 0x240, 0x338, 0xd0, 0xd0, 0x550, 0x550, 0x550, 0x550, 0x550, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x148, 0x170, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'erspan0\x00', {}, 'netpci0\x00', {}, 0x14, 0x15}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x680) r3 = accept4(r1, 0x0, 0x0, 0x0) (async) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x5}]}, 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRESHEX, @ANYRES8=r0, @ANYRES8=0x0, @ANYRESHEX, @ANYBLOB], 0xfffffdef}, 0x1, 0x0, 0x0, 0x40010}, 0x811) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/46, 0x2e, 0x1, &(0x7f0000000080)=""/13, 0xd}, &(0x7f00000001c0)=0x40) (async) socket(0x10, 0x803, 0x0) (async) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r7, r8, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r7, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$MAP_UPDATE_BATCH(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000}, 0x38) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r10, 0x0, 0x6a) (async) splice(r5, 0x0, r10, 0x0, 0x8ec3, 0x0) (async) readv(r9, &(0x7f0000000080)=[{&(0x7f00000078c0)=""/110, 0x6e}], 0x1) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x800, 0x0) (async) write$binfmt_elf64(r6, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 915.326638ms ago: executing program 2 (id=893): r0 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000008c0)={'syztnl1\x00', &(0x7f0000000800)={'sit0\x00', 0x0, 0x8, 0x10, 0x9, 0x4, {{0x20, 0x4, 0x0, 0x2, 0x80, 0x65, 0x0, 0x4, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x24, 0xc9, 0x1, 0x3, [{@broadcast, 0xff}, {@local, 0xbfb0}, {@rand_addr=0x64010100, 0x39}, {@remote, 0x9932}]}, @lsrr={0x83, 0x17, 0x1b, [@local, @empty, @remote, @private=0xa010101, @multicast1]}, @timestamp={0x44, 0x8, 0x44, 0x0, 0x6, [0xfb]}, @generic={0x89, 0x10, "e52a1a0eaa71669455bb232841c9"}, @rr={0x7, 0x17, 0x4, [@loopback, @remote, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) socket(0x10, 0x803, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000900)=@ipv6_getnetconf={0x4c, 0x52, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0xfffffffd}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x10001}, @NETCONFA_IFINDEX={0x8, 0x1, r1}, @NETCONFA_IFINDEX={0x8, 0x1, r2}, @NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x5}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xe}, @NETCONFA_IFINDEX={0x8}]}, 0x4c}}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x1000}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newlink={0x2c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x3, r4}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r6, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) 861.229799ms ago: executing program 0 (id=894): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, 0x0}}], 0x1, 0x20000080) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x30, 0x0, 0x0, 0x101}, {0x6}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x0, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0, 0x200}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) ioctl$FIONCLEX(0xffffffffffffffff, 0x5450) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xffffffffffffff53) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000006c0)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/10, 0xa, 0x0, &(0x7f0000000200)=""/20, 0x14}, &(0x7f0000000640)=0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000440)={0x0, 0xa3, "9f8ab11606f1721f7de8a09ba20085d52a55a0ae64a02a7f16e8e742a073cfdfed8c49bb286557d2ed933b37ef2e8547076ec5b764d68e885b69bdbcedf814435fe98274d97baf6547c1fba7526331ac8570bc4c09d9f2d6ef6b73e04e5baed7b0ccffc49688615dcadce461ca6d14a7d29812335543389749fafecef98a74bf9337920e6137b7f477922f71792c997b3841dd3a45e178ee2355fd24da7f073867a0b5"}, &(0x7f0000000000)=0xab) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000740), r5) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01b821e600000000000000000039000000081f002f1e5d6712659af713", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x5814}, 0x10) 794.710729ms ago: executing program 3 (id=895): socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="14005080070009007000a4930500020094021b70dd8120ac00000000ef916a041488301930eb860f02749bc58549"], 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) 710.845866ms ago: executing program 1 (id=896): sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd020f4c0c8c56147d66527da307bf731fef97861750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3665f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447c2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0000000000000003629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d7b90dfae158b94f50adab988dd8e12b1b56073d0d10f7067c881434af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf77bfc95769a9294df517d90bdc01e73835efd98ad5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b31592479ecf2392548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e5dee734fe7da3770845cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbe1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5646ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4766e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec859c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f250057931d828ec78e116ae46c4897e2795b6ff92e9a1f63a6ed8fb4f8f3a6ec4e76f8621e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403f02734137ff47257f164391c673b6071b6ad0f05eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f5589829b6b0679b5d65a81826fc9b38f791c8f1892b51ad65a89bc84646ebf78f5d5d4804d9abb071fd711b5e7cc163b42a6510b8f5ee6747df0b560eabe0499bf1fef7c18bb9f55effa018679845c6598fb78bf1b8d9d9f04a5f6062c2bbb91952755b3f7c948268cb647d0a0bb1286480615941154a01d23734bcafe3b164474e2f2efa77850686ee4541f3e79efa63545a7ae53d5f0c40cc86473f7eb093980bd0d97bb4750128d9c519984c5f731ea259e71b2f12d67ce12e52c283e74594dfc933e625737ed231d61263721d46daf093f770357cd78fe1431aef52b4a0a933f1a5334ad03f3876fc8a8e187f80318427b4c922075cf829e3cc49d71d52137b48e1fb6b05dd1c7b251a7059f0a4b4f3431f67fc65b75c202e43816e34ff41db85bacd77b25242830b788ae1e00"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000040), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 709.965164ms ago: executing program 2 (id=897): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000068000301000000ef0000000000000000000000000600030000000000080001000000000024000200020000000000000000000000000000000100000000000000fc"], 0x4c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001000)={0x6c, r3, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x50, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x24, 0x9, 0x0, 0x1, [{0x4}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}]}]}]}, 0x6c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f00000014c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000300000000000000000000000000000000000000000000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0800050000000000"], 0x58}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000007d2631e98e3d9dc1f156431b26000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, 0x0, 0x5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r4}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x20, 0x5, 0x12, @private1, @local, 0x20, 0x20, 0x3ff, 0x1}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r7, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r7, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$sock(r7, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x24, &(0x7f0000003440), 0x0, &(0x7f0000005580)=[@txtime={{0x0, 0x1, 0x3d, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0xfff}}, @mark={{0x0, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @timestamping={{0x0, 0x1, 0x25, 0x401}}], 0xc0}, 0x8001) sendfile(r7, r6, 0x0, 0xffefffff) ioctl$SIOCSIFHWADDR(r6, 0x4030582b, &(0x7f0000003400)={'pim6reg1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000014400"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b0001006d616373656300000c0002800500080000000000"], 0x3c}}, 0x0) 670.194189ms ago: executing program 3 (id=898): close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r2, &(0x7f0000000c40)=[{{&(0x7f00000002c0)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000740)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x0, 0x0, 0x0, 0xe, @in={0x2, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) 569.129573ms ago: executing program 0 (id=899): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@delchain={0x64, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x0, 0x0, 0x0, {{}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}]}]}]}}]}, 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r3 = socket(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r4, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private}, @address_request}}}}, 0x0) write(r2, &(0x7f00000003c0)="35424bd9aae40b894106a13b61dde42aebdd2a2610da97e5ed0bb9cbcbf5f160e430040f203d7bdfb28c1644c04c5c360b6d73b74273df1a4b1d4ecd2cca80a0c339dd878fd2a314", 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r5, 0x200, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44840}, 0x40040b0) sendto$inet(r4, 0x0, 0x0, 0x1, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f00000001c0)={0x0, 'lo\x00'}) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x40044) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'lo\x00'}]}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7f2221c5}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x61d7ad33}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1a478f13}, @NFTA_HOOK_DEV={0x14, 0x3, 'syzkaller0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2034b956}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x545aa1fa}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_SOCKET_KEY={0x8}]}}}]}]}], {0x14}}, 0x140}}, 0x4001) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r7, &(0x7f0000000000)="2e000300010002", 0x7) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_MODE={0xa, 0x2, {0x0, 0x1fefb53147de90eb}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) setsockopt$TIPC_CONN_TIMEOUT(r8, 0x10f, 0x8a, &(0x7f00000000c0), 0x4) 503.65381ms ago: executing program 3 (id=900): socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x14}}, 0x0) unshare(0xc040400) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e21}, 0x25, 0x0}}], 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000005300f40c0000220c000000020000000000000000000006040000000000"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$kcm(r0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x1e, 0x8, 0x1, 0x5, 0x40, 0xffffffffffffffff, 0x1, '\x00', r5, r4, 0x5, 0x2, 0x2, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd50, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, 0x0, 0x0) accept4(r9, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r9, 0x40189429, &(0x7f0000000040)={0x1, 0x0, 0x2e9940}) close(r8) 434.411988ms ago: executing program 0 (id=901): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) 369.364509ms ago: executing program 3 (id=902): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB], 0x20}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0) r8 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv0\x00', 0x5}) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000066c0), 0xa0d, 0x60000000, 0x0) 306.338658ms ago: executing program 0 (id=903): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x49, 0x0, &(0x7f0000000280)) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x2f) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) close(r2) syz_emit_ethernet(0x3b6, &(0x7f0000000d00)={@random="ba652685c741", @remote, @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x37c, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff06732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f9af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a04084cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de520700d3f5a84ceed38f42b31f63001effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb82e80c9331abb8f2ea05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "b8a3e100908f61640000000200000000000000000000000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2da93e44547fce9f3a1aa374ca42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb63"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r5, 0x0, 0xce, &(0x7f00000001c0), 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x88}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20\x00'}, 0x58) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) 212.550279ms ago: executing program 3 (id=904): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000500)="91", 0x0}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) unshare(0x4000400) syz_emit_ethernet(0xea, &(0x7f0000000940)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x1f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd00, 0x0, 0x1}], @ipv4=@icmp={{0x32, 0x4, 0x0, 0x27, 0xd0, 0x66, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x0, 0xcc, 0x1, 0x5, [{@private=0xa010102, 0x401}, {@broadcast, 0x8001}, {@remote, 0x6}, {@multicast1, 0xdd93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@broadcast, 0x9c}, {@remote, 0xd3a}]}, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0xe, [{@rand_addr=0x64010101, 0x5}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x22}, {@broadcast}, {@multicast1, 0x1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x12, "2d12dd593f3b2dd942a53a0df1c535f5"}]}, @rr={0x7, 0xffffffffffffff2c, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@rand_addr=0x64010101, 0xb7}, {@local, 0x80000000}, {@private=0xa010102, 0x3ff}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xa0, 0x0, 0xc}, @end]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xed1, 0x32f, 0xfd, 0x8e]}) socket(0x2, 