last executing test programs: 1m15.220238103s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 1m1.569402687s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 48.743762671s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 35.592723186s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 22.615055558s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 5.743015233s ago: executing program 1 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="df5c62828094c2d4db798eab675771951ea1ad778bfe2f9d8e4bbefd1a24f6c3f918b1e64bffef43e44f5bf2b4523596dbff2c847c9986f6b97e7dd33a027138f689ae12e7b197953ee50abbb701ce7f0271efe3017ac07f7685ed13a0f076eae42066e4ecd0afacd9cbec436c649f190f8c2091c1b81e3096d99019d01a7fd4a714f4e04a107be4a60e8e22a74ec33cb5ab4382baf53b249b4226fab5d37d69fc8afe701ccd1975d871bc15dda11d086e59e722a944ccc78ff80e72c644686ebe8271d89331", @ANYRES16=r3, @ANYBLOB="010000000000000000004f00000008000300", @ANYRES32=r4, @ANYBLOB="40007a800c000300e84cad483d2058fc1c00020088df7aceebdb8d6266f5420d8707f034e7bf87f541a7234e14000100499f28b2e1ea83e55723d70db3f0a2f5"], 0x5c}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) openat$cgroup_int(r5, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) r6 = socket$caif_stream(0x25, 0x1, 0x3) sendfile(r0, r6, 0x0, 0x7fff) write$ppp(0xffffffffffffffff, 0x0, 0x0) 4.363926386s ago: executing program 2 (id=5446): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.997570563s ago: executing program 2 (id=5451): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000020000103000000000000000002141400000000000000000008000100ac1414000800020000000000f14df792b3476756ce643ea03f0c6a7daa20650e27c5a055c174fa950b9b4cbb9da67ab0c8d35e5390d31f74d80691b278c67e5371bf28c8078edf651485b7ffd544ba52e5649e9005f822e1259d47c220a29e"], 0x2c}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000040)=0x6) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8915, &(0x7f0000000240)={'lo\x00', {0x2, 0x0, @loopback}}) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@bloom_filter={0x1e, 0x100, 0x0, 0x80000001, 0x1012, 0xffffffffffffffff, 0xfb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0xf}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14}, 0x90) close(r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0xffffff00}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x3, 0x3, 0x0, 0x5, 0x200, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x1b, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000006c0e4448b2accd0000000000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000007a000000000000009e0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000009a1020006000000850000001f000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x400, 0x6, &(0x7f0000000300)=""/6, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0xe, 0xff}, 0x10, 0xffffffffffffffff, r2, 0x5, &(0x7f0000000580)=[r4, 0xffffffffffffffff, r5, r9, r10], &(0x7f00000005c0)=[{0x4, 0x5, 0x5, 0x8}, {0x1, 0x4, 0xb, 0x5}, {0x1, 0x3, 0xc, 0xb}, {0x2, 0x4, 0x6, 0x7}, {0x3, 0x5, 0xd, 0xa}], 0x10, 0x3}, 0x90) 2.368804996s ago: executing program 2 (id=5456): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window, @timestamp, @mss, @mss, @mss], 0x8) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0x440) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 1.926497223s ago: executing program 3 (id=5461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.67616495s ago: executing program 3 (id=5465): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000080)=ANY=[], 0x44) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x120a0, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0xe}}, 0x0, 0x3f, {0x0, 0x6, @default_ibss_ssid}, @val, @void, [{0xdd, 0x6, "62160a9990ee"}, {0xdd, 0x6, "e23956979c93"}]}, 0x36) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x4, "1c4542", 0x7, 0x3f}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x2c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1.628927902s ago: executing program 2 (id=5466): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@loopback, 0x0, 0x3c, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x865, 0x1}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) openat$cgroup_ro(r5, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0xa00, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 1.252637123s ago: executing program 2 (id=5470): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x18}, 0x90) r0 = socket(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000300)={0x28, 0x0, 0x0, @my=0x1}, 0x10) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x48, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}]}, 0x48}}, 0x0) recvmmsg$unix(r0, &(0x7f0000002bc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100020}, 0x8000000}], 0x1, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 1.238562772s ago: executing program 0 (id=5471): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.149170533s ago: executing program 4 (id=5472): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.1489384s ago: executing program 0 (id=5473): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x78) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6(0xa, 0x80003, 0x9) socket$inet6(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000800)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d480eb00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) 954.934967ms ago: executing program 4 (id=5474): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2]}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socket$packet(0x11, 0x2, 0x300) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x3, 0xa8}, @timestamp={0x44, 0x4, 0x21}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r2, 0x0, 0x0) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x6d}, @printk={@u}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="040000fde598e7dbdfc8ae405e91d8fbcb82efd97a2e2525030001000800020006e10000"], 0x1c}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000001680)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001640)={&(0x7f0000000480)={0x11a4, 0x3e, 0x8, 0x70bd29, 0x25dfdbfd, {0xc}, [@generic="b5022d5a96b219b79a86dde913b581902a0b6c4a53e05fbc130c1ef2f35843dbdcd602e31ffe6717480286d31534474eea2f369909c85bbced37536cde960a9f41a39a9930523967f6fb379a3148f25eba14547aad3d7591446044d2401c80d8cc0a5da367cba7aa561fd83b73715bfb9ce14e044bd293f14a", @typed={0x1004, 0xc4, 0x0, 0x0, @binary="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"}, @generic="0b9199cd457d2545fad49d55e79cc9ebcbc23ddd6e28c9f89993088751a36e3ea288994d90c9e12d07cd0ef0c26b28e4860db56ea0e4462e11632528806157b10ba069aaef488bdfad7bef03a37e7a838eba040e8c4afa42b0e07303c15f", @generic="5a66626c401dbe0ed19ceb9126182ba42087f9115266c5419c4f356d27e59bec7076e22d0a0144b57323a07db403b2fc09c12c79ec22ae6dde1bf6f1c601a469fe8e5a29bd079f287f4c06e751a92b6bf8311fb966b1ad7db9e34edeb8e8af20b9fbaa6b6cd078b7afa2a9fc24c9756bee39bc1dc564a3c20a300f6a2ee37a66cf3e4734e895d90cb18de577f8652a0c7e", @typed={0x4, 0x4a}, @typed={0x4, 0x8c}, @typed={0x8, 0x2e, 0x0, 0x0, @u32=0x7}, @typed={0xc, 0xf9, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0x9, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x11a4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) recvmmsg(r1, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3, 0x0) 849.023291ms ago: executing program 3 (id=5475): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 768.050337ms ago: executing program 4 (id=5476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYRESHEX=r0], 0xe4}, 0x1, 0x0, 0x0, 0x40090}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB], 0x14c}}, 0x0) socket(0x1e, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0xc4f30000) getsockopt$MRT(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000040), 0x4) 767.51847ms ago: executing program 3 (id=5477): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 665.816122ms ago: executing program 0 (id=5478): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @null, @bcast, @bcast, @null, @null, @default, @default]}, &(0x7f0000000140)=0x48, 0x80000) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48) sendto$inet6(r0, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x452}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) 655.410048ms ago: executing program 3 (id=5479): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x3, 0x8c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@remote, @in=@loopback, 0x0, 0x3c, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x865, 0x1}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x1600000000000000, &(0x7f0000000280)=@base={0x1, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(0xffffffffffffffff, 0x65, 0x3, 0x0, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) openat$cgroup_ro(r5, &(0x7f00000003c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r4}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x8) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) (fail_nth: 10) 592.437733ms ago: executing program 4 (id=5480): socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@map=0x1, 0x35, 0x0, 0xac, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=0x1, r2, 0x20, 0x18, 0x0, @link_fd, r3}, 0x20) pwritev(r2, &(0x7f00000006c0)=[{&(0x7f0000000200)="8dc41eeccb0f46d6e612bae26a26adeff105a8da2bea31533cf65040f450c2c3d4742651b834a0c1e19d5506fb779881b05fd7e482a62ab088f5dff88a3c05ab567f177bb27d6c99178935ac677197b0b09aa76e4c6cd8942bd38ffe40aacc8e7841c063f4b73cca7aa685675f5d48c2ee28af819a2778581328fe60da527adfe1b2f78ad163e53e7764acf73c9b2e809cc6ddfc57b0673cbd071f3606320c163dff34f7135fbdea230d9fb2ec8bb39d71cd8bd8556bb7b389c2671f29db2bbb7c9bac3669e24d5883e7ff34fc97ab1266", 0xd1}, {&(0x7f0000000300)="0ed28948951c05ee266a89f1e827567688882ae5a99d522cf20e733d65febdc3e2688ab77161bb5cf4c749d176ec2f3a2c92", 0x32}, {&(0x7f0000000340)="557cf3285a3ebcb58133182302917aa183cae3dbbdf528ed388d3525993b75a6abe5b39aef6fdca0f541899eeb4ba81f295794322b0f64532608ed6229b1ca4657284a739f60558a29530c7a5cd41a5b073cfe8d4bfcef386169de106054afda33a441be2e55521a2005ffbccdd3b0e583cbef", 0x73}, {&(0x7f00000003c0)="4eef2167cffceed50f3082152ac5058844341ca73c41f364c89ce0e5c9ca8a20beeadce09491c28e893fc49203a5fc5144b466b6941b55c05b428175100ef3fb20b764489d046b3c9139daf2391085f9e7a08ecdfc", 0x55}, {&(0x7f0000000440)="3e43894a3f214094efed5b71d992754fbda1ae614767c7a52c16db18f64b907e13b99e302fb366f7a3f5220b310116b320f5bf63eb1c989b7a9a3da058b5208cf11fb359cc2642c95f7cea5e32d4485fd3ee81af5d29aac9d64d245a3a5caa6c70eb4b3ae28db3f104a5b38d983013cda8365ac827c99b6602bca1b0adb88fe147bc82a048e33770ee19a8151e1cc032ba2c16e9a7253a3aeef5e03c94c842b391a62b73999280f22ac74072be335c8fb54e3b89c7662e2a06aec605ea75279e5e050f7aa066cbb1dfc34b9759baad8d7c52d28d4c3a613ad159914a2c006957ba5dcfc3d2ad728bc98674caaa4c571f3b01c8", 0xf3}, {&(0x7f0000000540)="57b6ea4867e5e3c47cc44fb9383acc8c8b65db9a98189e60cc236aa2ef8087db4fc031b6cb58c889f9b10dc5c0e4677a74dee22b4ad32b55087aa22159501cba6603687180fb619db8c93ce25cdf8cc7485318164673093a037910d81fe85664d25430a0a91d6c045d90f4f0f3", 0x6d}, {&(0x7f00000005c0)="b29bb1fea39be3c38690150d3d782cf101f0570363776f00bbca3f0af2b6bdef136dddefebdbdc3f6b25549c3876c8a322f426704dc03921ad3ad43df7f9c4641b6228268316612e03b8593c8cdf0e88025c921f09c910aa7e05afdea6cfbcf275937e2cb6b4681327f2e5b52e5aee3fc7213b09165811b68ec7e8838ed01a9837517332c26f5b8d541931ed0210810103c5a6ea8c738778200805becdb77f7dc3a5a50caf36e2d19a8cf4d2cf6300d215cf99f741d45a92c594c04b87b94b11fb0eab0d965fe9", 0xc7}], 0x7, 0x9, 0xfb) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000001d40)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001d00)={&(0x7f0000000840)={0x14a8, r4, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "6cdeb18d179ae773419a49b43e6c2b93e8a4e57a0e947886b3dcc0fe6dded3558a8e071a8f4391fdcc5c4508f6059c0b6d817111ce7f958280812855ed54236e2df1b04d80bd720c9a74a4a5766f6cc17a070146ada1fa2377273c09a6cd98575977501fdc636cf8f46eae6855763d26b0b63be31e3574d2e948f4fe6d35f655d32546536f57379e40e6c05c619ba201f32d8ce75c4aa7e307d5574048"}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_WANTED={0x1170, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x69, 0x5, "850d6bd7b6c6a1cf22b29de27b9028033c51a1227a779cc98cbf82a3271198e4ac1aaa3a58572a780de3d90ca89361e1f388b9b54a7c4f0afc6042efefeee4bba2045a2792965116667570313150efbf1dddfaa61ba9a3a44e8e997e9576dc3564f04d6a6e"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffff}, @ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "6480f99db081e11da3606db1d10a64bd1da1b6eeb6312ec063bdacc537663cfbb9a3d81d490be7de1e1a601ad62688a45856210cbd86ebf8319a11b7fb4bc969d1853b579a224d3c6f23a45e854d95b06cf425e9b7b3fd0f0487934125f50a207aadd3fb55adbf5e3bae91edbefda93da1511dcf08c57563f36c2bfebfff29acb450b56d13c0e2d1172b75c1967fca7a9a054b4fa60f323c8de89b5c6cad7f58946e7c0885fbd29f5273374a10940b61191568bcd1e46c6566bc366702380e6ccd63242b853338b7121e80030e98ecdc4fc40653ab08520c636add19521ed084743c0a7b530694b3cd0d674b9d498791e988add6337659c3f9e46330a129339ddd1dd90e4519c2589b6188b4bb6d06edcfd7c294e664c04e49364912974b18f936a35593aeb59f0d93b8483acd51f6808db66f35625102ed7a2988e28be8f50839dbd7a3351374401ba0c8036748cc86dcde20affb3f99bca9309eab60cbfa36ab8f6c4d25c059cba85ce00b9145d26d8d72a142aabe03369c615e4728a21cdeb1733b66c30632ab5a483f5045136f80e452919b2e70217d73181fa24e7edb15217e0c21a6e657c75a3c8f64afd9be18059dde759a894842691ef72cddf524a6ef2135aaa264bd4159130903ce3f90d2cc2145f70b46c9632a0e0e154115ac7908966557b83016bee31a317fe874d06d67f0cd337e905835d6488404152a090a34109946bbdf9103fd523b8ea8ae0d0caa86b13aef39a17c0de6ddd8bfb8cd49ddbfc5a65089691a75dbcd9a29fdc1892b67f34552cb939ab3af62ebde1be090fe222d4c6bc7414f57e9892504a616308d2dee4c1452d8385cf1aaa7f3bb313006d67bd031dc5d3c1c17e26fb5c58917d8627e227f5480bd8854211872cd418b11658feb4d919c2251fc7c356eb1467535d380f9edafff64456b003b9b0e7d40061fa92bbd7bac91a11876a4efe42f48094767c3d4a4f65c4eed7db55ab9fa38c5d99934235ae883f0fa0bb5298733c5f70df13d7018c8b1ad8412c803f8eb4423828f58b7ed17e08e9fcfa5950b8f477e54e50b67eb6ca4a67e769e2c67cd64dce4f9532e5130aaa90e929598208b231f9dcc6b2a2745f8c033b93ec6b71bdb70cfb2366e28f1b39a8ee9ec71ac941d0de31270afa395cd8553f41fb9f98236c536e2474be67f60a71bfaff3566acc918acf960c3c48a3b33ba192a4f3744f44e663b3466d7aa739ae5a66614faa90108c96a6135f12aa673652a79bbcebebfba2df52cd81f611476d08eee69694dce42819bf23d4f7f164cd9de071d63ba80500c76b60c61f01a040d6e688367955a1e26cfa46a573755c23fc4d670ea1adad875948d842e6f9fb82ff90ffa2c2787aa671b43f2269184e54f4234584665e4393373b544a2c322faedd557dc7279cf97b51dbdc9d96b8bf9ae421e237020b1c68b758bf2bfb2c7e036e32677eb80d202bb5993dc779399c9a03a708bbdc67b4554486fd0e7689e0cc937887e578ae8fdb6c7be7d388b1bc1a8a42b011d259cb3733bcba1c56179e7b6d2dd948967e926936a61d7a41b55a92c1f0f2a3e70e1d9b2f2b44054c8888e6f49c2d95c44ee7bffa12b6d0753b85a78bd651fe24487c0ce6fbaeb9e0ca082410053777c58ea26ae7247f86bb914c3d8bc6d0a49f94cf070cd06b97f9fd600d5ffe2ae349447ad3e598b08e49a4c0cafb56224b4989c3099f70181c894536ca4af7a9cf901f33d569813e105ebf8f3da476bdd3bb839ed3a5368d58e49e2816185b0e59ebb9bb7ba2c60654307098efb28716659b27fef41e0db38756b0ca47052320252b92af82e4f492fe91b00b55eec3ee0712346ab9bef7cedc5fa8494d55664f7be83be883691b987999816231e923a80699cae6a8c0f7eac94191abb914e39379165a4f0997ea3b70e6a07f85e54fe4461ee44cd20e699b3074fc5643cc1b830b5628f7fa61e1cdc854d88bc48ae0f79f438b4be2d3610545ebaed4644642e11b400526bd33f1e5d806b91f47761b94cf9b21d2109f5be2e77cc6130bed8f1d3b61312f8ead091ca44bad29119004e1af229e2aee973bf62b3583431b216ca5cceb6a0659bfb2df2ac6f07b9961e6b495ab8bc2032