0x80805, 0x0) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 64.955362ms ago: executing program 3 (id=905): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x8040480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000240)=""/202, 0xfffffffffffffdef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, &(0x7f0000000500)="91", 0x0}, 0x20) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) unshare(0x4000400) syz_emit_ethernet(0x11a, &(0x7f0000000940)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[{0x1f, 0x0, 0x1}, {0x8001, 0x0, 0x1}, {0xd00, 0x0, 0x1}], @ipv4=@icmp={{0x3e, 0x4, 0x0, 0x27, 0x100, 0x66, 0x0, 0x0, 0x1, 0x0, @empty, @private=0xa010102, {[@timestamp_addr={0x44, 0x34, 0xcc, 0x1, 0x5, [{@private=0xa010102, 0x401}, {@broadcast, 0x8001}, {@remote, 0x6}, {@multicast1, 0xdd93}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@broadcast, 0x9c}]}, @timestamp_prespec={0x44, 0x3c, 0xb3, 0x3, 0xe, [{@rand_addr=0x64010101, 0x5}, {@multicast2, 0x200}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x22}, {@broadcast, 0x8000}, {@multicast1}, {@remote, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @cipso={0x86, 0x1c, 0x2, [{0x0, 0x2}, {0x0, 0x2}, {0x0, 0x12, "2d12dd593f3b2dd942a53a0df1c535f5"}]}, @rr={0x7, 0x1b, 0xd1, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote]}, @timestamp_addr={0x44, 0x34, 0x84, 0x1, 0x0, [{@rand_addr=0x64010101, 0xb7}, {@local, 0x80000000}, {@private=0xa010102, 0x3ff}, {@remote, 0x80000000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000}, {@multicast1, 0x5}]}, @ra={0x94, 0x4}, @timestamp={0x44, 0x4, 0xa0, 0x0, 0xc}, @end]}}, @address_request={0x11, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x1, 0x3, [0xed1, 0x32f, 0xfd, 0x8e]}) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000580)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e20, 0x21a446c0, @empty, 0xaa}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x18) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000140)=ANY=[@ANYBLOB="000000e900000000"], 0x8) socket$xdp(0x2c, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f00000001c0)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000004c0)=0x20) write(r0, &(0x7f0000000340)="07000000010000", 0x7) 11.124959ms ago: executing program 0 (id=906): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) writev(r0, &(0x7f0000007c40)=[{&(0x7f0000007740)}, {0x0}], 0x2) 0s ago: executing program 2 (id=907): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000000)=0x10002, 0x4) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) socket$alg(0x26, 0x5, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0xffffffffffffffff, 0x401, 0x18}, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xc}]}}]}, 0x94}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x11, 0x0, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) setsockopt$netlink_NETLINK_CAP_ACK(r4, 0x10e, 0xa, &(0x7f0000000080)=0x601, 0x4) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x14, r5, 0x1, 0x0, 0x0, {0x23}}, 0x14}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x158, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x10}, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x5, 0xe, 0x0, &(0x7f0000000000)="259a53f271a76d2610054c6588a8", 0x0, 0x5, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x10000000013, &(0x7f0000000100)=0x1, 0x47f) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x4e21}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x4e21}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.176' (ED25519) to the list of known hosts. [ 53.446899][ T5213] cgroup: Unknown subsys name 'net' [ 53.642311][ T5213] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.011115][ T5213] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.433447][ T5235] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.442796][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.451172][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.460918][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.468770][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.484776][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.491189][ T5235] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.500547][ T5235] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.504659][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.508246][ T5235] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.522952][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.523380][ T5235] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.537779][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.538691][ T5235] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.551428][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.552847][ T5235] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.560184][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.573854][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.576246][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.581160][ T5235] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.588636][ T5242] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.604972][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.609543][ T5242] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.612183][ T4619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.620830][ T5242] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.634903][ T4619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.637956][ T5242] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.644830][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.657216][ T5230] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.666905][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 59.132446][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 59.272720][ T5233] chnl_net:caif_netlink_parms(): no params data found [ 59.298287][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 59.379530][ T5226] chnl_net:caif_netlink_parms(): no params data found [ 59.391014][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.398747][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.406298][ T5224] bridge_slave_0: entered allmulticast mode [ 59.413074][ T5224] bridge_slave_0: entered promiscuous mode [ 59.471668][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.481483][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.489167][ T5224] bridge_slave_1: entered allmulticast mode [ 59.496819][ T5224] bridge_slave_1: entered promiscuous mode [ 59.590706][ T5223] chnl_net:caif_netlink_parms(): no params data found [ 59.603938][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.617078][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.635890][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.643084][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.650496][ T5233] bridge_slave_0: entered allmulticast mode [ 59.657502][ T5233] bridge_slave_0: entered promiscuous mode [ 59.665641][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.672777][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.680896][ T5233] bridge_slave_1: entered allmulticast mode [ 59.688228][ T5233] bridge_slave_1: entered promiscuous mode [ 59.720424][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.727775][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.735510][ T5225] bridge_slave_0: entered allmulticast mode [ 59.742244][ T5225] bridge_slave_0: entered promiscuous mode [ 59.749833][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.757133][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.765060][ T5225] bridge_slave_1: entered allmulticast mode [ 59.772465][ T5225] bridge_slave_1: entered promiscuous mode [ 59.830595][ T5224] team0: Port device team_slave_0 added [ 59.860720][ T5233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.873089][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.886001][ T5226] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.893179][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.900841][ T5226] bridge_slave_0: entered allmulticast mode [ 59.907891][ T5226] bridge_slave_0: entered promiscuous mode [ 59.916573][ T5226] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.924412][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.931669][ T5226] bridge_slave_1: entered allmulticast mode [ 59.938823][ T5226] bridge_slave_1: entered promiscuous mode [ 59.958503][ T5224] team0: Port device team_slave_1 added [ 59.978460][ T5233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.999344][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.083070][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.090682][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.118630][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.133905][ T5233] team0: Port device team_slave_0 added [ 60.144770][ T5225] team0: Port device team_slave_0 added [ 60.153135][ T5226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.165995][ T5226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.188961][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.196652][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.222873][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.241503][ T5233] team0: Port device team_slave_1 added [ 60.259153][ T5225] team0: Port device team_slave_1 added [ 60.313142][ T5223] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.320942][ T5223] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.328239][ T5223] bridge_slave_0: entered allmulticast mode [ 60.336505][ T5223] bridge_slave_0: entered promiscuous mode [ 60.352304][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.360113][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.386661][ T5233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.413236][ T5226] team0: Port device team_slave_0 added [ 60.420725][ T5223] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.428557][ T5223] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.435934][ T5223] bridge_slave_1: entered allmulticast mode [ 60.442630][ T5223] bridge_slave_1: entered promiscuous mode [ 60.473542][ T5233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.480792][ T5233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.507137][ T5233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.536717][ T5226] team0: Port device team_slave_1 added [ 60.552413][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.562168][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.588578][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.601531][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.609434][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.635690][ T5243] Bluetooth: hci1: command tx timeout [ 60.635773][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.676338][ T5223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.717688][ T5243] Bluetooth: hci2: command tx timeout [ 60.719045][ T5224] hsr_slave_0: entered promiscuous mode [ 60.723400][ T5243] Bluetooth: hci0: command tx timeout [ 60.734260][ T5232] Bluetooth: hci4: command tx timeout [ 60.744003][ T5224] hsr_slave_1: entered promiscuous mode [ 60.772955][ T5223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.794292][ T5244] Bluetooth: hci3: command tx timeout [ 60.799097][ T5233] hsr_slave_0: entered promiscuous mode [ 60.806703][ T5233] hsr_slave_1: entered promiscuous mode [ 60.812900][ T5233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.820928][ T5233] Cannot create hsr debugfs directory [ 60.842056][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.849253][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.875327][ T5226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.888329][ T5226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.895413][ T5226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.921621][ T5226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.960907][ T5225] hsr_slave_0: entered promiscuous mode [ 60.967367][ T5225] hsr_slave_1: entered promiscuous mode [ 60.975055][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.982636][ T5225] Cannot create hsr debugfs directory [ 61.010360][ T5223] team0: Port device team_slave_0 added [ 61.068603][ T5223] team0: Port device team_slave_1 added [ 61.147797][ T5226] hsr_slave_0: entered promiscuous mode [ 61.156024][ T5226] hsr_slave_1: entered promiscuous mode [ 61.162360][ T5226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.170027][ T5226] Cannot create hsr debugfs directory [ 61.204236][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.211447][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.237885][ T5223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.278445][ T5223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.286051][ T5223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.312092][ T5223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.531189][ T5223] hsr_slave_0: entered promiscuous mode [ 61.537591][ T5223] hsr_slave_1: entered promiscuous mode [ 61.543741][ T5223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.551465][ T5223] Cannot create hsr debugfs directory [ 61.693560][ T5224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.732174][ T5224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.742263][ T5224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.766313][ T5224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.827326][ T5226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.842761][ T5226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.856219][ T5226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.875629][ T5226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.943471][ T5233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.953294][ T5233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.979239][ T5233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.001147][ T5233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.071814][ T5223] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.082516][ T5223] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.093414][ T5223] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.113051][ T5223] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.217948][ T5225] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.229635][ T5225] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.240751][ T5225] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.252109][ T5225] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.309727][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.337480][ T5226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.393346][ T5226] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.455457][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.466692][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.474017][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.487979][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.495133][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.533513][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.540684][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.562231][ T5233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.598578][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.605758][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.639597][ T5223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.712965][ T5226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.724387][ T5244] Bluetooth: hci1: command tx timeout [ 62.737709][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.749530][ T5233] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.768017][ T5223] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.792127][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.794380][ T5244] Bluetooth: hci4: command tx timeout [ 62.799560][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.812472][ T5244] Bluetooth: hci0: command tx timeout [ 62.813219][ T5232] Bluetooth: hci2: command tx timeout [ 62.828506][ T5278] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.835912][ T5278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.863846][ T5278] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.871068][ T5278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.874557][ T5244] Bluetooth: hci3: command tx timeout [ 62.918992][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.926281][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.999631][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.085195][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.092318][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.138343][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.145558][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.237963][ T5226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.421870][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.540772][ T5233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.629646][ T5223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.704180][ T5224] veth0_vlan: entered promiscuous mode [ 63.731716][ T5233] veth0_vlan: entered promiscuous mode [ 63.799891][ T5233] veth1_vlan: entered promiscuous mode [ 63.810749][ T5223] veth0_vlan: entered promiscuous mode [ 63.826944][ T5224] veth1_vlan: entered promiscuous mode [ 63.846145][ T5223] veth1_vlan: entered promiscuous mode [ 63.906898][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.936448][ T5223] veth0_macvtap: entered promiscuous mode [ 63.947157][ T5223] veth1_macvtap: entered promiscuous mode [ 63.996123][ T5226] veth0_vlan: entered promiscuous mode [ 64.029763][ T5224] veth0_macvtap: entered promiscuous mode [ 64.039622][ T5226] veth1_vlan: entered promiscuous mode [ 64.054837][ T5233] veth0_macvtap: entered promiscuous mode [ 64.063038][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.071776][ T5224] veth1_macvtap: entered promiscuous mode [ 64.102185][ T5233] veth1_macvtap: entered promiscuous mode [ 64.131600][ T5223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.145732][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.157499][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.170192][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.188920][ T5226] veth0_macvtap: entered promiscuous mode [ 64.202333][ T5223] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.212161][ T5223] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.221218][ T5223] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.230706][ T5223] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.247837][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.258592][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.268850][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.279314][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.290364][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.300503][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.311280][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.327763][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.346403][ T5225] veth0_vlan: entered promiscuous mode [ 64.354692][ T5224] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.363418][ T5224] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.372595][ T5224] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.381691][ T5224] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.404020][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.415458][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.428453][ T5233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.439331][ T5233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.451827][ T5233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.483909][ T5233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.493995][ T5233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.503330][ T5233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.512133][ T5233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.522962][ T5226] veth1_macvtap: entered promiscuous mode [ 64.531824][ T5225] veth1_vlan: entered promiscuous mode [ 64.618869][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.638446][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.648808][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.661123][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.671092][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.681582][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.693205][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.731141][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.748588][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.758734][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.770056][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.780536][ T5226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.791265][ T5226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.794843][ T5244] Bluetooth: hci1: command tx timeout [ 64.803417][ T5226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.818150][ T5226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.827234][ T5226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.836482][ T5226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.845436][ T5226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.874941][ T5244] Bluetooth: hci0: command tx timeout [ 64.874960][ T5232] Bluetooth: hci2: command tx timeout [ 64.874994][ T5232] Bluetooth: hci4: command tx timeout [ 64.920550][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.932950][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.954803][ T5232] Bluetooth: hci3: command tx timeout [ 64.980755][ T5225] veth0_macvtap: entered promiscuous mode [ 65.028552][ T5225] veth1_macvtap: entered promiscuous mode [ 65.043652][ T1058] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.053324][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.063092][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.064350][ T1058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.137438][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.152731][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.163799][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.174918][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.185162][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.196889][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.206965][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.218534][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.230732][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.243398][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.243670][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.266275][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.269616][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.283996][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.294930][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.304970][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.315688][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.326629][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.337375][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.349501][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.412445][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.416177][ T5225] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.429395][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.437880][ T5225] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.451936][ T5225] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.461150][ T5225] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.533839][ T5313] Zero length message leads to an empty skb [ 65.540046][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.543617][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.548794][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.576729][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.725050][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.782298][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.790547][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.819429][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.992159][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.047075][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.345044][ T5330] Illegal XDP return value 2174631402 on prog (id 3) dev N/A, expect packet loss! [ 66.366813][ T5340] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.604819][ T5354] netlink: 'syz.0.10': attribute type 1 has an invalid length. [ 66.620157][ T5354] netlink: 9348 bytes leftover after parsing attributes in process `syz.0.10'. [ 66.633315][ T5355] FAULT_INJECTION: forcing a failure. [ 66.633315][ T5355] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 66.648953][ T5355] CPU: 1 UID: 0 PID: 5355 Comm: syz.1.12 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 66.659166][ T5355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 66.669247][ T5355] Call Trace: [ 66.672525][ T5355] [ 66.675458][ T5355] dump_stack_lvl+0x241/0x360 [ 66.680183][ T5355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.685422][ T5355] ? __pfx__printk+0x10/0x10 [ 66.690018][ T5355] ? __pfx_lock_release+0x10/0x10 [ 66.695131][ T5355] should_fail_ex+0x3b0/0x4e0 [ 66.699808][ T5355] _copy_to_user+0x2f/0xb0 [ 66.704219][ T5355] ip_mroute_getsockopt+0x4e5/0x770 [ 66.709415][ T5355] ? __pfx_ip_mroute_getsockopt+0x10/0x10 [ 66.715131][ T5355] ? mark_lock+0x9a/0x350 [ 66.719470][ T5355] do_ip_getsockopt+0x264/0x2940 [ 66.724403][ T5355] ? __lock_acquire+0x137a/0x2040 [ 66.729468][ T5355] ? aa_label_sk_perm+0x4f0/0x6d0 [ 66.734492][ T5355] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 66.739861][ T5355] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 66.745239][ T5355] ? get_pid_task+0x23/0x1f0 [ 66.749829][ T5355] ? __pfx___might_resched+0x10/0x10 [ 66.755112][ T5355] ? __lock_acquire+0x137a/0x2040 [ 66.760141][ T5355] ? aa_sk_perm+0x967/0xab0 [ 66.764644][ T5355] ip_getsockopt+0xed/0x2e0 [ 66.769150][ T5355] ? __pfx_ip_getsockopt+0x10/0x10 [ 66.774255][ T5355] ? __pfx_lock_acquire+0x10/0x10 [ 66.779273][ T5355] ? aa_sock_opt_perm+0x79/0x120 [ 66.784213][ T5355] ? sock_common_getsockopt+0x2e/0xb0 [ 66.789607][ T5355] ? raw_getsockopt+0xca/0x1e0 [ 66.794387][ T5355] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 66.800277][ T5355] do_sock_getsockopt+0x373/0x850 [ 66.805306][ T5355] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 66.810857][ T5355] ? __fget_files+0x3f6/0x470 [ 66.815537][ T5355] __sys_getsockopt+0x271/0x330 [ 66.820735][ T5355] ? __pfx___sys_getsockopt+0x10/0x10 [ 66.826103][ T5355] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.832433][ T5355] ? do_syscall_64+0x100/0x230 [ 66.837194][ T5355] __x64_sys_getsockopt+0xb5/0xd0 [ 66.842217][ T5355] do_syscall_64+0xf3/0x230 [ 66.846717][ T5355] ? clear_bhb_loop+0x35/0x90 [ 66.851391][ T5355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.857291][ T5355] RIP: 0033:0x7fbaa89773b9 [ 66.861723][ T5355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.881418][ T5355] RSP: 002b:00007fbaa978b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 66.889838][ T5355] RAX: ffffffffffffffda RBX: 00007fbaa8b05f80 RCX: 00007fbaa89773b9 [ 66.897805][ T5355] RDX: 00000000000000ce RSI: 0000000000000000 RDI: 0000000000000003 [ 66.905774][ T5355] RBP: 00007fbaa978b0a0 R08: 0000000020000080 R09: 0000000000000000 [ 66.913735][ T5355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.921697][ T5355] R13: 000000000000000b R14: 00007fbaa8b05f80 R15: 00007fffa3d9f7a8 [ 66.929676][ T5355] [ 66.951727][ T5232] Bluetooth: hci1: command tx timeout [ 66.958561][ T5232] Bluetooth: hci0: command tx timeout [ 66.963996][ T5232] Bluetooth: hci2: command tx timeout [ 66.969898][ T5232] Bluetooth: hci4: command tx timeout [ 66.979933][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 67.035463][ T5243] Bluetooth: hci3: command tx timeout [ 67.194268][ T5362] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.653677][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19'. [ 67.885339][ T5392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.983907][ T5397] netlink: 120 bytes leftover after parsing attributes in process `syz.3.27'. [ 68.016129][ T5394] netlink: 32 bytes leftover after parsing attributes in process `syz.0.26'. [ 68.086466][ T5400] FAULT_INJECTION: forcing a failure. [ 68.086466][ T5400] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.122496][ T5400] CPU: 0 UID: 0 PID: 5400 Comm: syz.4.29 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 68.132901][ T5400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 68.134435][ T5403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 68.142956][ T5400] Call Trace: [ 68.142974][ T5400] [ 68.142983][ T5400] dump_stack_lvl+0x241/0x360 [ 68.143014][ T5400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.167738][ T5400] ? __pfx__printk+0x10/0x10 [ 68.172343][ T5400] should_fail_ex+0x3b0/0x4e0 [ 68.177032][ T5400] _copy_to_user+0x2f/0xb0 [ 68.181448][ T5400] copy_to_sockptr+0x65/0xa0 [ 68.186041][ T5400] ip_mroute_getsockopt+0x461/0x770 [ 68.191240][ T5400] ? __pfx_ip_mroute_getsockopt+0x10/0x10 [ 68.196955][ T5400] ? mark_lock+0x9a/0x350 [ 68.201281][ T5400] do_ip_getsockopt+0x264/0x2940 [ 68.206214][ T5400] ? __lock_acquire+0x137a/0x2040 [ 68.211239][ T5400] ? aa_label_sk_perm+0x4f0/0x6d0 [ 68.216355][ T5400] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 68.221750][ T5400] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 68.227142][ T5400] ? get_pid_task+0x23/0x1f0 [ 68.231731][ T5400] ? __pfx___might_resched+0x10/0x10 [ 68.237013][ T5400] ? __lock_acquire+0x137a/0x2040 [ 68.242042][ T5400] ? aa_sk_perm+0x967/0xab0 [ 68.246541][ T5400] ip_getsockopt+0xed/0x2e0 [ 68.251040][ T5400] ? __pfx_ip_getsockopt+0x10/0x10 [ 68.256152][ T5400] ? __pfx_lock_acquire+0x10/0x10 [ 68.261186][ T5400] ? aa_sock_opt_perm+0x79/0x120 [ 68.266205][ T5400] ? sock_common_getsockopt+0x2e/0xb0 [ 68.271576][ T5400] ? raw_getsockopt+0xca/0x1e0 [ 68.276354][ T5400] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 68.282254][ T5400] do_sock_getsockopt+0x373/0x850 [ 68.287280][ T5400] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 68.292819][ T5400] ? __fget_files+0x3f6/0x470 [ 68.297499][ T5400] __sys_getsockopt+0x271/0x330 [ 68.302347][ T5400] ? __pfx___sys_getsockopt+0x10/0x10 [ 68.307805][ T5400] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.314131][ T5400] ? do_syscall_64+0x100/0x230 [ 68.318890][ T5400] __x64_sys_getsockopt+0xb5/0xd0 [ 68.323942][ T5400] do_syscall_64+0xf3/0x230 [ 68.328460][ T5400] ? clear_bhb_loop+0x35/0x90 [ 68.333246][ T5400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.339317][ T5400] RIP: 0033:0x7f8e595773b9 [ 68.343727][ T5400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.363415][ T5400] RSP: 002b:00007f8e5a42e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 68.371825][ T5400] RAX: ffffffffffffffda RBX: 00007f8e59705f80 RCX: 00007f8e595773b9 [ 68.379787][ T5400] RDX: 00000000000000ce RSI: 0000000000000000 RDI: 0000000000000003 [ 68.387749][ T5400] RBP: 00007f8e5a42e0a0 R08: 0000000020000080 R09: 0000000000000000 [ 68.395708][ T5400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.403666][ T5400] R13: 000000000000000b R14: 00007f8e59705f80 R15: 00007ffd41b080b8 [ 68.411640][ T5400] [ 68.978165][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 69.095244][ T5433] netlink: 120 bytes leftover after parsing attributes in process `syz.3.41'. [ 69.450836][ T5449] FAULT_INJECTION: forcing a failure. [ 69.450836][ T5449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.492241][ T5449] CPU: 0 UID: 0 PID: 5449 Comm: syz.4.48 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 69.502464][ T5449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 69.512633][ T5449] Call Trace: [ 69.515933][ T5449] [ 69.518881][ T5449] dump_stack_lvl+0x241/0x360 [ 69.523593][ T5449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.526621][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 69.528806][ T5449] ? __pfx__printk+0x10/0x10 [ 69.528855][ T5449] ? snprintf+0xda/0x120 [ 69.538535][ T5455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 69.542286][ T5449] should_fail_ex+0x3b0/0x4e0 [ 69.542322][ T5449] _copy_to_user+0x2f/0xb0 [ 69.564420][ T5449] simple_read_from_buffer+0xca/0x150 [ 69.570089][ T5449] proc_fail_nth_read+0x1e9/0x250 [ 69.575148][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.580811][ T5449] ? rw_verify_area+0x520/0x6b0 [ 69.585681][ T5449] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 69.591269][ T5449] vfs_read+0x204/0xbc0 [ 69.595449][ T5449] ? __pfx_lock_release+0x10/0x10 [ 69.600496][ T5449] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 69.606422][ T5449] ? __pfx_vfs_read+0x10/0x10 [ 69.611121][ T5449] ? __fget_files+0x29/0x470 [ 69.615737][ T5449] ? __fget_files+0x3f6/0x470 [ 69.620449][ T5449] ksys_read+0x1a0/0x2c0 [ 69.624722][ T5449] ? __pfx_ksys_read+0x10/0x10 [ 69.629506][ T5449] ? do_syscall_64+0x100/0x230 [ 69.634295][ T5449] ? do_syscall_64+0xb6/0x230 [ 69.638990][ T5449] do_syscall_64+0xf3/0x230 [ 69.643508][ T5449] ? clear_bhb_loop+0x35/0x90 [ 69.648229][ T5449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.654161][ T5449] RIP: 0033:0x7f8e59575dfc [ 69.658589][ T5449] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 69.678314][ T5449] RSP: 002b:00007f8e5a42e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 69.686795][ T5449] RAX: ffffffffffffffda RBX: 00007f8e59705f80 RCX: 00007f8e59575dfc [ 69.694783][ T5449] RDX: 000000000000000f RSI: 00007f8e5a42e0b0 RDI: 0000000000000004 [ 69.702760][ T5449] RBP: 00007f8e5a42e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 69.710728][ T5449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.718691][ T5449] R13: 000000000000000b R14: 00007f8e59705f80 R15: 00007ffd41b080b8 [ 69.726679][ T5449] [ 69.807245][ T5463] Bluetooth: MGMT ver 1.23 [ 69.881150][ T5465] syz.1.51 uses obsolete (PF_INET,SOCK_PACKET) [ 70.009467][ T5474] xt_CT: No such helper "syz1" [ 70.624957][ T5509] netlink: 'syz.3.64': attribute type 1 has an invalid length. [ 70.665885][ T5509] sctp: [Deprecated]: syz.3.64 (pid 5509) Use of int in max_burst socket option deprecated. [ 70.665885][ T5509] Use struct sctp_assoc_value instead [ 70.747764][ T5509] netlink: del zone limit has 8 unknown bytes [ 71.088259][ T5529] netlink: 'syz.1.72': attribute type 72 has an invalid length. [ 71.241737][ T5539] xt_recent: Unsupported userspace flags (00000042) [ 71.742288][ T5562] netlink: 'syz.1.80': attribute type 1 has an invalid length. [ 71.760692][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.767804][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.914884][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 71.922188][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.075055][ T5576] xt_ecn: cannot match TCP bits for non-tcp packets [ 72.078604][ T5569] __nla_validate_parse: 2 callbacks suppressed [ 72.078620][ T5569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.85'. [ 72.101681][ T5578] netlink: 'syz.2.87': attribute type 21 has an invalid length. [ 72.147606][ T5578] netlink: 'syz.2.87': attribute type 20 has an invalid length. [ 72.176324][ T5578] IPv6: NLM_F_CREATE should be specified when creating new route [ 72.850623][ T5613] netlink: 16 bytes leftover after parsing attributes in process `syz.4.96'. [ 73.043798][ T5622] netlink: 32 bytes leftover after parsing attributes in process `syz.2.99'. [ 73.276287][ T5631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 74.003211][ T5653] warning: `syz.3.110' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 74.063258][ T5657] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 74.125862][ T5653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 74.336020][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.115'. [ 74.476867][ T5674] netlink: 184 bytes leftover after parsing attributes in process `syz.4.116'. [ 74.536664][ T5679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.598268][ T5682] netlink: 16 bytes leftover after parsing attributes in process `syz.2.120'. [ 74.902886][ T5695] netlink: 32 bytes leftover after parsing attributes in process `syz.4.125'. [ 75.080986][ T5703] xt_recent: Unsupported userspace flags (00000042) [ 75.114386][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 75.123301][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 76.915812][ T942] cfg80211: failed to load regulatory.db [ 77.106685][ T5790] __nla_validate_parse: 9 callbacks suppressed [ 77.106703][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 77.291738][ T5800] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 77.354743][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 77.360999][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 77.648883][ T5818] netlink: 32 bytes leftover after parsing attributes in process `syz.1.168'. [ 78.169069][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 78.421041][ T5851] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 78.458829][ T5855] netlink: 32 bytes leftover after parsing attributes in process `syz.1.180'. [ 78.730385][ T5871] netlink: 12 bytes leftover after parsing attributes in process `syz.2.185'. [ 78.770756][ T5871] netlink: 'syz.2.185': attribute type 20 has an invalid length. [ 78.941180][ T5882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.188'. [ 79.096701][ T5891] netlink: 'syz.4.192': attribute type 1 has an invalid length. [ 79.109330][ T5891] netlink: 9320 bytes leftover after parsing attributes in process `syz.4.192'. [ 79.124997][ T5891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'. [ 79.229374][ T5897] netlink: 32 bytes leftover after parsing attributes in process `syz.3.194'. [ 79.260627][ T5899] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 79.466954][ T5907] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 79.754207][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 79.754687][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 80.549773][ T5965] netlink: 'syz.2.215': attribute type 4 has an invalid length. [ 80.972200][ T5984] ip_vti0: entered promiscuous mode [ 81.001055][ T5984] vlan2: entered promiscuous mode [ 81.051298][ T5984] ip_vti0: left promiscuous mode [ 81.094686][ T5998] xt_recent: Unsupported userspace flags (00000042) [ 81.143780][ T5997] bridge_slave_1: left allmulticast mode [ 81.169627][ T5997] bridge_slave_1: left promiscuous mode [ 81.183015][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.214940][ T5997] bridge_slave_0: left allmulticast mode [ 81.227718][ T5997] bridge_slave_0: left promiscuous mode [ 81.235176][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.082062][ T5232] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.084382][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 82.484994][ T5244] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.502761][ T5244] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.512981][ T5244] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.522494][ T5244] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.530457][ T5244] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.544227][ T5244] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.685247][ T6042] __nla_validate_parse: 12 callbacks suppressed [ 82.685268][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.1.241'. [ 83.067018][ T2933] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.103773][ T6047] netlink: 32 bytes leftover after parsing attributes in process `syz.1.242'. [ 83.198909][ T2933] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.322561][ T2933] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.362525][ T6058] netlink: 'syz.0.246': attribute type 29 has an invalid length. [ 83.419479][ T2933] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.559658][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.3.248'. [ 83.686875][ T6039] chnl_net:caif_netlink_parms(): no params data found [ 83.829559][ T6080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 83.848998][ T2933] bridge_slave_1: left allmulticast mode [ 83.855503][ T2933] bridge_slave_1: left promiscuous mode [ 83.869020][ T2933] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.901864][ T2933] bridge_slave_0: left allmulticast mode [ 83.907725][ T2933] bridge_slave_0: left promiscuous mode [ 83.923368][ T2933] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.314607][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 84.321247][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.436856][ T2933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.452127][ T2933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.463339][ T2933] bond0 (unregistering): Released all slaves [ 84.483274][ T6080] ip_vti0: entered promiscuous mode [ 84.490938][ T6080] vlan2: entered promiscuous mode [ 84.499915][ T6080] ip_vti0: left promiscuous mode [ 84.560700][ T6084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.251'. [ 84.581851][ T6088] netlink: 116 bytes leftover after parsing attributes in process `syz.2.251'. [ 84.591607][ T6088] bridge_slave_1: left allmulticast mode [ 84.600753][ T6088] bridge_slave_1: left promiscuous mode [ 84.608930][ T6088] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.619997][ T6088] bridge_slave_0: left allmulticast mode [ 84.628530][ T6088] bridge_slave_0: left promiscuous mode [ 84.634519][ T5244] Bluetooth: hci2: command tx timeout [ 84.641063][ T6088] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.711876][ T6092] netlink: 32 bytes leftover after parsing attributes in process `syz.1.254'. [ 84.958741][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 85.022320][ T6039] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.032721][ T6039] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.041168][ T6039] bridge_slave_0: entered allmulticast mode [ 85.066820][ T6039] bridge_slave_0: entered promiscuous mode [ 85.086132][ T6039] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.093284][ T6039] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.121465][ T6039] bridge_slave_1: entered allmulticast mode [ 85.145687][ T6039] bridge_slave_1: entered promiscuous mode [ 85.188156][ T6119] netlink: 'syz.2.261': attribute type 3 has an invalid length. [ 85.216307][ T6119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.261'. [ 85.369734][ T6039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.398275][ T6039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.494494][ T2933] hsr_slave_0: left promiscuous mode [ 85.515309][ T2933] hsr_slave_1: left promiscuous mode [ 85.546263][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.567498][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.577804][ T2933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.585507][ T2933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.616014][ T2933] veth1_macvtap: left promiscuous mode [ 85.624327][ T2933] veth0_macvtap: left promiscuous mode [ 85.630007][ T2933] veth1_vlan: left promiscuous mode [ 85.636216][ T2933] veth0_vlan: left promiscuous mode [ 86.281470][ T2933] team0 (unregistering): Port device team_slave_1 removed [ 86.359665][ T2933] team0 (unregistering): Port device team_slave_0 removed [ 86.394425][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.394824][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.716880][ T5243] Bluetooth: hci2: command tx timeout [ 86.819437][ T6140] netlink: 16 bytes leftover after parsing attributes in process `syz.2.265'. [ 86.855833][ T6039] team0: Port device team_slave_0 added [ 86.878964][ T6039] team0: Port device team_slave_1 added [ 86.996469][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.003835][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.041719][ T6039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.072811][ T6155] ip_vti0: entered promiscuous mode [ 87.082829][ T6155] vlan2: entered promiscuous mode [ 87.097841][ T6155] ip_vti0: left promiscuous mode [ 87.128548][ T6039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.136434][ T6039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.155994][ T6162] xt_recent: Unsupported userspace flags (00000042) [ 87.167554][ T6039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.352173][ T6039] hsr_slave_0: entered promiscuous mode [ 87.377747][ T6039] hsr_slave_1: entered promiscuous mode [ 87.389218][ T6039] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.408021][ T6039] Cannot create hsr debugfs directory [ 87.910938][ T6189] __nla_validate_parse: 4 callbacks suppressed [ 87.910956][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.280'. [ 88.195638][ T6039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.228941][ T6039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.247538][ T6039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.269296][ T6039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.291443][ T6200] netlink: 'syz.2.283': attribute type 12 has an invalid length. [ 88.303525][ T6200] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.283'. [ 88.383715][ T6205] xt_TCPMSS: Only works on TCP SYN packets [ 88.486224][ T6205] syz.2.283 (6205) used greatest stack depth: 17904 bytes left [ 88.528045][ T6039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.602308][ T6039] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.642434][ T942] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.649688][ T942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.696236][ T942] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.704476][ T942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.783373][ T6217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.290'. [ 88.804541][ T5244] Bluetooth: hci2: command tx timeout [ 89.249979][ T6241] netlink: 16 bytes leftover after parsing attributes in process `syz.3.296'. [ 89.298519][ T6039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.382052][ T6249] team0: entered promiscuous mode [ 89.391514][ T6249] team_slave_0: entered promiscuous mode [ 89.398261][ T6249] team_slave_1: entered promiscuous mode [ 89.408484][ T6249] team_slave_0: entered allmulticast mode [ 89.431161][ T6249] team0: Port device team_slave_0 removed [ 89.437473][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.443634][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 89.463221][ T6247] team0: left promiscuous mode [ 89.469996][ T6247] team_slave_1: left promiscuous mode [ 89.785822][ T6039] veth0_vlan: entered promiscuous mode [ 89.811665][ T6039] veth1_vlan: entered promiscuous mode [ 89.877104][ T6039] veth0_macvtap: entered promiscuous mode [ 89.901888][ T6039] veth1_macvtap: entered promiscuous mode [ 89.960627][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.973352][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.988663][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.006807][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.034374][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.061566][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.084431][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.107020][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.129352][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.149445][ T6274] netlink: 32 bytes leftover after parsing attributes in process `syz.2.305'. [ 90.176768][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.205095][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.231016][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.254592][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.267619][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.280085][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.290880][ T6039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.328754][ T6039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.356709][ T6039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.391064][ T6039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.415709][ T6039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.426759][ T6039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.461129][ T6039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.763705][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.775254][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.859806][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.871684][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.880315][ T5244] Bluetooth: hci2: command tx timeout [ 91.282852][ T6325] netlink: 32 bytes leftover after parsing attributes in process `syz.3.320'. [ 91.295234][ T6329] netlink: 88 bytes leftover after parsing attributes in process `syz.1.322'. [ 91.311537][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.322'. [ 91.319194][ T6327] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 91.321075][ T6329] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'. [ 91.559390][ T6339] netlink: 'syz.1.324': attribute type 13 has an invalid length. [ 92.074682][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.081026][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 92.237917][ T6382] netlink: 'syz.2.337': attribute type 1 has an invalid length. [ 92.493684][ T6392] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 93.389624][ T6420] __nla_validate_parse: 8 callbacks suppressed [ 93.389642][ T6420] netlink: 8 bytes leftover after parsing attributes in process `syz.4.349'. [ 93.971927][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.345'. [ 93.984506][ T6407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'. [ 94.010464][ T6407] geneve0: entered promiscuous mode [ 94.018463][ T6446] IPVS: set_ctl: invalid protocol: 135 224.0.0.1:20004 [ 94.032162][ T6407] geneve0: entered allmulticast mode [ 94.320189][ T6452] netlink: 32 bytes leftover after parsing attributes in process `syz.1.360'. [ 94.567108][ T6466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 94.814767][ T6478] netlink: 'syz.0.368': attribute type 2 has an invalid length. [ 94.840787][ T6478] netlink: 5 bytes leftover after parsing attributes in process `syz.0.368'. [ 95.031954][ T6486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.370'. [ 95.044907][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.051081][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 95.163200][ T6490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.371'. [ 95.683170][ T6511] netlink: 32 bytes leftover after parsing attributes in process `syz.2.374'. [ 96.300232][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.385'. [ 96.576602][ T6547] pim6reg1: entered allmulticast mode [ 97.754338][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.760541][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 97.760703][ T6578] netlink: 'syz.1.398': attribute type 21 has an invalid length. [ 97.928447][ T6585] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.971332][ T6581] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.287068][ T6600] FAULT_INJECTION: forcing a failure. [ 98.287068][ T6600] name failslab, interval 1, probability 0, space 0, times 1 [ 98.304274][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.1.406 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 98.314553][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 98.324615][ T6600] Call Trace: [ 98.327901][ T6600] [ 98.330829][ T6600] dump_stack_lvl+0x241/0x360 [ 98.335529][ T6600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.340742][ T6600] ? __pfx__printk+0x10/0x10 [ 98.345333][ T6600] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 98.351309][ T6600] ? __pfx___might_resched+0x10/0x10 [ 98.356595][ T6600] should_fail_ex+0x3b0/0x4e0 [ 98.361274][ T6600] should_failslab+0xac/0x100 [ 98.365955][ T6600] ? __alloc_skb+0x1c3/0x440 [ 98.370542][ T6600] kmem_cache_alloc_node_noprof+0x71/0x320 [ 98.376346][ T6600] __alloc_skb+0x1c3/0x440 [ 98.380761][ T6600] ? __pfx___alloc_skb+0x10/0x10 [ 98.385693][ T6600] ? netlink_autobind+0xd6/0x2f0 [ 98.390623][ T6600] ? netlink_autobind+0x2b0/0x2f0 [ 98.395647][ T6600] netlink_sendmsg+0x638/0xcb0 [ 98.400418][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.405697][ T6600] ? __import_iovec+0x536/0x820 [ 98.410629][ T6600] ? aa_sock_msg_perm+0x91/0x160 [ 98.415560][ T6600] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 98.420842][ T6600] ? security_socket_sendmsg+0x87/0xb0 [ 98.426310][ T6600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.431592][ T6600] __sock_sendmsg+0x221/0x270 [ 98.436266][ T6600] ____sys_sendmsg+0x525/0x7d0 [ 98.441035][ T6600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.446326][ T6600] __sys_sendmsg+0x2b0/0x3a0 [ 98.450915][ T6600] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.456019][ T6600] ? vfs_write+0x7c4/0xc90 [ 98.460470][ T6600] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.466799][ T6600] ? do_syscall_64+0x100/0x230 [ 98.471561][ T6600] ? do_syscall_64+0xb6/0x230 [ 98.476320][ T6600] do_syscall_64+0xf3/0x230 [ 98.480818][ T6600] ? clear_bhb_loop+0x35/0x90 [ 98.485508][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.491397][ T6600] RIP: 0033:0x7fbaa89773b9 [ 98.495807][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.515405][ T6600] RSP: 002b:00007fbaa978b048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.523814][ T6600] RAX: ffffffffffffffda RBX: 00007fbaa8b05f80 RCX: 00007fbaa89773b9 [ 98.531780][ T6600] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 98.539750][ T6600] RBP: 00007fbaa978b0a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.547713][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.555686][ T6600] R13: 000000000000000b R14: 00007fbaa8b05f80 R15: 00007fffa3d9f7a8 [ 98.563665][ T6600] [ 98.599031][ T6601] __nla_validate_parse: 4 callbacks suppressed [ 98.599051][ T6601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.405'. [ 98.636890][ T6603] netlink: 32 bytes leftover after parsing attributes in process `syz.4.407'. [ 99.131082][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 99.471896][ T6630] hsr0: entered promiscuous mode [ 99.501973][ T6630] batman_adv: batadv0: Adding interface: macsec1 [ 99.522970][ T6634] netlink: 80 bytes leftover after parsing attributes in process `syz.2.415'. [ 99.525555][ T6630] batman_adv: batadv0: The MTU of interface macsec1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.550320][ T6635] netlink: 80 bytes leftover after parsing attributes in process `syz.2.415'. [ 99.606083][ T6630] batman_adv: batadv0: Interface activated: macsec1 [ 99.625655][ T6634] netlink: 6 bytes leftover after parsing attributes in process `syz.2.415'. [ 100.074449][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 100.080686][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.509138][ T6670] netlink: 32 bytes leftover after parsing attributes in process `syz.3.429'. [ 100.548899][ T6672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 101.089756][ T6703] netlink: 32 bytes leftover after parsing attributes in process `syz.4.442'. [ 101.417273][ T6709] netlink: 108 bytes leftover after parsing attributes in process `syz.3.445'. [ 101.463885][ T6709] team0: entered promiscuous mode [ 101.493247][ T6709] team_slave_1: entered promiscuous mode [ 101.501784][ T6709] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.538287][ T6709] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 102.453233][ T6759] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 102.508879][ T6759] batman_adv: batadv0: Adding interface: team0 [ 102.544790][ T6759] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.583759][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.590008][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 102.613689][ T6759] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 103.261388][ T6774] xt_recent: Unsupported userspace flags (00000042) [ 103.699933][ T6805] __nla_validate_parse: 4 callbacks suppressed [ 103.699954][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.468'. [ 104.050691][ T6818] netlink: 'syz.4.476': attribute type 2 has an invalid length. [ 104.078401][ T6818] netlink: 5 bytes leftover after parsing attributes in process `syz.4.476'. [ 104.315804][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.3.478'. [ 104.530440][ T6830] netlink: 32 bytes leftover after parsing attributes in process `syz.3.479'. [ 104.740536][ T6837] netlink: 16 bytes leftover after parsing attributes in process `syz.1.481'. [ 104.825326][ T6839] xt_recent: Unsupported userspace flags (00000042) [ 105.360918][ T6850] xt_recent: Unsupported userspace flags (00000042) [ 105.435245][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.442199][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.547538][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.487'. [ 105.695226][ T6866] FAULT_INJECTION: forcing a failure. [ 105.695226][ T6866] name failslab, interval 1, probability 0, space 0, times 0 [ 105.730154][ T6866] CPU: 0 UID: 0 PID: 6866 Comm: syz.0.489 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 105.740455][ T6866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 105.750565][ T6866] Call Trace: [ 105.753856][ T6866] [ 105.756803][ T6866] dump_stack_lvl+0x241/0x360 [ 105.761514][ T6866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.766769][ T6866] ? __pfx__printk+0x10/0x10 [ 105.771488][ T6866] ? __kmalloc_noprof+0xb0/0x400 [ 105.776450][ T6866] ? __pfx___might_resched+0x10/0x10 [ 105.781772][ T6866] should_fail_ex+0x3b0/0x4e0 [ 105.786521][ T6866] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.792794][ T6866] should_failslab+0xac/0x100 [ 105.797508][ T6866] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.803869][ T6866] __kmalloc_noprof+0xd8/0x400 [ 105.808669][ T6866] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 105.814786][ T6866] genl_rcv_msg+0x802/0xec0 [ 105.819322][ T6866] ? mark_lock+0x9a/0x350 [ 105.823700][ T6866] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.828783][ T6866] ? __pfx_lock_acquire+0x10/0x10 [ 105.833840][ T6866] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 105.839243][ T6866] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 105.844999][ T6866] ? __pfx_nl80211_post_doit+0x10/0x10 [ 105.850490][ T6866] ? __pfx___might_resched+0x10/0x10 [ 105.855900][ T6866] netlink_rcv_skb+0x1e3/0x430 [ 105.861179][ T6866] ? __pfx_genl_rcv_msg+0x10/0x10 [ 105.866242][ T6866] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 105.871575][ T6866] ? __netlink_deliver_tap+0x77e/0x7c0 [ 105.877076][ T6866] genl_rcv+0x28/0x40 [ 105.881100][ T6866] netlink_unicast+0x7f0/0x990 [ 105.885897][ T6866] ? __pfx_netlink_unicast+0x10/0x10 [ 105.891210][ T6866] ? __virt_addr_valid+0x183/0x530 [ 105.896367][ T6866] ? __check_object_size+0x49c/0x900 [ 105.901679][ T6866] ? bpf_lsm_netlink_send+0x9/0x10 [ 105.906821][ T6866] netlink_sendmsg+0x8e4/0xcb0 [ 105.911627][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.916945][ T6866] ? __import_iovec+0x536/0x820 [ 105.921811][ T6866] ? aa_sock_msg_perm+0x91/0x160 [ 105.926772][ T6866] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 105.932079][ T6866] ? security_socket_sendmsg+0x87/0xb0 [ 105.937563][ T6866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 105.940828][ T6873] netlink: 32 bytes leftover after parsing attributes in process `syz.1.492'. [ 105.942848][ T6866] __sock_sendmsg+0x221/0x270 [ 105.956379][ T6866] ____sys_sendmsg+0x525/0x7d0 [ 105.961262][ T6866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 105.966595][ T6866] __sys_sendmsg+0x2b0/0x3a0 [ 105.971211][ T6866] ? __pfx___sys_sendmsg+0x10/0x10 [ 105.976354][ T6866] ? vfs_write+0x7c4/0xc90 [ 105.980872][ T6866] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.987240][ T6866] ? do_syscall_64+0x100/0x230 [ 105.992041][ T6866] ? do_syscall_64+0xb6/0x230 [ 105.996764][ T6866] do_syscall_64+0xf3/0x230 [ 106.001298][ T6866] ? clear_bhb_loop+0x35/0x90 [ 106.006006][ T6866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.011924][ T6866] RIP: 0033:0x7f07391773b9 [ 106.016358][ T6866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.035980][ T6866] RSP: 002b:00007f0739ead048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 106.044426][ T6866] RAX: ffffffffffffffda RBX: 00007f0739305f80 RCX: 00007f07391773b9 [ 106.052429][ T6866] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 106.060429][ T6866] RBP: 00007f0739ead0a0 R08: 0000000000000000 R09: 0000000000000000 [ 106.068428][ T6866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.076423][ T6866] R13: 000000000000000b R14: 00007f0739305f80 R15: 00007ffd88b68e58 [ 106.084441][ T6866] [ 106.513689][ T6892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.498'. [ 106.794539][ T6903] netlink: 32 bytes leftover after parsing attributes in process `syz.2.503'. [ 107.049016][ T6907] xt_recent: Unsupported userspace flags (00000042) [ 107.243819][ T6925] netlink: 32 bytes leftover after parsing attributes in process `syz.2.508'. [ 107.264265][ T6925] FAULT_INJECTION: forcing a failure. [ 107.264265][ T6925] name failslab, interval 1, probability 0, space 0, times 0 [ 107.289413][ T6925] CPU: 0 UID: 0 PID: 6925 Comm: syz.2.508 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 107.299715][ T6925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 107.309880][ T6925] Call Trace: [ 107.313173][ T6925] [ 107.316116][ T6925] dump_stack_lvl+0x241/0x360 [ 107.320838][ T6925] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.326065][ T6925] ? __pfx__printk+0x10/0x10 [ 107.330678][ T6925] ? __kmalloc_noprof+0xb0/0x400 [ 107.335644][ T6925] ? __pfx___might_resched+0x10/0x10 [ 107.340959][ T6925] should_fail_ex+0x3b0/0x4e0 [ 107.345641][ T6925] ? nl80211_trigger_scan+0x5ae/0x1e10 [ 107.351097][ T6925] should_failslab+0xac/0x100 [ 107.355947][ T6925] ? nl80211_trigger_scan+0x5ae/0x1e10 [ 107.361406][ T6925] __kmalloc_noprof+0xd8/0x400 [ 107.366180][ T6925] nl80211_trigger_scan+0x5ae/0x1e10 [ 107.371560][ T6925] genl_rcv_msg+0xb14/0xec0 [ 107.376064][ T6925] ? mark_lock+0x9a/0x350 [ 107.380569][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.385620][ T6925] ? __pfx_lock_acquire+0x10/0x10 [ 107.390647][ T6925] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 107.396104][ T6925] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 107.401821][ T6925] ? __pfx_nl80211_post_doit+0x10/0x10 [ 107.407364][ T6925] ? __pfx___might_resched+0x10/0x10 [ 107.412655][ T6925] netlink_rcv_skb+0x1e3/0x430 [ 107.417418][ T6925] ? __pfx_genl_rcv_msg+0x10/0x10 [ 107.422457][ T6925] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 107.427745][ T6925] ? __netlink_deliver_tap+0x77e/0x7c0 [ 107.433339][ T6925] genl_rcv+0x28/0x40 [ 107.437340][ T6925] netlink_unicast+0x7f0/0x990 [ 107.442211][ T6925] ? __pfx_netlink_unicast+0x10/0x10 [ 107.447507][ T6925] ? __virt_addr_valid+0x183/0x530 [ 107.452615][ T6925] ? __check_object_size+0x49c/0x900 [ 107.457891][ T6925] ? bpf_lsm_netlink_send+0x9/0x10 [ 107.463003][ T6925] netlink_sendmsg+0x8e4/0xcb0 [ 107.467770][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.473050][ T6925] ? __import_iovec+0x536/0x820 [ 107.477892][ T6925] ? aa_sock_msg_perm+0x91/0x160 [ 107.482823][ T6925] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 107.488105][ T6925] ? security_socket_sendmsg+0x87/0xb0 [ 107.493564][ T6925] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.498847][ T6925] __sock_sendmsg+0x221/0x270 [ 107.503521][ T6925] ____sys_sendmsg+0x525/0x7d0 [ 107.508289][ T6925] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.513588][ T6925] __sys_sendmsg+0x2b0/0x3a0 [ 107.518179][ T6925] ? __pfx___sys_sendmsg+0x10/0x10 [ 107.523289][ T6925] ? vfs_write+0x7c4/0xc90 [ 107.527738][ T6925] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.534070][ T6925] ? do_syscall_64+0x100/0x230 [ 107.538865][ T6925] ? do_syscall_64+0xb6/0x230 [ 107.543627][ T6925] do_syscall_64+0xf3/0x230 [ 107.548154][ T6925] ? clear_bhb_loop+0x35/0x90 [ 107.552832][ T6925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.558723][ T6925] RIP: 0033:0x7f424df773b9 [ 107.563132][ T6925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.582731][ T6925] RSP: 002b:00007f424ed3e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 107.591141][ T6925] RAX: ffffffffffffffda RBX: 00007f424e105f80 RCX: 00007f424df773b9 [ 107.599106][ T6925] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 107.607075][ T6925] RBP: 00007f424ed3e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.615387][ T6925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.623352][ T6925] R13: 000000000000000b R14: 00007f424e105f80 R15: 00007ffc5ec499a8 [ 107.631333][ T6925] [ 107.994278][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.074477][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 108.080564][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 108.515623][ T6958] FAULT_INJECTION: forcing a failure. [ 108.515623][ T6958] name failslab, interval 1, probability 0, space 0, times 0 [ 108.529240][ T6958] CPU: 1 UID: 0 PID: 6958 Comm: syz.3.523 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 108.539517][ T6958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 108.549601][ T6958] Call Trace: [ 108.552898][ T6958] [ 108.555842][ T6958] dump_stack_lvl+0x241/0x360 [ 108.560560][ T6958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.565910][ T6958] ? __pfx__printk+0x10/0x10 [ 108.570545][ T6958] ? ref_tracker_alloc+0x332/0x490 [ 108.575692][ T6958] should_fail_ex+0x3b0/0x4e0 [ 108.580398][ T6958] ? skb_clone+0x20c/0x390 [ 108.584844][ T6958] should_failslab+0xac/0x100 [ 108.589555][ T6958] ? skb_clone+0x20c/0x390 [ 108.594015][ T6958] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 108.599431][ T6958] skb_clone+0x20c/0x390 [ 108.603713][ T6958] __netlink_deliver_tap+0x3cc/0x7c0 [ 108.609034][ T6958] ? netlink_deliver_tap+0x2e/0x1b0 [ 108.614254][ T6958] netlink_deliver_tap+0x19d/0x1b0 [ 108.619382][ T6958] netlink_sendskb+0x68/0x140 [ 108.624160][ T6958] netlink_unicast+0x39d/0x990 [ 108.628919][ T6958] ? __asan_memcpy+0x40/0x70 [ 108.633513][ T6958] ? __pfx_netlink_unicast+0x10/0x10 [ 108.638806][ T6958] netlink_rcv_skb+0x262/0x430 [ 108.643569][ T6958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.648594][ T6958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.653973][ T6958] ? __netlink_deliver_tap+0x77e/0x7c0 [ 108.659443][ T6958] genl_rcv+0x28/0x40 [ 108.663512][ T6958] netlink_unicast+0x7f0/0x990 [ 108.668283][ T6958] ? __pfx_netlink_unicast+0x10/0x10 [ 108.673567][ T6958] ? __virt_addr_valid+0x183/0x530 [ 108.678767][ T6958] ? __check_object_size+0x49c/0x900 [ 108.684050][ T6958] ? bpf_lsm_netlink_send+0x9/0x10 [ 108.689174][ T6958] netlink_sendmsg+0x8e4/0xcb0 [ 108.693950][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.699325][ T6958] ? __import_iovec+0x536/0x820 [ 108.704183][ T6958] ? aa_sock_msg_perm+0x91/0x160 [ 108.709129][ T6958] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 108.714500][ T6958] ? security_socket_sendmsg+0x87/0xb0 [ 108.719980][ T6958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.725304][ T6958] __sock_sendmsg+0x221/0x270 [ 108.730109][ T6958] ____sys_sendmsg+0x525/0x7d0 [ 108.734892][ T6958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.740196][ T6958] __sys_sendmsg+0x2b0/0x3a0 [ 108.744798][ T6958] ? __pfx___sys_sendmsg+0x10/0x10 [ 108.749928][ T6958] ? vfs_write+0x7c4/0xc90 [ 108.754393][ T6958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.760741][ T6958] ? do_syscall_64+0x100/0x230 [ 108.765513][ T6958] ? do_syscall_64+0xb6/0x230 [ 108.770194][ T6958] do_syscall_64+0xf3/0x230 [ 108.774782][ T6958] ? clear_bhb_loop+0x35/0x90 [ 108.779463][ T6958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.785444][ T6958] RIP: 0033:0x7fca631773b9 [ 108.789957][ T6958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.809562][ T6958] RSP: 002b:00007fca63f1a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.817975][ T6958] RAX: ffffffffffffffda RBX: 00007fca63305f80 RCX: 00007fca631773b9 [ 108.825943][ T6958] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 108.833917][ T6958] RBP: 00007fca63f1a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 108.841985][ T6958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.849958][ T6958] R13: 000000000000000b R14: 00007fca63305f80 R15: 00007ffce3612388 [ 108.857958][ T6958] [ 109.228764][ T6972] __nla_validate_parse: 5 callbacks suppressed [ 109.228786][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.528'. [ 109.395526][ T6976] atomic_op ffff888078062998 conn xmit_atomic 0000000000000000 [ 109.443541][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.3.530'. [ 109.483005][ T6976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 109.602067][ T6987] netlink: 16 bytes leftover after parsing attributes in process `syz.1.535'. [ 109.745557][ T6992] netlink: 'syz.3.537': attribute type 30 has an invalid length. [ 109.798525][ T6992] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.537'. [ 109.826961][ T6992] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 109.904724][ T6998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.539'. [ 