837032421962c982c9b1d42b0afaba892d90b854a595bc6069a314a01f0ba72e7038c2555e0b16fd64acd8fcb3d1a6bee64b3270cb2d4c6847c31c1d2d91a08dbbd4779f88d42fae6ee66b08f9ceaec6dee2a37e49e0d4d60aaeaa5da2bcf1fcecd55b4bbb9304f9766eacf9393363874ad858172012c8fdb071aa57432c306525716269d54a3edc84cceac533f0ff26b3c31046a119659eac4c75f631a7e3c815ee0345235951f3d02c6704dc356b85ebb448e07a7c96eb6f664c3750b4c5a69fe0e4befa5348c654f542b4e2d9b18b6bcd6249cd758d4fcd02304498edc4ea9e10e692cd4942dadbd9ab5ee1a4e24f15e0c6b66cb3adee1835ada055776fd555e6cbff4cf149b9ea95e7a145df6b937a7bdbec57dc3a85f0d3fbcd77fb6a888fe70f572ba56bbb4217d7a8e7cd4a00b9791d5da16abbcc5f88617198e36b9ec06713c7c438d2fbe2e3bd1e106ae839a09dd963977caf77194b222341e709012fb370ec61cb425987ef4d65f85a771e5d511962544a8e2c6addc75f7929744363834dc324c4821b2fb2c463823c5a7faf545a7d6a8aa92a1a643d0e0bdf8beea3a1880bca35eebb02a40bf8b5bade75819d879c5b4777e32d519603b247c17a04974961fb350ee424a6f8b1dc414d444956ee4ec6f3b19dc5985631f8aff997251ed4b20e31b14e07fdb892d41793e3077b95331a8991f0ea55cee3139fd219606a3f81a3b3f7121d29e9adf2c04aaef4b36737904068aa72368f9abf67e96052a8f2a84d879a1377c48a0ee070e53b19592bca2abcbf6b0a5d0a008b96b7bdbf1b2d7592d31dd197bb561712fe7e67cbb31382cf7dcff0662b3e76db319c6ba9d3dff2c661ff7828ed762d1efb703692e80816821d2babfc9b8f6c719f88e85720a7776e6b47f2d943d97a301fe85a8f95f318f1702ccadf4ccff1f523c9165327f4e3529a391711856c36dcb9a66ad14620d2eb9f0cf869ad01aeb5a7b6ca4bdde8432f6040ee51d94ad03615ce0b525caf6973c433be55cffe3cdd0ca772b5acbfc49904cf3569af5d8921f7d6ad5a356576cb74cf5e9b7df4ea39b8e0a9d10bc0b98c6c7d611c515aaa187e24becda84bbafd3a9e667969613a61b767ea8fd872628ad807bc9fb5ea717370f2542db5f2bf1ddad66815a80823fba55b844cffecf9136c979b45b6bbeba56ee6cd9e86d299283fc23506445cac8e81d4d44e97b260741837b9864ecd835546c417e685bf37ce00e7ef4c23bbee288983ff1da24033bcedd96ec3d4447739bba04162747d49e12a37a77b3ab4725e9cbea8c2a35db751c36c0fad9c6adf5bdd5c6ab32c8a8b5f0111526233a8ae1de6bbd51e4233819d2df894e8b613fa082cc5141c64403d8ebe8caacb1938c3f9ab59328ea020d32df6e0637019328178388c57c7102a2a4f422fe99aa6bd6969ade67a4fe34030acba2fd202a776a9a4172d614759a71c010450aab2b3550cf2daf92856160a46ef0c1ec30d711a3d7caffbb1407e2739553b75cd55f6e7e2216d081873026701f1cf29de66ce3add3a8f8862ffe2330783a45c82f1139acf8b77874637dd07764c2051df5ef0f24e6cd930c888b6ce43a1ddc2a9ef15e88ceb3fa616bfd92d0dbe69145eb4d7329c5f0ec59d59496c6af07b59e4cbced5d00ef179605d8fea0f1cfefbce63d252c671dc03895bd6262c3520b4d33beb124511f848053e921f51ed5f7a3940d961c7a98d1d4ebe2658b59ec8d9f52f7823849a91151c34c3dbaea8d5b066eda59369e3e106e8c882b911435ac0bfaf400b28a4414ee07ebbf37cc48859406f07dd9a220f17b7c16fb52ccfb8b2997f04552b505be2783e309dd77c42f2a284fd838c22c0e64b85057f7e0b22cb74920caef8492421b15d0042c03e2471df7cb37f08daf81b624dd8793275c02dc55c5ab874951a395a6dbf9cbf74000679d44bbeb34daf3655ef839805b0ea87cb48bf2a5305d4c4bfa1fb18591ba999625fda875cfcdd94d4cbb1984be895d12a06bdfa2e41bb92119d454380d787169e9a87b97b3ef4be17e62f29134fde340213bf7ee14845b151200d369a446cd93a22086f688cd60f2f8bfdc9ed51d44fc75dfcc88a502d8d3af0fe5a14a378379dca74f05d403ad37790b20dbdd9df7d2ca0a218f105a18ac98b253a0ad5b06a6e5c1a20660600ac010d0947537ed6dbbc7417b5fa81dee435f9f5f0525ac84d9b5093fe5e58166fffdc7e6d2b9609ecbebbbdc07d377bf375eba6d8ad74ec863b8ec58d2630d57be9c1872a92026d0e0c853a1ce9b6c0736a468e0925eca593306cd2045d8cc27c81b415db9dc3c4abb92d2957b08d46d88c6bf9ca8712ceae943d62fda6030185043dc8346d949176ef5846bda8ca04f607d733b28a1a117438f8419a35bdc91e92f4d04cc625340a07b2355645f3c63bf6f5eea57533a1bd92f2050debbb780d3a07ef50d8770716c94f0a955aa733ecce08b90b88576632039f8f98289815cae6845d694a90fd5c036b9f44fe4eb99b30067bc129bcd4aee0fef26989ce082ae69fb1516f2a8983a5596f60315f4f06ea942c5a34b2f8101c96d5de5f889e2ca35c52ab8f1b34bd7c13731798ef6d32a4c3b82d1501476fda644f27a45f3e63bbf7a4b71c0835ac357b99ed32687eb6faa4b504ef1a5cad7d1362d53ff8cd7734d9fbbbd8de9f3e1334c2fd55b86f3bbab152ed57dfb6662fb7b1b5797174925d91eb77d5aadd4340a0eb5a46ca25b2e205808873920671f3a3d84f97a1e56743e05066284a48d7d092b1b52f50f7248c51908fc0c62badde5371e8a4f4291b2b798df45660ba6c06521c5913bf7f38af351f486c81116a76a3d76792383b07b880a104f31d299039c099bddae32b27672cc7dd40d2a79cf68a251b83f30dd08260308e1108f0d6c29f7cd3b1ce805a4bf3d64b96dc04c4a6aec9d7ec076e7e92e85e1aac0802c06d195f5f2f8c16d81ca1b6674e0753d187f103d058d3c3e4c356d07506f57f730f7c7c412c45e907eee031af8dcd72a308509c00f3321480c303eb0982c5f6192195c95d561edd037129c94e15a02b3a8ea63320556b286e17391f7d8460cc7522ed782eedf564e97d036a99ecc13019d1052e118b1c460e746a30128be0a012f62dc0c10557144fadd2e97653cdde7943a2970e41f1cc78d8a22d2e538572e5db07aa2176eacdb58724431406250e4fa9694fc35c15448376776a8dddfef701c2bd618031962e43dfec332b1f059161897a5acf7ba301bd1b38788e0274dcae4e2be06a0e492f03c67006a6c1b2c683c8c7ad688e2adcba613a44afc39df2cd14b043247e1ff43d864bf3e771123b055ffdb187f74457fc5d790a01f74b63563d2735021f116ef4eb3e18f931dba45f7102e6060f3570cfa79f31a1d9175118fd77b0cd604239fe15f05e20bb7ad612aff77428e6f44a8060c3d4586a495ea84e01bdcc10c39dcc32d066357fcbd0a7d971141c8e2c581fe022bb87a2216d66956bf3607909d340b3296e1f2de78d1e26590300b9d3cf4928a98dc254f20cf1ad059fecc6b02d862a2a90850e0aeca19d8cbd2493ea7c2a47739c19bfe4684fef95c4968e81c82789f600dd20e36feba49b0cf82116fe722330525b7668dc61f43a308a1f72c7"}, @ETHTOOL_A_BITSET_VALUE={0x58, 0x4, "2e22bb02bf14845f37655a7d53655c067b1eccd6e520c1270e638bf08182b130d5076971eb18d55dba27adbe2750e6049ba375c6f8bb8b6b226bbf2825574ad49ee75ae06243b8f62ce2f0541bcc290222b166ff"}, @ETHTOOL_A_BITSET_VALUE={0x93, 0x4, "bbc37debc77ededbf7c6c74f9cd4cec1cbe6730a0b29be3a442b0e56a3b5fccd6722172a2360be1be59951d2169fd3a7612202456d2afe3ee02456b34061783447ff12d1495414c576b6316ce7938e8a96449f32f0e52301afb3f0b6591e97d74172f2f8a362802d9a97e126f557ee1f44c049a814e6da7f0f8f15bbab1af7d3fa2eb10c88dbeffd3a551ea64fb3d4"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_FEATURES_WANTED={0x224, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf8, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '\':&o\xfc-(-\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '+&\xc1!^-*\b(\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '&+:.\\\'*#^\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2c6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8c7a}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '#}]@{$/{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x503}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '+#,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(/[$#\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9df7}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',!^).(\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7f}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x57, 0x4, "058d0c59d2f932893b9cf48a3d03d29beb98721291aee9aca60062bffccbce991bd0394e2f6aab2108a6c2cd6f6b4d0a6157dd535a94a9271e97a6ae33e493c20bb917c6ee338dc370bf0cc3112f11aee31d59"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "fa920d767583aebd61f1814e75327cc5d1de704c99d0fe41ee325f73d4a9c2a4baf8c6462beb6b48e786e56ca3b5174d24bad90448700b8fdc25d4d98ff7f039872ce0c3451bc2c618432ede91771eb9e8fb7daf9227d395972a2c0cda9acf9cde2ffcd724b5597553fe6d64323aded5c3caa108"}, @ETHTOOL_A_BITSET_VALUE={0x44, 0x4, "9781d86b865a3800f145094dd486e90fbcc2d6adf514edcbab5b33996e51dbc3c30392369d0e8ca3b788a28a6f4db2617870fa3fc63f74640cf31f65e29ef683"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x14a8}, 0x1, 0x0, 0x0, 0x8881}, 0x40c0) r6 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000001d80), 0x800) accept4$packet(r6, &(0x7f0000001dc0), &(0x7f0000001e00)=0x14, 0x800) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000001e80), r1) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001ec0)=0x0) r9 = ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001f00)=0x0) r11 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000002140)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002100)={&(0x7f0000001f40)={0x190, r7, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r9}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r10}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r11}}]}, 0x190}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000002200)={'filter\x00', 0x0, 0x4, 0xe, [0x3, 0x7, 0x9, 0x9, 0x6, 0x1], 0x1, &(0x7f0000002180)=[{}], &(0x7f00000021c0)=""/14}, &(0x7f0000002280)=0x78) r12 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000022c0), 0x100000) recvfrom$rose(r12, &(0x7f0000002300)=""/4096, 0x1000, 0x3, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000003300)={0x80, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000003340)={r13}, 0x4) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, &(0x7f0000003380)) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f00000033c0)={0x0, 0x0, 0x1000, 0x9}) r14 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003400)={{{@in=@loopback, @in=@rand_addr=0x64010102, 0x4e23, 0x0, 0x4e20, 0x4, 0x2, 0x80, 0x0, 0x2b, r5, r14}, {0x9, 0x2, 0x10001, 0xd2c9, 0x8, 0x0, 0x3, 0x24000000}, {0x4, 0xff, 0x0, 0x121}, 0x80, 0x0, 0x0, 0x1, 0x3}, {{@in=@empty, 0x4d2, 0x3c}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3506, 0x1, 0x0, 0x81, 0xc2a, 0x8, 0x1ff}}, 0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000003500)={'batadv_slave_1\x00'}) bpf$ITER_CREATE(0x21, &(0x7f0000003540), 0x8) 424.908028ms ago: executing program 4 (id=5481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @null, @bcast, @bcast, @null, @null, @default, @default]}, &(0x7f0000000140)=0x48, 0x80000) connect$ax25(r1, &(0x7f0000000180)={{0x3, @bcast, 0x7}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default]}, 0x48) sendto$inet6(r0, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) r2 = socket$inet(0x2, 0x80001, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x2, 0xa, 0x9a807f839144420f, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x452}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x38) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x99, &(0x7f00000004c0)=""/153}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000480), &(0x7f00000004c0)=r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) 318.119046ms ago: executing program 0 (id=5482): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet6(r1, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000100)="966d", 0x2}], 0x1}}], 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000000)) 153.909952ms ago: executing program 0 (id=5483): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x8, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 73.161055ms ago: executing program 2 (id=5484): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 72.252274ms ago: executing program 0 (id=5485): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000080)=ANY=[], 0x44) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x120a0, 0x0) r2 = socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000000), 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2}]}, @void, @void, @void, @void, @void, @void}, 0x2f) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0xe}}, 0x0, 0x3f, {0x0, 0x6, @default_ibss_ssid}, @val, @void, [{0xdd, 0x6, "62160a9990ee"}, {0xdd, 0x6, "e23956979c93"}]}, 0x36) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x0, 0x4, "1c4542", 0x7, 0x3f}) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000000)=@mgmt_frame=@beacon={{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x0, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @void}, 0x2c) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 41.04601ms ago: executing program 4 (id=5486): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6f}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) socket(0x6, 0x3, 0x0) (async) r3 = socket(0x6, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) (async) bind$alg(r7, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001940)="1f18e395312d0af6d9de516f9695d0191a15a3d0c6def581b80f341767d56ac6", 0x20) r8 = accept4(r7, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r9, r8, 0x0, 0x5) (async) sendfile(r9, r8, 0x0, 0x5) recvmsg(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0000c3d9d7e6d083d50bdcf9ffeb6666836a81f9da9a72813ee8b799663945dbc0aef5f0ede234a3b82cd51a5ac664a4132b5bc6e2636d690cce4bec1e75888ebe3f63a802ccb44b569ba4f5cfae4ee7085a4886c9e03494e0fe8bf9"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c00000011000500000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0000c3d9d7e6d083d50bdcf9ffeb6666836a81f9da9a72813ee8b799663945dbc0aef5f0ede234a3b82cd51a5ac664a4132b5bc6e2636d690cce4bec1e75888ebe3f63a802ccb44b569ba4f5cfae4ee7085a4886c9e03494e0fe8bf9"], 0x2c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001a00b083df00001a00000000020014ff27000000000000000800100040000000"], 0x24}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r10, @ANYBLOB="01e5ff000000000004003b1c210008000300", @ANYRES32=r2, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000000), 0x208e24b) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) r13 = accept(r12, 0x0, 0x0) sendmsg$alg(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000000280)="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", 0x114}, {&(0x7f0000003e00)="a3aa962479d4ccfc1421d181191dae96249f864ecc31119086b4f4d469624500bbf6f0c8cd4867d6bb6cd2369aa35e99f2d881295389c953991007be873121e54005c3cfbc0e60dfdb279ab6f9cea169c7", 0x51}, {&(0x7f0000001780)="ba50a17dfec0cef9d432f422cc8145913aec3fa7a2a66594586e2eb342a791102179042b77c23304675570c93e80e3f20c", 0x31}, {&(0x7f0000002f00)="506d5d6ccfe3456455", 0x9}, {&(0x7f0000004f00)="2900a27c1df025725eb22fca18e02ce2508fa6fc983fdf2b3e27ce03c79448fc0e242df779e0fe7de2f9b6975c8dea855c5fb61c8f716bdb61fa96452508968e337ffcac44094f055332edb01610a619bba6684b99e9c3b6c8c4718b37ca8c3044327f070587f50b65778d548d878137eb73b37ed8fbdfb8d08c2a36f147c440fa9bc70325316bbae8e3833f98f8b7fd9fb20d3c846a4a7bb9311e6e84142af02d1db24a01e28ed2e5981fc8ce53b562f89ee36c362283c2f3abc069f259c1997bb4b05a1849597777bc69780c8f36c16b", 0xd1}], 0x5}, 0x0) (async) sendmsg$alg(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000005f00)=[{&(0x7f0000000280)="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", 0x114}, {&(0x7f0000003e00)="a3aa962479d4ccfc1421d181191dae96249f864ecc31119086b4f4d469624500bbf6f0c8cd4867d6bb6cd2369aa35e99f2d881295389c953991007be873121e54005c3cfbc0e60dfdb279ab6f9cea169c7", 0x51}, {&(0x7f0000001780)="ba50a17dfec0cef9d432f422cc8145913aec3fa7a2a66594586e2eb342a791102179042b77c23304675570c93e80e3f20c", 0x31}, {&(0x7f0000002f00)="506d5d6ccfe3456455", 0x9}, {&(0x7f0000004f00)="2900a27c1df025725eb22fca18e02ce2508fa6fc983fdf2b3e27ce03c79448fc0e242df779e0fe7de2f9b6975c8dea855c5fb61c8f716bdb61fa96452508968e337ffcac44094f055332edb01610a619bba6684b99e9c3b6c8c4718b37ca8c3044327f070587f50b65778d548d878137eb73b37ed8fbdfb8d08c2a36f147c440fa9bc70325316bbae8e3833f98f8b7fd9fb20d3c846a4a7bb9311e6e84142af02d1db24a01e28ed2e5981fc8ce53b562f89ee36c362283c2f3abc069f259c1997bb4b05a1849597777bc69780c8f36c16b", 0xd1}], 0x5}, 0x0) 0s ago: executing program 3 (id=5487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) unshare(0x20000600) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000bdc5072e4c75223f007e6ca306000000000000009c91420b66f0980e90dc0a9900d145243692fe648adf4cbc1dc631c378820861eccfa60822e798d6526600eea6c33dd5b2a7762091bffe56a9440bf23deb4dc8947d2bafec88ae3708013fdc5b2a1dbc7d50fcb6d9a01d03491c35fee5ff00002e40db34dea1063eaf2e3d6959435775943a5a7090b1c08454a248811ed0850a0e16793732f7c9af95af00100000955133044fd041b55379c29cc8ca9e1e5223ceb6f2e4980e5be2d3f36ae968af01953b6e4b3aa3fe0c375b2e17019ccdf4b9b5caccc4722cf3e6cfa6567c5a8e01bf465f0a27e54911827c4fa432ca89bf5ac89effedbe12b66ce9643697ac0e12a966dcea592613f479d71eb2597dd9000000000000000000000000001d5bdafcd419016b45507fedc616a94a06268d9b21e956eabc"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x2, 