110.154902][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.164158][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 110.388343][ T7016] netlink: 64 bytes leftover after parsing attributes in process `syz.3.545'. [ 110.568512][ T7021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.548'. [ 110.619504][ T7019] netlink: 'syz.0.547': attribute type 9 has an invalid length. [ 110.638923][ T7019] xt_l2tp: unknown flags: 42 [ 110.648559][ T7019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.547'. [ 110.684986][ T7023] netlink: 'syz.3.549': attribute type 10 has an invalid length. [ 110.822356][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.552'. [ 112.234355][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.661381][ T7104] ebt_limit: overflow, try lower: 0/0 [ 112.718877][ T7111] netlink: 'syz.4.573': attribute type 2 has an invalid length. [ 114.445237][ T7169] __nla_validate_parse: 23 callbacks suppressed [ 114.445259][ T7169] netlink: 32 bytes leftover after parsing attributes in process `syz.3.596'. [ 114.620681][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 114.680084][ T7153] geneve0: entered promiscuous mode [ 114.706167][ T7153] geneve0: entered allmulticast mode [ 114.714318][ T7173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.591'. [ 114.737423][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 114.769224][ T7153] netlink: 32 bytes leftover after parsing attributes in process `syz.1.591'. [ 114.795044][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.599'. [ 115.146743][ T7192] netlink: 28 bytes leftover after parsing attributes in process `syz.0.604'. [ 115.354148][ T5243] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 115.354190][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.412328][ T7202] netlink: 32 bytes leftover after parsing attributes in process `syz.0.609'. [ 115.794949][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'. [ 115.838906][ T7231] netlink: 32 bytes leftover after parsing attributes in process `syz.3.615'. [ 117.248528][ T7288] netlink: 'syz.2.640': attribute type 11 has an invalid length. [ 117.273275][ T7288] netlink: 'syz.2.640': attribute type 11 has an invalid length. [ 117.274751][ T7290] netlink: 'syz.3.641': attribute type 10 has an invalid length. [ 117.289413][ T7288] debugfs: Directory 'netdev:' with parent 'phy4' already present! [ 117.514185][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.524163][ T5244] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.855318][ T7313] xt_recent: Unsupported userspace flags (00000042) [ 118.304742][ T7327] netlink: 'syz.1.654': attribute type 7 has an invalid length. [ 118.312639][ T7327] netlink: 'syz.1.654': attribute type 39 has an invalid length. [ 118.359213][ T7327] bridge1: port 1(gretap1) entered blocking state [ 118.372759][ T7327] bridge1: port 1(gretap1) entered disabled state [ 118.381731][ T7327] gretap1: entered allmulticast mode [ 118.392772][ T7327] gretap1: entered promiscuous mode [ 118.403411][ T7329] netlink: 'syz.1.654': attribute type 7 has an invalid length. [ 118.413771][ T7329] netlink: 'syz.1.654': attribute type 39 has an invalid length. [ 119.496976][ T7371] xt_recent: Unsupported userspace flags (00000042) [ 119.542883][ T7372] __nla_validate_parse: 12 callbacks suppressed [ 119.542903][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 119.763730][ T7381] netlink: 32 bytes leftover after parsing attributes in process `syz.1.675'. [ 119.822502][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.0.676'. [ 119.834311][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.840589][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 119.865275][ T7387] netlink: 44 bytes leftover after parsing attributes in process `syz.0.676'. [ 120.307722][ T7403] netlink: 'syz.2.684': attribute type 4 has an invalid length. [ 120.351028][ T7409] netlink: 'syz.2.684': attribute type 4 has an invalid length. [ 120.362943][ T7408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.686'. [ 120.576846][ T7418] netlink: 'syz.1.688': attribute type 2 has an invalid length. [ 120.596624][ T7418] netlink: 5 bytes leftover after parsing attributes in process `syz.1.688'. [ 121.459486][ T7453] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.994416][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.000525][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 122.193033][ T7492] netlink: 'syz.3.716': attribute type 3 has an invalid length. [ 122.201099][ T7492] netlink: 160 bytes leftover after parsing attributes in process `syz.3.716'. [ 122.645015][ T7507] xt_recent: Unsupported userspace flags (00000042) [ 123.288060][ T7534] netlink: 192 bytes leftover after parsing attributes in process `syz.2.729'. [ 123.446599][ T7536] FAULT_INJECTION: forcing a failure. [ 123.446599][ T7536] name failslab, interval 1, probability 0, space 0, times 0 [ 123.508283][ T7536] CPU: 1 UID: 0 PID: 7536 Comm: syz.3.730 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 123.518587][ T7536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 123.528660][ T7536] Call Trace: [ 123.531945][ T7536] [ 123.534875][ T7536] dump_stack_lvl+0x241/0x360 [ 123.539574][ T7536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.544768][ T7536] ? __pfx__printk+0x10/0x10 [ 123.549370][ T7536] ? __kmalloc_noprof+0xb0/0x400 [ 123.554301][ T7536] ? __pfx___might_resched+0x10/0x10 [ 123.559579][ T7536] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 123.565557][ T7536] should_fail_ex+0x3b0/0x4e0 [ 123.570230][ T7536] ? sock_kmalloc+0xd7/0x160 [ 123.574817][ T7536] should_failslab+0xac/0x100 [ 123.579582][ T7536] ? sock_kmalloc+0xd7/0x160 [ 123.584167][ T7536] __kmalloc_noprof+0xd8/0x400 [ 123.589016][ T7536] sock_kmalloc+0xd7/0x160 [ 123.593433][ T7536] af_alg_alloc_areq+0x90/0x260 [ 123.598289][ T7536] skcipher_recvmsg+0x382/0x1230 [ 123.603244][ T7536] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 123.608732][ T7536] ? aa_sock_msg_perm+0x91/0x160 [ 123.613669][ T7536] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 123.618984][ T7536] ? security_socket_recvmsg+0x90/0xb0 [ 123.624441][ T7536] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 123.629900][ T7536] sock_recvmsg+0x22f/0x280 [ 123.634430][ T7536] ____sys_recvmsg+0x1db/0x470 [ 123.639237][ T7536] ? __pfx_____sys_recvmsg+0x10/0x10 [ 123.644543][ T7536] do_recvmmsg+0x474/0xae0 [ 123.648965][ T7536] ? __pfx_lock_release+0x10/0x10 [ 123.654006][ T7536] ? __pfx_do_recvmmsg+0x10/0x10 [ 123.658968][ T7536] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 123.664865][ T7536] ? ksys_write+0x23e/0x2c0 [ 123.669372][ T7536] ? __pfx_lock_release+0x10/0x10 [ 123.674397][ T7536] ? vfs_write+0x7c4/0xc90 [ 123.678810][ T7536] ? __mutex_unlock_slowpath+0x21d/0x750 [ 123.684447][ T7536] ? __fget_files+0x3f6/0x470 [ 123.689129][ T7536] __x64_sys_recvmmsg+0x199/0x250 [ 123.694165][ T7536] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 123.699717][ T7536] ? do_syscall_64+0x100/0x230 [ 123.704481][ T7536] ? do_syscall_64+0xb6/0x230 [ 123.709154][ T7536] do_syscall_64+0xf3/0x230 [ 123.713650][ T7536] ? clear_bhb_loop+0x35/0x90 [ 123.718329][ T7536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.724224][ T7536] RIP: 0033:0x7fca631773b9 [ 123.728658][ T7536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.748263][ T7536] RSP: 002b:00007fca63f1a048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 123.756688][ T7536] RAX: ffffffffffffffda RBX: 00007fca63305f80 RCX: 00007fca631773b9 [ 123.764653][ T7536] RDX: 0000000000000001 RSI: 00000000200008c0 RDI: 0000000000000004 [ 123.772613][ T7536] RBP: 00007fca63f1a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 123.780580][ T7536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.788544][ T7536] R13: 000000000000000b R14: 00007fca63305f80 R15: 00007ffce3612388 [ 123.796522][ T7536] [ 124.371582][ T7557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.739'. [ 124.840667][ T7579] FAULT_INJECTION: forcing a failure. [ 124.840667][ T7579] name failslab, interval 1, probability 0, space 0, times 0 [ 124.872537][ T7579] CPU: 1 UID: 0 PID: 7579 Comm: syz.4.746 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 124.883022][ T7579] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 124.893098][ T7579] Call Trace: [ 124.896386][ T7579] [ 124.899337][ T7579] dump_stack_lvl+0x241/0x360 [ 124.904014][ T7579] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.909212][ T7579] ? __pfx__printk+0x10/0x10 [ 124.913800][ T7579] ? __kmalloc_noprof+0xb0/0x400 [ 124.918748][ T7579] ? __pfx___might_resched+0x10/0x10 [ 124.924033][ T7579] should_fail_ex+0x3b0/0x4e0 [ 124.928717][ T7579] ? sock_kmalloc+0xd7/0x160 [ 124.933389][ T7579] should_failslab+0xac/0x100 [ 124.938066][ T7579] ? sock_kmalloc+0xd7/0x160 [ 124.942908][ T7579] __kmalloc_noprof+0xd8/0x400 [ 124.947714][ T7579] sock_kmalloc+0xd7/0x160 [ 124.952146][ T7579] skcipher_recvmsg+0x5ff/0x1230 [ 124.957107][ T7579] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 124.962579][ T7579] ? aa_sock_msg_perm+0x91/0x160 [ 124.967565][ T7579] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 124.973042][ T7579] ? security_socket_recvmsg+0x90/0xb0 [ 124.978509][ T7579] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 124.983889][ T7579] sock_recvmsg+0x22f/0x280 [ 124.988613][ T7579] ____sys_recvmsg+0x1db/0x470 [ 124.993385][ T7579] ? __pfx_____sys_recvmsg+0x10/0x10 [ 124.998692][ T7579] do_recvmmsg+0x474/0xae0 [ 125.003113][ T7579] ? __pfx_lock_release+0x10/0x10 [ 125.008139][ T7579] ? __pfx_do_recvmmsg+0x10/0x10 [ 125.013093][ T7579] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 125.018986][ T7579] ? ksys_write+0x23e/0x2c0 [ 125.023486][ T7579] ? __pfx_lock_release+0x10/0x10 [ 125.028515][ T7579] ? vfs_write+0x7c4/0xc90 [ 125.032932][ T7579] ? __mutex_unlock_slowpath+0x21d/0x750 [ 125.038567][ T7579] ? __fget_files+0x3f6/0x470 [ 125.043260][ T7579] __x64_sys_recvmmsg+0x199/0x250 [ 125.048316][ T7579] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 125.053874][ T7579] ? do_syscall_64+0x100/0x230 [ 125.058735][ T7579] ? do_syscall_64+0xb6/0x230 [ 125.063415][ T7579] do_syscall_64+0xf3/0x230 [ 125.067913][ T7579] ? clear_bhb_loop+0x35/0x90 [ 125.072628][ T7579] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.078536][ T7579] RIP: 0033:0x7f31bb1773b9 [ 125.082977][ T7579] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.102589][ T7579] RSP: 002b:00007f31bbf7a048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 125.111013][ T7579] RAX: ffffffffffffffda RBX: 00007f31bb305f80 RCX: 00007f31bb1773b9 [ 125.118986][ T7579] RDX: 0000000000000001 RSI: 00000000200008c0 RDI: 0000000000000004 [ 125.126950][ T7579] RBP: 00007f31bbf7a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.134914][ T7579] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.142876][ T7579] R13: 000000000000000b R14: 00007f31bb305f80 R15: 00007fff74f9f528 [ 125.150866][ T7579] [ 125.739069][ T7595] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 126.218810][ T7619] FAULT_INJECTION: forcing a failure. [ 126.218810][ T7619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.236141][ T7619] CPU: 1 UID: 0 PID: 7619 Comm: syz.4.759 Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 126.242853][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.246408][ T7619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 126.246422][ T7619] Call Trace: [ 126.246430][ T7619] [ 126.246439][ T7619] dump_stack_lvl+0x241/0x360 [ 126.246465][ T7619] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.246483][ T7619] ? __pfx__printk+0x10/0x10 [ 126.246506][ T7619] ? snprintf+0xda/0x120 [ 126.246530][ T7619] should_fail_ex+0x3b0/0x4e0 [ 126.246557][ T7619] _copy_to_user+0x2f/0xb0 [ 126.246578][ T7619] simple_read_from_buffer+0xca/0x150 [ 126.252597][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.262585][ T7619] proc_fail_nth_read+0x1e9/0x250 [ 126.262614][ T7619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.262637][ T7619] ? rw_verify_area+0x520/0x6b0 [ 126.262658][ T7619] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.329160][ T7619] vfs_read+0x204/0xbc0 [ 126.333340][ T7619] ? __pfx_lock_release+0x10/0x10 [ 126.338389][ T7619] ? __pfx_vfs_read+0x10/0x10 [ 126.343106][ T7619] ? __fget_files+0x29/0x470 [ 126.347741][ T7619] ? __fget_files+0x3f6/0x470 [ 126.352464][ T7619] ksys_read+0x1a0/0x2c0 [ 126.356738][ T7619] ? __pfx_ksys_read+0x10/0x10 [ 126.361530][ T7619] ? do_syscall_64+0x100/0x230 [ 126.366314][ T7619] ? do_syscall_64+0xb6/0x230 [ 126.371008][ T7619] do_syscall_64+0xf3/0x230 [ 126.375529][ T7619] ? clear_bhb_loop+0x35/0x90 [ 126.380235][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.386150][ T7619] RIP: 0033:0x7f31bb175dfc [ 126.390579][ T7619] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 126.410212][ T7619] RSP: 002b:00007f31bbf7a040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.418649][ T7619] RAX: ffffffffffffffda RBX: 00007f31bb305f80 RCX: 00007f31bb175dfc [ 126.426638][ T7619] RDX: 000000000000000f RSI: 00007f31bbf7a0b0 RDI: 0000000000000005 [ 126.434621][ T7619] RBP: 00007f31bbf7a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.442609][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.450593][ T7619] R13: 000000000000000b R14: 00007f31bb305f80 R15: 00007fff74f9f528 [ 126.458598][ T7619] [ 126.753906][ T7637] netlink: 'syz.3.763': attribute type 9 has an invalid length. [ 127.164695][ T7654] netlink: 56 bytes leftover after parsing attributes in process `syz.4.771'. [ 127.190063][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.771'. [ 127.206806][ T7654] netlink: 31 bytes leftover after parsing attributes in process `syz.4.771'. [ 127.219587][ T7654] netlink: 'syz.4.771': attribute type 3 has an invalid length. [ 127.229935][ T7654] netlink: 'syz.4.771': attribute