0x9, 0x201, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c05db5c68c3c8080000000000ff00000000000005000c0000000000"], 0x1c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000280)=0x5d, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) ioctl$SIOCGSTAMPNS(r6, 0x8907, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'team_slave_1\x00', 0x0}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000700)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000440)='GPL\x00', 0xfb9, 0x4b, &(0x7f00000004c0)=""/75, 0x41000, 0x70, '\x00', r7, 0x25, r8, 0x8, &(0x7f0000000740)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x90) recvfrom$inet6(r6, 0x0, 0x2000000, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f00000092c0), 0x4ff, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x34, &(0x7f0000009000)=r1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000003000a1400000063315ae82c7847d6433906304f247c020a010100000000000000001c0000001400000000000000000000bae0000a000000000000000000"], 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ring): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.120438][T19562] chnl_net:caif_netlink_parms(): no params data found [ 446.204848][ T5306] bridge_slave_1: left allmulticast mode [ 446.222481][ T5306] bridge_slave_1: left promiscuous mode [ 446.240264][ T5306] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.272775][ T5306] bridge_slave_0: left allmulticast mode [ 446.287403][ T5306] bridge_slave_0: left promiscuous mode [ 446.301607][ T5306] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.956113][ T5091] Bluetooth: hci1: command tx timeout [ 447.084355][ T5306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.098136][ T5306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.109831][ T5306] bond0 (unregistering): Released all slaves [ 447.512804][T19562] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.533454][T19562] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.554760][T19562] bridge_slave_0: entered allmulticast mode [ 447.563517][T19562] bridge_slave_0: entered promiscuous mode [ 447.591764][T19627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4701'. [ 447.702199][T19562] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.721326][T19562] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.735428][T19562] bridge_slave_1: entered allmulticast mode [ 447.767971][T19562] bridge_slave_1: entered promiscuous mode [ 448.023154][T19562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.114160][T19562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.199429][ T5306] hsr_slave_0: left promiscuous mode [ 448.230166][ T5306] hsr_slave_1: left promiscuous mode [ 448.246654][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.254103][ T5306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.277998][ T5306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.297539][ T5306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.358189][ T5306] veth1_macvtap: left promiscuous mode [ 448.363778][ T5306] veth0_macvtap: left promiscuous mode [ 448.381258][ T5306] veth1_vlan: left promiscuous mode [ 448.394281][ T5306] veth0_vlan: left promiscuous mode [ 449.036869][ T5091] Bluetooth: hci1: command tx timeout [ 449.238196][ T5306] team0 (unregistering): Port device team_slave_1 removed [ 449.308748][ T5306] team0 (unregistering): Port device team_slave_0 removed [ 450.122589][T19562] team0: Port device team_slave_0 added [ 450.152794][T19562] team0: Port device team_slave_1 added [ 450.276273][T19562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.287399][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.368455][T19562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.409650][T19562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.428975][T19562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 450.467883][T19562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.684406][T19562] hsr_slave_0: entered promiscuous mode [ 450.708819][T19562] hsr_slave_1: entered promiscuous mode [ 450.724462][T19562] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 450.754222][T19562] Cannot create hsr debugfs directory [ 450.843693][T19667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4719'. [ 451.118066][ T5091] Bluetooth: hci1: command tx timeout [ 451.611209][T19690] Cannot find add_set index 0 as target [ 451.829378][T19693] veth0_vlan: left promiscuous mode [ 451.976902][T19562] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 451.990598][T19689] delete_channel: no stack [ 451.997359][T19562] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.029486][T19562] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.069562][T19562] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.197270][T19711] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4731'. [ 452.441514][T19562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.499087][T19562] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.542983][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.550199][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.564001][T19730] netlink: 'syz.2.4740': attribute type 5 has an invalid length. [ 452.610430][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.617724][ T5140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.825704][T19741] netlink: 'syz.0.4743': attribute type 16 has an invalid length. [ 452.852556][T19741] netlink: 'syz.0.4743': attribute type 17 has an invalid length. [ 453.097720][ T5137] Dead loop on virtual device ipvlan1, fix it urgently! [ 453.197891][ T5091] Bluetooth: hci1: command tx timeout [ 453.273792][T19562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.410631][T19562] veth0_vlan: entered promiscuous mode [ 453.448333][T19562] veth1_vlan: entered promiscuous mode [ 453.512728][T19562] veth0_macvtap: entered promiscuous mode [ 453.534920][T19562] veth1_macvtap: entered promiscuous mode [ 453.580103][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.594357][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.605028][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.630465][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.641882][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.652806][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.664327][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.675070][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.686511][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.699036][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.709454][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 453.720231][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.736843][T19562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.789128][T19764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4748'. [ 453.826277][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.849933][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.861893][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.883373][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.896552][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.920272][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.937104][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 453.969225][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.990922][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.001799][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.012348][T19562] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.023668][T19562] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.037857][T19562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.069065][T19562] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.096678][T19562] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.122754][T19562] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.136521][T19562] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.167443][ T5140] Dead loop on virtual device ipvlan1, fix it urgently! [ 454.376277][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.400584][T19775] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 60929 - 0 [ 454.416078][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.424129][T19775] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 60929 - 0 [ 454.438122][T19775] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 60929 - 0 [ 454.447380][T19775] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 60929 - 0 [ 454.459998][T19775] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 56636 - 0 [ 454.469646][T19775] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 56636 - 0 [ 454.482312][T19775] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 56636 - 0 [ 454.492168][T19775] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 56636 - 0 [ 454.504199][T19775] geneve2: entered promiscuous mode [ 454.514808][T19775] geneve2: entered allmulticast mode [ 454.598685][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.616081][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.690169][T19781] netlink: 'syz.4.4754': attribute type 10 has an invalid length. [ 454.714278][T19783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.727602][T19781] team0: Device ipvlan1 failed to register rx_handler [ 454.899975][T19785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.928937][T19785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.639161][T19811] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4765'. [ 456.189035][T19831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.280824][T19836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.303671][T19834] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4772'. [ 456.351773][T19836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.355684][T19834] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4772'. [ 456.364135][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4772'. [ 456.470308][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4772'. [ 456.487596][T19828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4772'. [ 456.762412][T19846] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4777'. [ 456.778211][ T5310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.841887][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4778'. [ 457.847998][T19863] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4779'. [ 458.032607][ T4492] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 458.042949][ T4492] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 458.051489][ T4492] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 458.066517][ T4492] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 458.084070][ T4492] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 458.094120][ T4492] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 458.157769][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.210765][ T5310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.261237][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.286834][T19883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.363773][ T5310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.392158][T19874] lo speed is unknown, defaulting to 1000 [ 458.479343][ T5310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.736663][ T5310] bridge_slave_1: left allmulticast mode [ 458.742362][ T5310] bridge_slave_1: left promiscuous mode [ 458.769575][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.798704][ T5310] bridge_slave_0: left allmulticast mode [ 458.834641][ T5310] bridge_slave_0: left promiscuous mode [ 458.854887][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.923478][T19901] __nla_validate_parse: 3 callbacks suppressed [ 458.923501][T19901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4795'. [ 459.550546][ T5310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.575491][ T5310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.604013][ T5310] bond0 (unregistering): Released all slaves [ 460.157691][ T4492] Bluetooth: hci1: command tx timeout [ 460.340937][T19916] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4801'. [ 460.365944][T19916] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4801'. [ 460.438090][T19916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4801'. [ 460.496847][T19916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4801'. [ 460.540907][T19874] chnl_net:caif_netlink_parms(): no params data found [ 460.612505][T19933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.780324][T19937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 460.800964][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 460.843654][ T5310] hsr_slave_0: left promiscuous mode [ 460.883909][ T5310] hsr_slave_1: left promiscuous mode [ 460.897912][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.913069][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 460.934700][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.953407][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.018096][ T5310] veth1_macvtap: left promiscuous mode [ 461.035338][ T5310] veth0_macvtap: left promiscuous mode [ 461.047323][ T5310] veth1_vlan: left promiscuous mode [ 461.057385][ T5310] veth0_vlan: left promiscuous mode [ 461.820950][ T5310] team0 (unregistering): Port device team_slave_1 removed [ 461.940106][ T5310] team0 (unregistering): Port device team_slave_0 removed [ 462.245952][ T4492] Bluetooth: hci1: command tx timeout [ 462.680707][T19939] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4806'. [ 462.747666][T19947] veth1_macvtap: left promiscuous mode [ 462.790700][T19950] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 463.027502][T19874] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.053764][T19874] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.084708][T19874] bridge_slave_0: entered allmulticast mode [ 463.105062][T19874] bridge_slave_0: entered promiscuous mode [ 463.125454][T19874] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.145140][T19874] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.177608][T19874] bridge_slave_1: entered allmulticast mode [ 463.194632][T19874] bridge_slave_1: entered promiscuous mode [ 463.332533][T19874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.377307][T19874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.528294][T19874] team0: Port device team_slave_0 added [ 463.551851][T19874] team0: Port device team_slave_1 added [ 463.597419][T20006] netlink: 'syz.0.4827': attribute type 20 has an invalid length. [ 463.620730][T20004] netlink: 'syz.0.4827': attribute type 20 has an invalid length. [ 463.660492][T19874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.681035][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.716661][T19874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.766823][T19874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.773838][T19874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.811278][T19874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.936031][T20012] Dead loop on virtual device ipvlan1, fix it urgently! [ 464.053836][T19874] hsr_slave_0: entered promiscuous mode [ 464.083128][T19874] hsr_slave_1: entered promiscuous mode [ 464.099379][T19874] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.110031][T19874] Cannot create hsr debugfs directory [ 464.325741][ T4492] Bluetooth: hci1: command tx timeout [ 464.939799][T19874] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.963057][T19874] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.990532][T19874] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 465.023171][T19874] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 465.225283][T19874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.281407][T19874] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.307023][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.314223][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.347239][ T9038] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.354446][ T9038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.852653][T19874] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.015446][T19874] veth0_vlan: entered promiscuous mode [ 466.051314][T19874] veth1_vlan: entered promiscuous mode [ 466.153396][T19874] veth0_macvtap: entered promiscuous mode [ 466.199753][T19874] veth1_macvtap: entered promiscuous mode [ 466.282727][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.321109][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.357504][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.395941][ T4492] Bluetooth: hci1: command tx timeout [ 466.397506][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.468085][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.498294][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.533869][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.575397][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.610081][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.656597][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.685640][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.735315][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.768602][T19874] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.801489][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.825909][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.845896][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.878835][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.898140][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.922997][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.946141][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.960188][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.006133][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.036995][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 467.049086][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.078130][T19874] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.117812][T19874] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.152509][T19874] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.211237][T19874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.237650][T19874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.258310][T19874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.301655][T19874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.546052][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 467.612916][ T5306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.647529][ T5306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.718074][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.740057][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.056201][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 468.576667][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 469.086621][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 469.596280][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 470.106123][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 470.421119][ T5302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.479102][T20169] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4893'. [ 470.616137][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 471.277209][ T5302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.360618][ T5302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.503583][ T5302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.707565][T20187] FAULT_INJECTION: forcing a failure. [ 471.707565][T20187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 471.796271][T20187] CPU: 1 PID: 20187 Comm: syz.3.4899 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 471.806490][T20187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 471.816566][T20187] Call Trace: [ 471.819867][T20187] [ 471.822816][T20187] dump_stack_lvl+0x241/0x360 [ 471.827525][T20187] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.832750][T20187] ? __pfx__printk+0x10/0x10 [ 471.837371][T20187] ? __pfx_lock_release+0x10/0x10 [ 471.842426][T20187] should_fail_ex+0x3b0/0x4e0 [ 471.847134][T20187] _copy_from_user+0x2f/0xe0 [ 471.851752][T20187] copy_msghdr_from_user+0xae/0x680 [ 471.856984][T20187] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 471.862832][T20187] __sys_sendmsg+0x23d/0x3a0 [ 471.867430][T20187] ? __pfx___sys_sendmsg+0x10/0x10 [ 471.867454][T20187] ? vfs_write+0x7c4/0xc90 [ 471.867514][T20187] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.867537][T20187] ? do_syscall_64+0x100/0x230 [ 471.867560][T20187] ? do_syscall_64+0xb6/0x230 [ 471.867582][T20187] do_syscall_64+0xf3/0x230 [ 471.867602][T20187] ? clear_bhb_loop+0x35/0x90 [ 471.867627][T20187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.867648][T20187] RIP: 0033:0x7f5b17d75bd9 [ 471.867667][T20187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 471.867684][T20187] RSP: 002b:00007f5b18a8e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.867707][T20187] RAX: ffffffffffffffda RBX: 00007f5b17f03f60 RCX: 00007f5b17d75bd9 [ 471.867722][T20187] RDX: 0000000000000000 RSI: 0000000020001200 RDI: 0000000000000003 [ 471.867736][T20187] RBP: 00007f5b18a8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 471.867749][T20187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.867763][T20187] R13: 000000000000000b R14: 00007f5b17f03f60 R15: 00007fff8b4f5368 [ 471.867794][T20187] [ 471.943659][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4900'. [ 471.989565][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 472.015404][ T5302] bridge_slave_1: left allmulticast mode [ 472.021766][ T5302] bridge_slave_1: left promiscuous mode [ 472.032258][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 472.041306][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 472.071588][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 472.082852][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.096639][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 472.107608][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 472.150749][ T5302] bridge_slave_0: left allmulticast mode [ 472.159317][ T5302] bridge_slave_0: left promiscuous mode [ 472.165103][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.530715][ T5302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.543679][ T5302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.554802][ T5302] bond0 (unregistering): Released all slaves [ 472.664442][T20192] lo speed is unknown, defaulting to 1000 [ 472.720491][T20203] lo speed is unknown, defaulting to 1000 [ 472.936353][T20210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.197952][T20219] netlink: 'syz.2.4909': attribute type 10 has an invalid length. [ 473.225729][T20219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4909'. [ 473.227900][T20209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.267330][T20219] bridge0: port 3(dummy0) entered blocking state [ 473.276807][T20219] bridge0: port 3(dummy0) entered disabled state [ 473.283357][T20219] dummy0: entered allmulticast mode [ 473.317582][T20219] dummy0: entered promiscuous mode [ 473.323563][T20219] bridge0: port 3(dummy0) entered blocking state [ 473.330063][T20219] bridge0: port 3(dummy0) entered forwarding state [ 473.519342][T20236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.666011][T20240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.744063][T20240] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.790820][T20243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4915'. [ 473.818621][T20236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.844966][ T5302] hsr_slave_0: left promiscuous mode [ 473.913146][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4917'. [ 474.054048][ T5302] hsr_slave_1: left promiscuous mode [ 474.061366][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.068964][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 474.078987][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.090075][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.118270][ T5302] veth1_macvtap: left promiscuous mode [ 474.123982][ T5302] veth0_macvtap: left promiscuous mode [ 474.133480][ T5302] veth1_vlan: left promiscuous mode [ 474.142258][ T5302] veth0_vlan: left promiscuous mode [ 474.156856][ T4492] Bluetooth: hci1: command tx timeout [ 474.733885][ T5302] team0 (unregistering): Port device team_slave_1 removed [ 474.780862][ T5302] team0 (unregistering): Port device team_slave_0 removed [ 475.202502][T20248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4917'. [ 475.221893][T20243] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4915'. [ 475.730236][T20192] chnl_net:caif_netlink_parms(): no params data found [ 475.797415][T20286] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4927'. [ 475.836562][T20286] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4927'. [ 475.876631][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4927'. [ 475.910143][T20282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4927'. [ 475.944289][T20282] netlink: 892 bytes leftover after parsing attributes in process `syz.3.4927'. [ 476.133126][T20297] syzkaller0: entered allmulticast mode [ 476.237038][T20192] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.244330][ T4492] Bluetooth: hci1: command tx timeout [ 476.251996][T20192] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.259873][T20192] bridge_slave_0: entered allmulticast mode [ 476.267664][T20192] bridge_slave_0: entered promiscuous mode [ 476.277612][T20192] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.284832][T20192] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.293352][T20192] bridge_slave_1: entered allmulticast mode [ 476.300842][T20192] bridge_slave_1: entered promiscuous mode [ 476.311062][T20288] syzkaller0: left allmulticast mode [ 476.433697][T20192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.484357][T20192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.655955][T20192] team0: Port device team_slave_0 added [ 476.682049][T20192] team0: Port device team_slave_1 added [ 476.740756][T20192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 476.755968][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.783541][T20192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 476.794984][T20335] lo speed is unknown, defaulting to 1000 [ 476.796450][T20192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 476.820343][T20192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 476.855666][T20192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.902073][T20339] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 476.958440][T20192] hsr_slave_0: entered promiscuous mode [ 476.977597][T20192] hsr_slave_1: entered promiscuous mode [ 476.993402][T20192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 477.006801][T20192] Cannot create hsr debugfs directory [ 477.144601][T20346] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.185353][T20346] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.221611][T20341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.250088][T20341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.288728][T20341] netlink: 892 bytes leftover after parsing attributes in process `syz.2.4945'. [ 477.478533][T20359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.595489][T20365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.644356][T20359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.663996][T20368] team0: Device sit1 is of different type [ 477.734591][T20359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.946871][T20374] lo speed is unknown, defaulting to 1000 [ 478.014881][T20192] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 478.044301][T20192] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 478.062596][T20376] Dead loop on virtual device ipvlan1, fix it urgently! [ 478.080145][T20192] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 478.108373][T20192] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 478.326472][ T4492] Bluetooth: hci1: command tx timeout [ 478.350756][T20192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.374231][T20192] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.388668][ T3070] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.395877][ T3070] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.436498][ T3070] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.443736][ T3070] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.856583][T20403] netlink: get zone limit has 8 unknown bytes [ 478.878946][T20400] syzkaller0: entered allmulticast mode [ 478.932801][T20192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.952357][T20398] syzkaller0: left allmulticast mode [ 479.161237][T20192] veth0_vlan: entered promiscuous mode [ 479.192534][T20192] veth1_vlan: entered promiscuous mode [ 479.275436][T20192] veth0_macvtap: entered promiscuous mode [ 479.333250][T20192] veth1_macvtap: entered promiscuous mode [ 479.399389][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.413005][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.440283][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.462561][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.485989][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.501997][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.514117][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.529598][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.540660][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.554330][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.564461][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 479.581618][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.608814][T20192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 479.679228][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.694618][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.709124][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.736624][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.768980][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.787597][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.815628][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.851638][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.881056][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.913462][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.928959][T20192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.940988][T20192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.958810][T20192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.026925][T20440] netlink: 'syz.2.4978': attribute type 3 has an