type 2 has an invalid length. [ 127.237829][ T7654] netlink: 31 bytes leftover after parsing attributes in process `syz.4.771'. [ 127.815827][ T7678] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 127.968515][ T7684] netlink: 'syz.2.778': attribute type 9 has an invalid length. [ 128.348564][ T7694] sctp: [Deprecated]: syz.2.782 (pid 7694) Use of int in max_burst socket option deprecated. [ 128.348564][ T7694] Use struct sctp_assoc_value instead [ 128.556233][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.562366][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 128.622820][ T7691] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 128.688316][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.784'. [ 128.773822][ T7709] netlink: 152 bytes leftover after parsing attributes in process `syz.4.788'. [ 129.069253][ T7721] netlink: 'syz.2.792': attribute type 9 has an invalid length. [ 129.267216][ T7729] IPv6: Can't replace route, no match found [ 129.369663][ T7731] netlink: 32 bytes leftover after parsing attributes in process `syz.2.797'. [ 129.405970][ T7734] netlink: 'syz.1.798': attribute type 2 has an invalid length. [ 129.455904][ T7734] netlink: 5 bytes leftover after parsing attributes in process `syz.1.798'. [ 129.968818][ T7767] netlink: 'syz.0.808': attribute type 9 has an invalid length. [ 130.714481][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.720706][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 130.775491][ T7793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 131.193314][ T7808] xt_ecn: cannot match TCP bits for non-tcp packets [ 131.929230][ T7832] IPv6: Can't replace route, no match found [ 132.143929][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.0.838'. [ 132.165222][ T7844] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 132.304275][ T7848] netlink: 132 bytes leftover after parsing attributes in process `syz.2.840'. [ 132.367020][ T7852] netlink: 'syz.0.842': attribute type 9 has an invalid length. [ 132.613086][ T7856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.843'. [ 132.684379][ T7861] sctp: [Deprecated]: syz.0.844 (pid 7861) Use of int in max_burst socket option deprecated. [ 132.684379][ T7861] Use struct sctp_assoc_value instead [ 132.837928][ T7861] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 133.199753][ T1262] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.206412][ T1262] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.349739][ T7873] IPv6: Can't replace route, no match found [ 133.492209][ T7875] netlink: 'syz.3.850': attribute type 10 has an invalid length. [ 133.555719][ T7875] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.569652][ T7875] team0: Port device netdevsim0 added [ 133.608329][ T7877] syzkaller0: entered promiscuous mode [ 133.626567][ T7877] syzkaller0: entered allmulticast mode [ 133.801275][ T7885] netlink: 32 bytes leftover after parsing attributes in process `syz.2.853'. [ 134.223529][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.3.860'. [ 134.656978][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.868'. [ 135.152715][ T7943] pimreg: entered allmulticast mode [ 135.205673][ T7943] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.874'. [ 135.274654][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.281710][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.285542][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.874'. [ 135.384369][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.874'. [ 135.446489][ T7957] netlink: 32 bytes leftover after parsing attributes in process `syz.0.879'. [ 135.612020][ T7966] netlink: 'syz.4.880': attribute type 2 has an invalid length. [ 135.638703][ T7966] netlink: 38 bytes leftover after parsing attributes in process `syz.4.880'. [ 135.772818][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 135.792426][ T7970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.652240][ T7999] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 137.067984][ T8023] 8021q: VLANs not supported on lo [ 137.099248][ T8023] Bluetooth: MGMT ver 1.23 [ 137.468918][ T8039] __nla_validate_parse: 2 callbacks suppressed [ 137.468939][ T8039] netlink: 32 bytes leftover after parsing attributes in process `syz.3.904'. [ 137.514355][ T5243] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.521187][ T5244] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 137.552420][ T7971] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 137.567875][ T5223] ------------[ cut here ]------------ [ 137.573376][ T5223] ODEBUG: free active (active state 0) object: ffff88807f13c978 object type: timer_list hint: hci_cmd_timeout+0x0/0x1e0 [ 137.623037][ T5223] WARNING: CPU: 0 PID: 5223 at lib/debugobjects.c:518 debug_print_object+0x17a/0x1f0 [ 137.632874][ T5223] Modules linked in: [ 137.636888][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz-executor Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 137.648136][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 137.658825][ T5223] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 137.664725][ T5223] Code: e8 eb 03 43 fd 4c 8b 0b 48 c7 c7 e0 72 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 9b d9 9d fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 0c 16 60 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 137.685510][ T5223] RSP: 0018:ffffc90003647838 EFLAGS: 00010282 [ 137.691805][ T5223] RAX: ddfeff2e56db2a00 RBX: ffffffff8c0cc480 RCX: ffff888019319e00 [ 137.700293][ T5223] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 137.708496][ T5223] RBP: ffffffff8c607460 R08: ffffffff81559432 R09: fffffbfff1cf9f88 [ 137.716660][ T5223] R10: dffffc0000000000 R11: fffffbfff1cf9f88 R12: 0000000000000000 [ 137.724722][ T5223] R13: ffffffff8c607378 R14: dffffc0000000000 R15: ffff88807f13c978 [ 137.732719][ T5223] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 137.741779][ T5223] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.749095][ T5223] CR2: 00007f0739307a8c CR3: 000000002e800000 CR4: 00000000003506f0 [ 137.757850][ T5223] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 137.765918][ T5223] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 137.774108][ T5223] Call Trace: [ 137.777408][ T5223] [ 137.780358][ T5223] ? __warn+0x163/0x4e0 [ 137.784637][ T5223] ? debug_print_object+0x17a/0x1f0 [ 137.789869][ T5223] ? report_bug+0x2b3/0x500 [ 137.794451][ T5223] ? debug_print_object+0x17a/0x1f0 [ 137.799700][ T5223] ? handle_bug+0x3e/0x70 [ 137.804215][ T5223] ? exc_invalid_op+0x1a/0x50 [ 137.808922][ T5223] ? asm_exc_invalid_op+0x1a/0x20 [ 137.813984][ T5223] ? __warn_printk+0x292/0x360 [ 137.818829][ T5223] ? debug_print_object+0x17a/0x1f0 [ 137.824133][ T5223] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 137.829446][ T5223] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 137.834846][ T5223] debug_check_no_obj_freed+0x45b/0x580 [ 137.840443][ T5223] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 137.847186][ T5223] ? lockdep_hardirqs_on+0x99/0x150 [ 137.852509][ T5223] ? hci_release_dev+0x1525/0x16b0 [ 137.858240][ T5223] kfree+0x10f/0x360 [ 137.862168][ T5223] hci_release_dev+0x1525/0x16b0 [ 137.867215][ T5223] ? devres_release_all+0x1eb/0x250 [ 137.872449][ T5223] ? __pfx_hci_release_dev+0x10/0x10 [ 137.877999][ T5223] ? device_release+0x66/0x1c0 [ 137.882785][ T5223] ? rcu_is_watching+0x15/0xb0 [ 137.887613][ T5223] ? device_release+0x66/0x1c0 [ 137.892402][ T5223] bt_host_release+0x83/0x90 [ 137.897112][ T5223] ? __pfx_bt_host_release+0x10/0x10 [ 137.902428][ T5223] device_release+0x99/0x1c0 [ 137.907192][ T5223] kobject_put+0x22f/0x480 [ 137.911641][ T5223] vhci_release+0x8b/0xd0 [ 137.916089][ T5223] ? __pfx_vhci_release+0x10/0x10 [ 137.921141][ T5223] __fput+0x24a/0x8a0 [ 137.925242][ T5223] task_work_run+0x24f/0x310 [ 137.929870][ T5223] ? __pfx_task_work_run+0x10/0x10 [ 137.935117][ T5223] ? do_exit+0xa2a/0x27f0 [ 137.939475][ T5223] ? kmem_cache_free+0x145/0x350 [ 137.944512][ T5223] do_exit+0xa2f/0x27f0 [ 137.949275][ T5223] ? __pfx_do_exit+0x10/0x10 [ 137.953886][ T5223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.960525][ T5223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.966949][ T5223] ? _raw_spin_unlock_irq+0x23/0x50 [ 137.972195][ T5223] ? lockdep_hardirqs_on+0x99/0x150 [ 137.977480][ T5223] do_group_exit+0x207/0x2c0 [ 137.982109][ T5223] __x64_sys_exit_group+0x3f/0x40 [ 137.987242][ T5223] x64_sys_call+0x26c3/0x26d0 [ 137.991950][ T5223] do_syscall_64+0xf3/0x230 [ 137.996638][ T5223] ? clear_bhb_loop+0x35/0x90 [ 138.001355][ T5223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.007367][ T5223] RIP: 0033:0x7fbaa89773b9 [ 138.011803][ T5223] Code: Unable to access opcode bytes at 0x7fbaa897738f. [ 138.018871][ T5223] RSP: 002b:00007fffa3d9f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 138.027356][ T5223] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbaa89773b9 [ 138.035425][ T5223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 138.043424][ T5223] RBP: 00007fbaa89d3a30 R08: 00007fffa3d9d0c7 R09: 0000000000021606 [ 138.052060][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.060605][ T5223] R13: 0000000000021606 R14: 0000000000000000 R15: 00007fffa3d9fbb0 [ 138.068688][ T5223] [ 138.071717][ T5223] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 138.078986][ T5223] CPU: 0 UID: 0 PID: 5223 Comm: syz-executor Not tainted 6.10.0-syzkaller-12624-g0bf50cead4c4 #0 [ 138.089476][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 138.099538][ T5223] Call Trace: [ 138.102830][ T5223] [ 138.105766][ T5223] dump_stack_lvl+0x241/0x360 [ 138.110451][ T5223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.115654][ T5223] ? __pfx__printk+0x10/0x10 [ 138.120240][ T5223] ? _printk+0xd5/0x120 [ 138.124482][ T5223] ? vscnprintf+0x5d/0x90 [ 138.128847][ T5223] panic+0x349/0x860 [ 138.132758][ T5223] ? __warn+0x172/0x4e0 [ 138.136904][ T5223] ? __pfx_panic+0x10/0x10 [ 138.141307][ T5223] ? show_trace_log_lvl+0x4e6/0x520 [ 138.146523][ T5223] __warn+0x346/0x4e0 [ 138.150511][ T5223] ? debug_print_object+0x17a/0x1f0 [ 138.155712][ T5223] report_bug+0x2b3/0x500 [ 138.160036][ T5223] ? debug_print_object+0x17a/0x1f0 [ 138.165228][ T5223] handle_bug+0x3e/0x70 [ 138.169375][ T5223] exc_invalid_op+0x1a/0x50 [ 138.173872][ T5223] asm_exc_invalid_op+0x1a/0x20 [ 138.178722][ T5223] RIP: 0010:debug_print_object+0x17a/0x1f0 [ 138.184532][ T5223] Code: e8 eb 03 43 fd 4c 8b 0b 48 c7 c7 e0 72 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 9b d9 9d fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 0c 16 60 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 [ 138.204217][ T5223] RSP: 0018:ffffc90003647838 EFLAGS: 00010282 [ 138.210278][ T5223] RAX: ddfeff2e56db2a00 RBX: ffffffff8c0cc480 RCX: ffff888019319e00 [ 138.218239][ T5223] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 138.226220][ T5223] RBP: ffffffff8c607460 R08: ffffffff81559432 R09: fffffbfff1cf9f88 [ 138.234202][ T5223] R10: dffffc0000000000 R11: fffffbfff1cf9f88 R12: 0000000000000000 [ 138.242177][ T5223] R13: ffffffff8c607378 R14: dffffc0000000000 R15: ffff88807f13c978 [ 138.250169][ T5223] ? __warn_printk+0x292/0x360 [ 138.254947][ T5223] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 138.260322][ T5223] ? __pfx_hci_cmd_timeout+0x10/0x10 [ 138.265620][ T5223] debug_check_no_obj_freed+0x45b/0x580 [ 138.271188][ T5223] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 138.277362][ T5223] ? lockdep_hardirqs_on+0x99/0x150 [ 138.282566][ T5223] ? hci_release_dev+0x1525/0x16b0 [ 138.287680][ T5223] kfree+0x10f/0x360 [ 138.291854][ T5223] hci_release_dev+0x1525/0x16b0 [ 138.296815][ T5223] ? devres_release_all+0x1eb/0x250 [ 138.302023][ T5223] ? __pfx_hci_release_dev+0x10/0x10 [ 138.307310][ T5223] ? device_release+0x66/0x1c0 [ 138.312061][ T5223] ? rcu_is_watching+0x15/0xb0 [ 138.316819][ T5223] ? device_release+0x66/0x1c0 [ 138.321572][ T5223] bt_host_release+0x83/0x90 [ 138.326166][ T5223] ? __pfx_bt_host_release+0x10/0x10 [ 138.331465][ T5223] device_release+0x99/0x1c0 [ 138.336047][ T5223] kobject_put+0x22f/0x480 [ 138.340473][ T5223] vhci_release+0x8b/0xd0 [ 138.344838][ T5223] ? __pfx_vhci_release+0x10/0x10 [ 138.349854][ T5223] __fput+0x24a/0x8a0 [ 138.353835][ T5223] task_work_run+0x24f/0x310 [ 138.358424][ T5223] ? __pfx_task_work_run+0x10/0x10 [ 138.363536][ T5223] ? do_exit+0xa2a/0x27f0 [ 138.367857][ T5223] ? kmem_cache_free+0x145/0x350 [ 138.372789][ T5223] do_exit+0xa2f/0x27f0 [ 138.376944][ T5223] ? __pfx_do_exit+0x10/0x10 [ 138.381522][ T5223] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 138.387501][ T5223] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.393826][ T5223] ? _raw_spin_unlock_irq+0x23/0x50 [ 138.399014][ T5223] ? lockdep_hardirqs_on+0x99/0x150 [ 138.404205][ T5223] do_group_exit+0x207/0x2c0 [ 138.408790][ T5223] __x64_sys_exit_group+0x3f/0x40 [ 138.413803][ T5223] x64_sys_call+0x26c3/0x26d0 [ 138.418477][ T5223] do_syscall_64+0xf3/0x230 [ 138.422974][ T5223] ? clear_bhb_loop+0x35/0x90 [ 138.427647][ T5223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.433534][ T5223] RIP: 0033:0x7fbaa89773b9 [ 138.438025][ T5223] Code: Unable to access opcode bytes at 0x7fbaa897738f. [ 138.445027][ T5223] RSP: 002b:00007fffa3d9f328 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 138.453437][ T5223] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbaa89773b9 [ 138.461399][ T5223] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 138.469373][ T5223] RBP: 00007fbaa89d3a30 R08: 00007fffa3d9d0c7 R09: 0000000000021606 [ 138.477340][ T5223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.485491][ T5223] R13: 0000000000021606 R14: 0000000000000000 R15: 00007fffa3d9fbb0 [ 138.493470][ T5223] [ 138.496729][ T5223] Kernel Offset: disabled [ 138.501139][ T5223] Rebooting in 86400 seconds..