invalid length. [ 480.049746][T20192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.073504][T20192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.092100][T20192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.112281][T20192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.397135][ T4492] Bluetooth: hci1: command tx timeout [ 480.529567][ T5310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.566902][ T5310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.635242][ T5313] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.674220][ T5313] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.029287][T20487] netlink: 'syz.4.4996': attribute type 3 has an invalid length. [ 481.053999][T20487] __nla_validate_parse: 12 callbacks suppressed [ 481.054023][T20487] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.4996'. [ 481.128001][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 481.646290][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 482.007821][T20539] netlink: 4188 bytes leftover after parsing attributes in process `syz.2.5014'. [ 482.024855][T20539] netlink: 4188 bytes leftover after parsing attributes in process `syz.2.5014'. [ 482.157726][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 482.266196][T20556] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5022'. [ 482.666218][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 482.777078][T20579] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5029'. [ 482.816020][T20579] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5029'. [ 482.843916][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5029'. [ 482.880545][T20576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5029'. [ 482.923074][T20576] netlink: 892 bytes leftover after parsing attributes in process `syz.4.5029'. [ 482.998825][T20591] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5035'. [ 483.040527][T20595] netlink: 'syz.0.5037': attribute type 1 has an invalid length. [ 483.176859][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 483.288186][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.686266][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 484.196179][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 484.303952][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.496997][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.543462][T20623] FAULT_INJECTION: forcing a failure. [ 484.543462][T20623] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 484.568510][T20623] CPU: 1 PID: 20623 Comm: syz.0.5048 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 484.578718][T20623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 484.588883][T20623] Call Trace: [ 484.592182][T20623] [ 484.595133][T20623] dump_stack_lvl+0x241/0x360 [ 484.599842][T20623] ? __pfx_dump_stack_lvl+0x10/0x10 [ 484.605074][T20623] ? __pfx__printk+0x10/0x10 [ 484.609694][T20623] ? __pfx_lock_release+0x10/0x10 [ 484.614743][T20623] should_fail_ex+0x3b0/0x4e0 [ 484.619452][T20623] _copy_from_iter+0x1f6/0x1960 [ 484.624332][T20623] ? __virt_addr_valid+0x183/0x520 [ 484.629468][T20623] ? __pfx_lock_release+0x10/0x10 [ 484.634526][T20623] ? __alloc_skb+0x28f/0x440 [ 484.639169][T20623] ? __pfx__copy_from_iter+0x10/0x10 [ 484.644488][T20623] ? __virt_addr_valid+0x183/0x520 [ 484.649623][T20623] ? __virt_addr_valid+0x183/0x520 [ 484.654739][T20623] ? __virt_addr_valid+0x44e/0x520 [ 484.659858][T20623] ? __check_object_size+0x49c/0x900 [ 484.665237][T20623] netlink_sendmsg+0x73d/0xcb0 [ 484.670010][T20623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.675294][T20623] ? __import_iovec+0x536/0x820 [ 484.680140][T20623] ? aa_sock_msg_perm+0x91/0x160 [ 484.685079][T20623] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 484.690360][T20623] ? security_socket_sendmsg+0x87/0xb0 [ 484.695821][T20623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 484.701102][T20623] __sock_sendmsg+0x221/0x270 [ 484.705784][T20623] ____sys_sendmsg+0x525/0x7d0 [ 484.710558][T20623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 484.715867][T20623] __sys_sendmsg+0x2b0/0x3a0 [ 484.720468][T20623] ? __pfx___sys_sendmsg+0x10/0x10 [ 484.725585][T20623] ? vfs_write+0x7c4/0xc90 [ 484.730037][T20623] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.736446][T20623] ? do_syscall_64+0x100/0x230 [ 484.741207][T20623] ? do_syscall_64+0xb6/0x230 [ 484.745890][T20623] do_syscall_64+0xf3/0x230 [ 484.750432][T20623] ? clear_bhb_loop+0x35/0x90 [ 484.755108][T20623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.760996][T20623] RIP: 0033:0x7f0df9d75bd9 [ 484.765407][T20623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 484.785024][T20623] RSP: 002b:00007f0dfaad9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 484.793439][T20623] RAX: ffffffffffffffda RBX: 00007f0df9f03f60 RCX: 00007f0df9d75bd9 [ 484.801409][T20623] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000004 [ 484.809395][T20623] RBP: 00007f0dfaad90a0 R08: 0000000000000000 R09: 0000000000000000 [ 484.817363][T20623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 484.825325][T20623] R13: 000000000000000b R14: 00007f0df9f03f60 R15: 00007ffe16464008 [ 484.833313][T20623] [ 484.837961][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 484.850845][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 484.866834][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 484.904782][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 484.932190][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 484.943357][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 484.953054][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 484.960833][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.030201][T20624] lo speed is unknown, defaulting to 1000 [ 485.391189][ T35] bridge_slave_1: left allmulticast mode [ 485.409989][ T35] bridge_slave_1: left promiscuous mode [ 485.448163][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.471119][ T35] bridge_slave_0: left allmulticast mode [ 485.490187][ T35] bridge_slave_0: left promiscuous mode [ 485.503262][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.985362][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.000125][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.012964][ T35] bond0 (unregistering): Released all slaves [ 486.296140][T20668] ipvlan2: entered promiscuous mode [ 486.311037][T20668] ipvlan2: entered allmulticast mode [ 486.323080][T20668] ip6gretap0: entered allmulticast mode [ 486.444979][T20674] __nla_validate_parse: 7 callbacks suppressed [ 486.444998][T20674] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5065'. [ 486.797281][T20624] chnl_net:caif_netlink_parms(): no params data found [ 486.899421][T20689] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5067'. [ 486.930743][T20689] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5067'. [ 486.980998][T20677] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5067'. [ 487.036940][ T5091] Bluetooth: hci1: command tx timeout [ 487.061394][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5067'. [ 487.111975][T20681] netlink: 892 bytes leftover after parsing attributes in process `syz.4.5067'. [ 487.175383][ T35] hsr_slave_0: left promiscuous mode [ 487.197428][ T35] hsr_slave_1: left promiscuous mode [ 487.208921][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.220710][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 487.235505][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.244378][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.289830][ T35] veth1_macvtap: left promiscuous mode [ 487.298735][ T35] veth0_macvtap: left promiscuous mode [ 487.304415][ T35] veth1_vlan: left promiscuous mode [ 487.311990][ T35] veth0_vlan: left promiscuous mode [ 487.416811][T20702] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5073'. [ 487.431330][T20702] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5073'. [ 487.458805][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5073'. [ 487.477580][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'. [ 487.945143][ T35] team0 (unregistering): Port device team_slave_1 removed [ 488.011316][ T35] team0 (unregistering): Port device team_slave_0 removed [ 488.654295][T20624] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.685194][T20624] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.692952][T20624] bridge_slave_0: entered allmulticast mode [ 488.700494][T20624] bridge_slave_0: entered promiscuous mode [ 488.710134][T20624] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.718106][T20624] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.725786][T20624] bridge_slave_1: entered allmulticast mode [ 488.738547][T20624] bridge_slave_1: entered promiscuous mode [ 488.947752][T20624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 488.961773][T20624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.098452][T20624] team0: Port device team_slave_0 added [ 489.115731][ T5091] Bluetooth: hci1: command tx timeout [ 489.123650][T20624] team0: Port device team_slave_1 added [ 489.253331][T20624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 489.272287][T20624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.341760][T20624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 489.370310][T20624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 489.395662][T20624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 489.475695][T20745] Dead loop on virtual device ipvlan1, fix it urgently! [ 489.478706][T20624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 489.619316][T20624] hsr_slave_0: entered promiscuous mode [ 489.641906][T20624] hsr_slave_1: entered promiscuous mode [ 489.678914][T20624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.704815][T20624] Cannot create hsr debugfs directory [ 490.153679][T20769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.327845][T20782] Dead loop on virtual device ipvlan1, fix it urgently! [ 490.336890][T20776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.407820][T20769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.432727][T20769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.651834][T20624] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 490.667712][T20624] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 490.681494][T20624] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 490.708539][T20624] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 490.909041][T20624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.951077][T20624] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.997911][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.005084][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.036512][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.043713][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.196337][ T5091] Bluetooth: hci1: command tx timeout [ 491.374527][T20819] Dead loop on virtual device ipvlan1, fix it urgently! [ 491.411729][T20624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.523350][T20827] netlink: 'syz.3.5113': attribute type 3 has an invalid length. [ 491.538497][T20827] __nla_validate_parse: 33 callbacks suppressed [ 491.538516][T20827] netlink: 666 bytes leftover after parsing attributes in process `syz.3.5113'. [ 491.579813][T20827] netlink: 'syz.3.5113': attribute type 21 has an invalid length. [ 491.608581][T20624] veth0_vlan: entered promiscuous mode [ 491.661722][T20624] veth1_vlan: entered promiscuous mode [ 491.699993][T20836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.740472][T20835] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5114'. [ 491.771572][T20835] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5114'. [ 491.793191][T20624] veth0_macvtap: entered promiscuous mode [ 491.831417][T20842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.842996][T20829] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5114'. [ 491.843768][T20624] veth1_macvtap: entered promiscuous mode [ 491.872275][T20845] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.897090][T20835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5114'. [ 491.945351][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.960699][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.973955][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.979466][T20829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5114'. [ 491.988586][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.011624][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.023079][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.048783][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.067300][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.088326][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.108090][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.118675][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.129431][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.141970][T20624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.169631][T20853] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5121'. [ 492.204367][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.219639][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.231870][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.244790][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.264910][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.284775][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.295401][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.316370][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.327025][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.337627][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.354340][T20624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.364910][T20624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.378023][T20624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.392334][T20624] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.414777][T20624] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.435739][T20624] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.444715][T20624] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.553242][T20863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5124'. [ 492.567899][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 492.742530][ T5313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.766793][T20875] FAULT_INJECTION: forcing a failure. [ 492.766793][T20875] name failslab, interval 1, probability 0, space 0, times 0 [ 492.783162][ T5313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.826540][T20875] CPU: 0 PID: 20875 Comm: syz.0.5130 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 492.836747][T20875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 492.846809][T20875] Call Trace: [ 492.850084][T20875] [ 492.853011][T20875] dump_stack_lvl+0x241/0x360 [ 492.857691][T20875] ? __pfx_dump_stack_lvl+0x10/0x10 [ 492.862884][T20875] ? __pfx__printk+0x10/0x10 [ 492.867474][T20875] ? __pfx___might_resched+0x10/0x10 [ 492.872756][T20875] ? __up_read+0x2c2/0x6b0 [ 492.877181][T20875] should_fail_ex+0x3b0/0x4e0 [ 492.881939][T20875] ? crypto_alg_mod_lookup+0x18e/0x720 [ 492.887422][T20875] should_failslab+0x9/0x20 [ 492.891942][T20875] kmalloc_trace_noprof+0x6c/0x2c0 [ 492.897062][T20875] crypto_alg_mod_lookup+0x18e/0x720 [ 492.902351][T20875] crypto_add_alg+0x1c0/0x310 [ 492.907025][T20875] ? __pfx_crypto_add_alg+0x10/0x10 [ 492.912220][T20875] crypto_user_rcv_msg+0x4f5/0x670 [ 492.917352][T20875] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 492.923009][T20875] ? __mutex_trylock_common+0x183/0x2e0 [ 492.928559][T20875] ? __pfx___might_resched+0x10/0x10 [ 492.933859][T20875] netlink_rcv_skb+0x1e3/0x430 [ 492.938634][T20875] ? __pfx_crypto_user_rcv_msg+0x10/0x10 [ 492.944281][T20875] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 492.949592][T20875] crypto_netlink_rcv+0x2a/0x40 [ 492.954439][T20875] netlink_unicast+0x7f0/0x990 [ 492.959209][T20875] ? __pfx_netlink_unicast+0x10/0x10 [ 492.964487][T20875] ? __virt_addr_valid+0x183/0x520 [ 492.969603][T20875] ? __check_object_size+0x49c/0x900 [ 492.974886][T20875] ? bpf_lsm_netlink_send+0x9/0x10 [ 492.980001][T20875] netlink_sendmsg+0x8e4/0xcb0 [ 492.984775][T20875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 492.990061][T20875] ? __import_iovec+0x536/0x820 [ 492.994908][T20875] ? aa_sock_msg_perm+0x91/0x160 [ 492.999849][T20875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 493.005128][T20875] ? security_socket_sendmsg+0x87/0xb0 [ 493.010586][T20875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.015867][T20875] __sock_sendmsg+0x221/0x270 [ 493.020543][T20875] ____sys_sendmsg+0x525/0x7d0 [ 493.025313][T20875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.030608][T20875] __sys_sendmsg+0x2b0/0x3a0 [ 493.035199][T20875] ? __pfx___sys_sendmsg+0x10/0x10 [ 493.040308][T20875] ? vfs_write+0x7c4/0xc90 [ 493.044756][T20875] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.051080][T20875] ? do_syscall_64+0x100/0x230 [ 493.055841][T20875] ? do_syscall_64+0xb6/0x230 [ 493.060512][T20875] do_syscall_64+0xf3/0x230 [ 493.065009][T20875] ? clear_bhb_loop+0x35/0x90 [ 493.069683][T20875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.075574][T20875] RIP: 0033:0x7f0df9d75bd9 [ 493.079985][T20875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.086618][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 493.099579][T20875] RSP: 002b:00007f0dfaad9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.099626][T20875] RAX: ffffffffffffffda RBX: 00007f0df9f03f60 RCX: 00007f0df9d75bd9 [ 493.122916][T20875] RDX: 0000000000000000 RSI: 0000000020000880 RDI: 0000000000000005 [ 493.130882][T20875] RBP: 00007f0dfaad90a0 R08: 0000000000000000 R09: 0000000000000000 [ 493.138853][T20875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.146818][T20875] R13: 000000000000000b R14: 00007f0df9f03f60 R15: 00007ffe16464008 [ 493.154804][T20875] [ 493.186477][ T5302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.194346][ T5302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.279330][ T5091] Bluetooth: hci1: command tx timeout [ 493.356486][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 493.606641][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 493.686326][T20894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5136'. [ 493.705908][T20892] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5134'. [ 493.767754][T20896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.866282][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 493.898745][T20898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 493.938844][T20898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.051497][T20906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.116585][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 494.136335][T20910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.165888][T20910] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.179974][T20906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.376851][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 494.626100][ C1] net_ratelimit: 1 callbacks suppressed [ 494.626121][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 494.886077][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 494.984986][T20927] tipc: Enabling of bearer rejected, already enabled [ 494.993538][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.042792][T20930] vlan2: entered promiscuous mode [ 495.146740][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.378136][T20947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.390847][T20949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.401148][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.497045][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.548858][T20960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.597088][T20958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.613530][T20947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.645329][T20958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.649477][T20965] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 495.660756][T20949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.672504][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.907976][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 495.982317][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.006724][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 496.054785][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.069785][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.085405][T20976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.329334][ T5310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.064922][ T5310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.144204][ T5310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.211104][ T5310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.311690][ T5310] bridge_slave_1: left allmulticast mode [ 497.318339][ T5310] bridge_slave_1: left promiscuous mode [ 497.324070][ T5310] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.333827][ T5310] bridge_slave_0: left allmulticast mode [ 497.339990][ T5310] bridge_slave_0: left promiscuous mode [ 497.346398][ T5310] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.781716][T21008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 497.800157][T21008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 497.812159][T21008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 497.823680][T21008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 497.840389][T21008] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 497.851276][T21008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 498.023320][ T5310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.034779][ T5310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.050207][ T5310] bond0 (unregistering): Released all slaves [ 498.062912][T20999] __nla_validate_parse: 15 callbacks suppressed [ 498.062924][T20999] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5166'. [ 498.161149][T21006] lo speed is unknown, defaulting to 1000 [ 498.369901][T21015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.466376][T21020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.531193][T21030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.575730][T21030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.658319][T21015] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.678571][T21025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.724322][T21025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.759380][T21020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 499.068726][ T5310] hsr_slave_0: left promiscuous mode [ 499.077049][ T5310] hsr_slave_1: left promiscuous mode [ 499.083302][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.099359][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.109922][ T5310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.117804][ T5310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.155237][ T5310] veth1_macvtap: left promiscuous mode [ 499.162000][ T5310] veth0_macvtap: left promiscuous mode [ 499.170279][ T5310] veth1_vlan: left promiscuous mode [ 499.176571][ T5310] veth0_vlan: left promiscuous mode [ 499.872148][ T5310] team0 (unregistering): Port device team_slave_1 removed [ 499.921897][T21008] Bluetooth: hci1: command tx timeout [ 499.941788][ T5310] team0 (unregistering): Port device team_slave_0 removed [ 500.527164][T21059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5180'. [ 500.723950][T21006] chnl_net:caif_netlink_parms(): no params data found [ 500.862045][T21084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.917296][T21089] net_ratelimit: 7 callbacks suppressed [ 500.917315][T21089] Dead loop on virtual device ipvlan1, fix it urgently! [ 501.023970][T21006] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.061927][T21100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.069757][T21006] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.095368][T21100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.098836][T21006] bridge_slave_0: entered allmulticast mode [ 501.128672][T21084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 501.129948][T21006] bridge_slave_0: entered promiscuous mode [ 501.155437][T21006] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.163193][T21006] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.176328][T21006] bridge_slave_1: entered allmulticast mode [ 501.184443][T21006] bridge_slave_1: entered promiscuous mode [ 501.211867][T21102] lo speed is unknown, defaulting to 1000 [ 501.247983][T21006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.282565][T21006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.371561][T21006] team0: Port device team_slave_0 added [ 501.386579][T21006] team0: Port device team_slave_1 added [ 501.446128][T21006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.456617][T21006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.498136][T21006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.544524][T21006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.552743][T21006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.602016][T21006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.713001][T21106] FAULT_INJECTION: forcing a failure. [ 501.713001][T21106] name failslab, interval 1, probability 0, space 0, times 0 [ 501.735013][T21106] CPU: 1 PID: 21106 Comm: syz.0.5196 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 501.745207][T21106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 501.755285][T21106] Call Trace: [ 501.758581][T21106] [ 501.761533][T21106] dump_stack_lvl+0x241/0x360 [ 501.766269][T21106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 501.771490][T21106] ? __pfx__printk+0x10/0x10 [ 501.776110][T21106] should_fail_ex+0x3b0/0x4e0 [ 501.780821][T21106] ? ethnl_default_doit+0x201/0xd80 [ 501.786049][T21106] should_failslab+0x9/0x20 [ 501.787702][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.790596][T21106] __kmalloc_noprof+0xd8/0x400 [ 501.799342][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.801574][T21106] ethnl_default_doit+0x201/0xd80 [ 501.812886][T21106] ? __nla_parse+0x40/0x60 [ 501.817326][T21106] ? __pfx_ethnl_default_doit+0x10/0x10 [ 501.822890][T21106] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 501.829228][T21106] genl_rcv_msg+0xb14/0xec0 [ 501.833730][T21106] ? mark_lock+0x9a/0x350 [ 501.838062][T21106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.843105][T21106] ? __pfx_lock_acquire+0x10/0x10 [ 501.848126][T21106] ? __pfx_ethnl_default_doit+0x10/0x10 [ 501.853674][T21106] ? __pfx___might_resched+0x10/0x10 [ 501.858963][T21106] netlink_rcv_skb+0x1e3/0x430 [ 501.863726][T21106] ? __pfx_genl_rcv_msg+0x10/0x10 [ 501.868753][T21106] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 501.874048][T21106] ? __netlink_deliver_tap+0x77e/0x7c0 [ 501.879519][T21106] genl_rcv+0x28/0x40 [ 501.883504][T21106] netlink_unicast+0x7f0/0x990 [ 501.888280][T21106] ? __pfx_netlink_unicast+0x10/0x10 [ 501.893563][T21106] ? __virt_addr_valid+0x183/0x520 [ 501.898675][T21106] ? __check_object_size+0x49c/0x900 [ 501.903959][T21106] ? bpf_lsm_netlink_send+0x9/0x10 [ 501.909085][T21106] netlink_sendmsg+0x8e4/0xcb0 [ 501.913864][T21106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.919159][T21106] ? __import_iovec+0x536/0x820 [ 501.924008][T21106] ? aa_sock_msg_perm+0x91/0x160 [ 501.928967][T21106] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 501.934255][T21106] ? security_socket_sendmsg+0x87/0xb0 [ 501.939721][T21106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 501.945007][T21106] __sock_sendmsg+0x221/0x270 [ 501.949688][T21106] ____sys_sendmsg+0x525/0x7d0 [ 501.954461][T21106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 501.959759][T21106] __sys_sendmsg+0x2b0/0x3a0 [ 501.964353][T21106] ? __pfx___sys_sendmsg+0x10/0x10 [ 501.969464][T21106] ? vfs_write+0x7c4/0xc90 [ 501.973919][T21106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 501.980249][T21106] ? do_syscall_64+0x100/0x230 [ 501.985019][T21106] ? do_syscall_64+0xb6/0x230 [ 501.989779][T21106] do_syscall_64+0xf3/0x230 [ 501.994377][T21106] ? clear_bhb_loop+0x35/0x90 [ 501.999055][T21106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.004955][T21106] RIP: 0033:0x7f0df9d75bd9 [ 502.009365][T21106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.029067][T21106] RSP: 002b:00007f0dfaad9048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.037480][T21106] RAX: ffffffffffffffda RBX: 00007f0df9f03f60 RCX: 00007f0df9d75bd9 [ 502.045448][T21106] RDX: 0000000000000000 RSI: 00000000200005c0 RDI: 0000000000000003 [ 502.053519][T21106] RBP: 00007f0dfaad90a0 R08: 0000000000000000 R09: 0000000000000000 [ 502.061495][T21106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.069473][T21106] R13: 000000000000000b R14: 00007f0df9f03f60 R15: 00007ffe16464008 [ 502.077463][T21106] [ 502.093839][T21104] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5195'. [ 502.112700][T21008] Bluetooth: hci1: command tx timeout [ 502.181540][T21006] hsr_slave_0: entered promiscuous mode [ 502.247817][T21006] hsr_slave_1: entered promiscuous mode [ 502.269657][T21006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.280196][T21006] Cannot create hsr debugfs directory [ 502.450326][T21123] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5200'. [ 502.491460][T21120] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5202'. [ 502.511350][T21120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5202'. [ 502.527906][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5202'. [ 502.539040][T21120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5202'. [ 502.552108][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5202'. [ 502.856380][T21141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.049499][T21145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.099592][T21146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.457561][T21162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5213'. [ 503.507790][T21006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.528955][T21006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.551300][T21006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.569146][T21006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 503.700289][T21006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.737859][T21006] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.753584][ T8871] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.760837][ T8871] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.790081][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.797393][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.809843][T21166] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5215'. [ 503.975174][T21173] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5217'. [ 503.996719][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 504.005937][T21173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5217'. [ 504.030625][T21177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5217'. [ 504.098034][T21170] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5217'. [ 504.121367][T21170] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5217'. [ 504.157998][T21112] Bluetooth: hci1: command tx timeout [ 504.165024][ T4492] Bluetooth: hci0: command 0x0405 tx timeout [ 504.334600][T21006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.488344][T21006] veth0_vlan: entered promiscuous mode [ 504.507407][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 504.512676][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.535292][T21205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5224'. [ 504.642639][T21211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.654919][T21006] veth1_vlan: entered promiscuous mode [ 504.695386][T21211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.742994][T21214] bridge0: port 3(dummy0) entered disabled state [ 504.773872][T21204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.831209][T21006] veth0_macvtap: entered promiscuous mode [ 504.853659][T21006] veth1_macvtap: entered promiscuous mode [ 504.893904][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.910351][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.921750][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.934777][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.945194][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.964363][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.979598][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.991562][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.993485][T21225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5232'. [ 505.002905][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.024370][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 505.031961][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.043197][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.055144][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.070666][T21006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.091411][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.103579][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.117417][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.135496][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.148462][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.164246][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.178909][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.191494][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.203523][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.217394][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.227746][T21006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.239984][T21006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.254811][T21006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.281345][T21006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.291454][T21006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.305254][T21006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.334121][T21006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.399094][T21229] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5233'. [ 505.436458][T21233] Dead loop on virtual device ipvlan1, fix it urgently! [ 505.526717][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 505.527117][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.570495][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.691243][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.745639][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.837599][T21251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.972582][T21258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.984153][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.028926][T21260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.036518][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 506.078938][T21251] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.098403][T21264] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.119776][T21258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.160236][T21258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 506.556183][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 506.909114][T21295] FAULT_INJECTION: forcing a failure. [ 506.909114][T21295] name failslab, interval 1, probability 0, space 0, times 0 [ 506.941017][T21296] Dead loop on virtual device ipvlan1, fix it urgently! [ 506.953050][T21295] CPU: 1 PID: 21295 Comm: syz.3.5255 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 506.963250][T21295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 506.973319][T21295] Call Trace: [ 506.976597][T21295] [ 506.979525][T21295] dump_stack_lvl+0x241/0x360 [ 506.984204][T21295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 506.989399][T21295] ? __pfx__printk+0x10/0x10 [ 506.993988][T21295] ? ref_tracker_alloc+0x332/0x490 [ 506.999106][T21295] should_fail_ex+0x3b0/0x4e0 [ 507.003785][T21295] ? skb_clone+0x20c/0x390 [ 507.008203][T21295] should_failslab+0x9/0x20 [ 507.012704][T21295] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 507.018083][T21295] skb_clone+0x20c/0x390 [ 507.022326][T21295] __netlink_deliver_tap+0x3cc/0x7c0 [ 507.027641][T21295] ? netlink_deliver_tap+0x2e/0x1b0 [ 507.032833][T21295] netlink_deliver_tap+0x19d/0x1b0 [ 507.037942][T21295] netlink_unicast+0x7be/0x990 [ 507.042707][T21295] ? __pfx_netlink_unicast+0x10/0x10 [ 507.047983][T21295] ? __virt_addr_valid+0x183/0x520 [ 507.053094][T21295] ? __check_object_size+0x49c/0x900 [ 507.058375][T21295] ? bpf_lsm_netlink_send+0x9/0x10 [ 507.063488][T21295] netlink_sendmsg+0x8e4/0xcb0 [ 507.066686][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 507.068250][T21295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.080450][T21295] ? __import_iovec+0x536/0x820 [ 507.085293][T21295] ? aa_sock_msg_perm+0x91/0x160 [ 507.090234][T21295] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.095521][T21295] ? security_socket_sendmsg+0x87/0xb0 [ 507.100993][T21295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.106284][T21295] __sock_sendmsg+0x221/0x270 [ 507.110962][T21295] ____sys_sendmsg+0x525/0x7d0 [ 507.115742][T21295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.121042][T21295] __sys_sendmsg+0x2b0/0x3a0 [ 507.125636][T21295] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.130745][T21295] ? vfs_write+0x7c4/0xc90 [ 507.135187][T21295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.141509][T21295] ? do_syscall_64+0x100/0x230 [ 507.146274][T21295] ? do_syscall_64+0xb6/0x230 [ 507.150950][T21295] do_syscall_64+0xf3/0x230 [ 507.155449][T21295] ? clear_bhb_loop+0x35/0x90 [ 507.160124][T21295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.166016][T21295] RIP: 0033:0x7f5b17d75bd9 [ 507.170438][T21295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.190041][T21295] RSP: 002b:00007f5b18a8e048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.198451][T21295] RAX: ffffffffffffffda RBX: 00007f5b17f03f60 RCX: 00007f5b17d75bd9 [ 507.206422][T21295] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 000000000000000b [ 507.214385][T21295] RBP: 00007f5b18a8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 507.222349][T21295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.230311][T21295] R13: 000000000000000b R14: 00007f5b17f03f60 R15: 00007fff8b4f5368 [ 507.238295][T21295] [ 507.551274][T21307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.577116][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 507.580887][T21309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.675383][T21317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.722708][T21317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.761004][T21309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.819963][T21324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.884960][T21309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 508.476989][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 508.834407][T21352] __nla_validate_parse: 22 callbacks suppressed [ 508.834428][T21352] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5272'. [ 508.944386][T21358] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5271'. [ 508.963715][T21358] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5271'. [ 508.987903][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 509.003375][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5271'. [ 509.027482][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5271'. [ 509.044396][T21350] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5271'. [ 509.112596][T21363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.233195][T21367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.295863][T21367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.333903][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.357161][T21363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.423749][ T5302] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.460143][T21373] macvlan3: entered allmulticast mode [ 509.496679][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 509.506364][T21373] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 509.514037][T21373] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 509.538167][T21380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.551373][T21373] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 509.558672][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.583122][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.614758][T21375] bond0: entered promiscuous mode [ 509.623828][T21375] bond_slave_1: entered promiscuous mode [ 509.630032][T21375] macvlan2: entered promiscuous mode [ 509.635523][T21375] macvlan3: entered promiscuous mode [ 510.007136][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 510.213111][ T5302] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.285327][ T5302] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.316054][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 510.341599][ T5302] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.434977][ T5302] bridge_slave_1: left allmulticast mode [ 510.441249][ T5302] bridge_slave_1: left promiscuous mode [ 510.447083][ T5302] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.455988][ T5302] bridge_slave_0: left allmulticast mode [ 510.461649][ T5302] bridge_slave_0: left promiscuous mode [ 510.468365][ T5302] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.649575][T21386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.689795][T21391] FAULT_INJECTION: forcing a failure. [ 510.689795][T21391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.770480][T21391] CPU: 0 PID: 21391 Comm: syz.3.5282 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 510.780691][T21391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 510.790776][T21391] Call Trace: [ 510.794080][T21391] [ 510.797040][T21391] dump_stack_lvl+0x241/0x360 [ 510.801755][T21391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.806980][T21391] ? __pfx__printk+0x10/0x10 [ 510.811600][T21391] ? snprintf+0xda/0x120 [ 510.815881][T21391] should_fail_ex+0x3b0/0x4e0 [ 510.820590][T21391] _copy_to_user+0x2f/0xb0 [ 510.825027][T21391] simple_read_from_buffer+0xca/0x150 [ 510.830427][T21391] proc_fail_nth_read+0x1e9/0x250 [ 510.835479][T21391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.841059][T21391] ? rw_verify_area+0x520/0x6b0 [ 510.845942][T21391] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 510.851517][T21391] vfs_read+0x204/0xbc0 [ 510.855697][T21391] ? __pfx_lock_release+0x10/0x10 [ 510.860745][T21391] ? __pfx_vfs_read+0x10/0x10 [ 510.865447][T21391] ? bpf_prog_test_run+0x352/0x3b0 [ 510.870678][T21391] ? __fget_files+0x29/0x470 [ 510.875301][T21391] ? __fget_files+0x3f6/0x470 [ 510.880180][T21391] ksys_read+0x1a0/0x2c0 [ 510.884431][T21391] ? __pfx_ksys_read+0x10/0x10 [ 510.889196][T21391] ? do_syscall_64+0x100/0x230 [ 510.893957][T21391] ? do_syscall_64+0xb6/0x230 [ 510.898634][T21391] do_syscall_64+0xf3/0x230 [ 510.903135][T21391] ? clear_bhb_loop+0x35/0x90 [ 510.907814][T21391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.913708][T21391] RIP: 0033:0x7f5b17d746bc [ 510.918127][T21391] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 510.937777][T21391] RSP: 002b:00007f5b18a8e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 510.946240][T21391] RAX: ffffffffffffffda RBX: 00007f5b17f03f60 RCX: 00007f5b17d746bc [ 510.954217][T21391] RDX: 000000000000000f RSI: 00007f5b18a8e0b0 RDI: 0000000000000007 [ 510.962189][T21391] RBP: 00007f5b18a8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 510.970157][T21391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.978134][T21391] R13: 000000000000000b R14: 00007f5b17f03f60 R15: 00007fff8b4f5368 [ 510.986123][T21391] [ 511.049296][T21388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5281'. [ 511.049320][T21403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.058528][T21388] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5281'. [ 511.141115][T21403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.169990][T21403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.219460][T21112] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.234899][T21112] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.244086][T21112] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.262161][T21112] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.273599][T21112] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 511.281253][T21112] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 511.347942][ C1] net_ratelimit: 3 callbacks suppressed [ 511.347962][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 511.523499][ T5302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.536070][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 511.546015][ T5302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.558171][ T5302] bond0 (unregistering): Released all slaves [ 511.575962][T21400] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5281'. [ 511.585007][T21400] 0·: renamed from hsr0 (while UP) [ 511.599204][T21400] 0·: entered allmulticast mode [ 511.604229][T21400] hsr_slave_0: entered allmulticast mode [ 511.633003][T21400] hsr_slave_1: entered allmulticast mode [ 511.640245][T21400] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 511.720546][T21406] lo speed is unknown, defaulting to 1000 [ 511.866080][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 512.046755][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 512.061931][T21421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.074542][T21412] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5287'. [ 512.203399][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.251149][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.275128][T21427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.376762][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 512.389917][T21430] macvlan2: entered allmulticast mode [ 512.415167][T21438] FAULT_INJECTION: forcing a failure. [ 512.415167][T21438] name failslab, interval 1, probability 0, space 0, times 0 [ 512.430816][T21430] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode [ 512.458398][T21430] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 512.478895][T21438] CPU: 0 PID: 21438 Comm: syz.4.5293 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 512.489112][T21438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 512.499195][T21438] Call Trace: [ 512.502484][T21438] [ 512.505410][T21438] dump_stack_lvl+0x241/0x360 [ 512.510109][T21438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.514296][T21430] macvlan2: entered promiscuous mode [ 512.515377][T21438] ? __pfx__printk+0x10/0x10 [ 512.525251][T21438] should_fail_ex+0x3b0/0x4e0 [ 512.529992][T21438] ? __alloc_skb+0x1c3/0x440 [ 512.534609][T21438] should_failslab+0x9/0x20 [ 512.534853][T21430] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 512.539207][T21438] kmem_cache_alloc_node_noprof+0x71/0x320 [ 512.539243][T21438] __alloc_skb+0x1c3/0x440 [ 512.539267][T21438] ? ip_generic_getfrag+0x1d5/0x310 [ 512.539288][T21438] ? __pfx___alloc_skb+0x10/0x10 [ 512.539306][T21438] ? raw6_getfrag+0x104/0x350 [ 512.539338][T21438] ? skb_put+0x114/0x1f0 [ 512.539366][T21438] __ip6_append_data+0x2ba6/0x4070 [ 512.539417][T21438] ? __pfx_raw6_getfrag+0x10/0x10 [ 512.539454][T21438] ? __pfx___ip6_append_data+0x10/0x10 [ 512.539476][T21438] ? ip6_setup_cork+0x9fd/0xfb0 [ 512.539503][T21438] ip6_append_data+0x264/0x3a0 [ 512.539530][T21438] ? __pfx_raw6_getfrag+0x10/0x10 [ 512.539554][T21438] rawv6_sendmsg+0x18f1/0x23c0 [ 512.539602][T21438] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 512.539637][T21438] ? aa_sk_perm+0x967/0xab0 [ 512.539675][T21438] ? __mutex_trylock_common+0x183/0x2e0 [ 512.539706][T21438] ? inet_sendmsg+0x330/0x390 [ 512.539725][T21438] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 512.539744][T21438] ? security_socket_sendmsg+0x87/0xb0 [ 512.539770][T21438] __sock_sendmsg+0x1a6/0x270 [ 512.539796][T21438] sock_sendmsg+0x134/0x200 [ 512.539823][T21438] ? __pfx_sock_sendmsg+0x10/0x10 [ 512.539864][T21438] ? iov_iter_bvec+0x4e/0x180 [ 512.539885][T21438] splice_to_socket+0xa13/0x10b0 [ 512.539905][T21438] ? __pfx_lock_release+0x10/0x10 [ 512.539948][T21438] ? __pfx_splice_to_socket+0x10/0x10 [ 512.539996][T21438] ? __lock_acquire+0x1346/0x1fd0 [ 512.540033][T21438] ? bpf_lsm_file_permission+0x9/0x10 [ 512.540053][T21438] ? security_file_permission+0x7f/0xa0 [ 512.540080][T21438] ? rw_verify_area+0x1d2/0x6b0 [ 512.540105][T21438] ? __pfx_splice_to_socket+0x10/0x10 [ 512.540124][T21438] do_splice+0xd77/0x1900 [ 512.540150][T21438] ? __pfx_lock_release+0x10/0x10 [ 512.540168][T21438] ? vfs_write+0x7c4/0xc90 [ 512.540194][T21438] ? __mutex_unlock_slowpath+0x21d/0x750 [ 512.540223][T21438] ? pipe_clear_nowait+0x196/0x220 [ 512.540248][T21438] ? __pfx_do_splice+0x10/0x10 [ 512.540276][T21438] __se_sys_splice+0x331/0x4a0 [ 512.738191][T21438] ? __pfx___se_sys_splice+0x10/0x10 [ 512.743509][T21438] ? do_syscall_64+0x100/0x230 [ 512.748308][T21438] ? __x64_sys_splice+0x21/0xf0 [ 512.753228][T21438] do_syscall_64+0xf3/0x230 [ 512.757727][T21438] ? clear_bhb_loop+0x35/0x90 [ 512.762405][T21438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.768294][T21438] RIP: 0033:0x7fbf54d75bd9 [ 512.772733][T21438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.792610][T21438] RSP: 002b:00007fbf55b3f048 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 512.801135][T21438] RAX: ffffffffffffffda RBX: 00007fbf54f04038 RCX: 00007fbf54d75bd9 [ 512.809123][T21438] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000005 [ 512.817087][T21438] RBP: 00007fbf55b3f0a0 R08: 0000000000008001 R09: 0000000000000000 [ 512.825052][T21438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.833022][T21438] R13: 000000000000006e R14: 00007fbf54f04038 R15: 00007ffc60356b58 [ 512.841034][T21438] [ 512.898006][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 512.932041][ T5302] hsr_slave_0: left promiscuous mode [ 512.952603][ T5302] hsr_slave_1: left promiscuous mode [ 512.963572][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.974604][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.990177][ T5302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.008986][ T5302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.058161][ T5302] veth1_macvtap: left promiscuous mode [ 513.063746][ T5302] veth0_macvtap: left promiscuous mode [ 513.078298][ T5302] veth1_vlan: left promiscuous mode [ 513.083662][ T5302] veth0_vlan: left promiscuous mode [ 513.330435][T21456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.356943][T21112] Bluetooth: hci1: command tx timeout [ 513.421352][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 513.565052][T21464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.591085][T21464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.626357][T21464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.834442][ T5302] team0 (unregistering): Port device team_slave_1 removed [ 513.881246][ T5302] team0 (unregistering): Port device team_slave_0 removed [ 513.937023][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 514.538905][T21475] __nla_validate_parse: 4 callbacks suppressed [ 514.538924][T21475] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5303'. [ 514.620485][T21471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5303'. [ 514.621985][T21475] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5303'. [ 514.716665][T21406] chnl_net:caif_netlink_parms(): no params data found [ 514.736014][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5303'. [ 514.800010][T21471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5303'. [ 514.813578][T21476] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5304'. [ 514.823603][T21489] netlink: 'syz.0.5306': attribute type 10 has an invalid length. [ 514.831674][T21476] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5304'. [ 514.852117][T21476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5304'. [ 514.890901][T21476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5304'. [ 514.939991][T21489] syz_tun: entered promiscuous mode [ 514.945546][T21476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5304'. [ 515.194902][T21406] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.203163][T21406] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.211148][T21406] bridge_slave_0: entered allmulticast mode [ 515.222604][T21406] bridge_slave_0: entered promiscuous mode [ 515.237817][T21406] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.245197][T21406] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.269215][T21406] bridge_slave_1: entered allmulticast mode [ 515.282480][T21406] bridge_slave_1: entered promiscuous mode [ 515.299447][T21504] dvmrp1: entered allmulticast mode [ 515.400132][T21406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.440887][T21112] Bluetooth: hci1: command tx timeout [ 515.460760][T21406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.504801][T21511] macvlan4: entered allmulticast mode [ 515.510957][T21511] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 515.603050][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.612675][T21406] team0: Port device team_slave_0 added [ 515.634022][T21406] team0: Port device team_slave_1 added [ 515.755358][T21406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.760916][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.770539][T21406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.781873][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.809411][T21406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.816315][T21521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.848749][T21406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.871070][T21406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.907148][T21406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 516.058606][T21406] hsr_slave_0: entered promiscuous mode [ 516.065399][T21406] hsr_slave_1: entered promiscuous mode [ 516.073670][T21406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 516.084375][T21406] Cannot create hsr debugfs directory [ 516.303517][T21546] netlink: 'syz.4.5321': attribute type 10 has an invalid length. [ 516.385265][T21546] syz_tun: entered promiscuous mode [ 516.420290][T21553] FAULT_INJECTION: forcing a failure. [ 516.420290][T21553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 516.472195][T21553] CPU: 1 PID: 21553 Comm: syz.2.5324 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 516.482393][T21553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 516.483328][T21546] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 516.492445][T21553] Call Trace: [ 516.492459][T21553] [ 516.492469][T21553] dump_stack_lvl+0x241/0x360 [ 516.492498][T21553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.492518][T21553] ? __pfx__printk+0x10/0x10 [ 516.492540][T21553] ? __pfx_lock_release+0x10/0x10 [ 516.492569][T21553] should_fail_ex+0x3b0/0x4e0 [ 516.492599][T21553] _copy_from_iter+0x1f6/0x1960 [ 516.492625][T21553] ? __virt_addr_valid+0x183/0x520 [ 516.492647][T21553] ? skb_set_owner_w+0x238/0x3e0 [ 516.492678][T21553] ? __pfx__copy_from_iter+0x10/0x10 [ 516.492705][T21553] ? __pfx__copy_from_iter+0x10/0x10 [ 516.492737][T21553] ? page_copy_sane+0x154/0x260 [ 516.492759][T21553] copy_page_from_iter+0x7a/0x100 [ 516.492781][T21553] skb_copy_datagram_from_iter+0x2d8/0x6c0 [ 516.492820][T21553] unix_dgram_sendmsg+0x7a7/0x1f80 [ 516.492855][T21553] ? aa_sk_perm+0x967/0xab0 [ 516.492883][T21553] ? aa_file_perm+0x3ef/0xf60 [ 516.492904][T21553] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 516.492929][T21553] ? __pfx_lock_acquire+0x10/0x10 [ 516.492948][T21553] ? aa_sock_msg_perm+0x91/0x160 [ 516.492982][T21553] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 516.493002][T21553] ? security_socket_sendmsg+0x87/0xb0 [ 516.493026][T21553] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 516.493045][T21553] __sock_sendmsg+0x221/0x270 [ 516.493069][T21553] sock_write_iter+0x2dd/0x400 [ 516.493093][T21553] ? __pfx_sock_write_iter+0x10/0x10 [ 516.493123][T21553] ? bpf_lsm_file_permission+0x9/0x10 [ 516.493143][T21553] ? security_file_permission+0x7f/0xa0 [ 516.493176][T21553] vfs_write+0xa72/0xc90 [ 516.493202][T21553] ? __pfx_sock_write_iter+0x10/0x10 [ 516.493224][T21553] ? __pfx_vfs_write+0x10/0x10 [ 516.493267][T21553] ksys_write+0x1a0/0x2c0 [ 516.493295][T21553] ? __pfx_ksys_write+0x10/0x10 [ 516.493317][T21553] ? do_syscall_64+0x100/0x230 [ 516.493341][T21553] ? do_syscall_64+0xb6/0x230 [ 516.493364][T21553] do_syscall_64+0xf3/0x230 [ 516.493384][T21553] ? clear_bhb_loop+0x35/0x90 [ 516.493410][T21553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.493431][T21553] RIP: 0033:0x7f86fff75bd9 [ 516.493450][T21553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.493467][T21553] RSP: 002b:00007f8700de7048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 516.493489][T21553] RAX: ffffffffffffffda RBX: 00007f8700103f60 RCX: 00007f86fff75bd9 [ 516.493505][T21553] RDX: 000000000000fdef RSI: 0000000020000000 RDI: 0000000000000003 [ 516.493519][T21553] RBP: 00007f8700de70a0 R08: 0000000000000000 R09: 0000000000000000 [ 516.493533][T21553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 516.493546][T21553] R13: 000000000000000b R14: 00007f8700103f60 R15: 00007ffe4c432618 [ 516.493577][T21553] [ 517.078118][T21572] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 517.085768][T21572] IPv6: NLM_F_CREATE should be set when creating new route [ 517.481426][T21406] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 517.516599][T21112] Bluetooth: hci1: command tx timeout [ 517.522317][T21406] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 517.545449][T21406] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 517.585469][T21406] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 517.912016][T21406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.963378][T21406] 8021q: adding VLAN 0 to HW filter on device team0 [ 518.036808][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.044024][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.067314][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.074500][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.641808][T21406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.941762][T21406] veth0_vlan: entered promiscuous mode [ 518.986826][T21406] veth1_vlan: entered promiscuous mode [ 519.084243][T21406] veth0_macvtap: entered promiscuous mode [ 519.114837][T21406] veth1_macvtap: entered promiscuous mode [ 519.158368][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.170079][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.182989][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.194646][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.209695][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.222290][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.239217][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.252602][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.264735][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.288635][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.311034][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.339669][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.379293][T21406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.552250][T21670] netlink: 'syz.4.5362': attribute type 10 has an invalid length. [ 519.579421][T21667] __nla_validate_parse: 35 callbacks suppressed [ 519.579441][T21667] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5363'. [ 519.588418][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.607140][ T5091] Bluetooth: hci1: command tx timeout [ 519.625846][T21667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5363'. [ 519.651664][T21669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5363'. [ 519.652307][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.689368][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.710793][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.725663][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.736953][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.747221][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.759338][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.769938][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.780514][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.790889][T21406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.805392][T21406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.827195][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5363'. [ 519.837962][T21406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.938745][T21406] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.975450][T21406] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.992196][T21406] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.013267][T21406] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.039251][T21685] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5368'. [ 520.053023][T21683] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5367'. [ 520.067471][T21683] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5367'. [ 520.282995][T21693] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5369'. [ 520.500812][ T5302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.524802][ T5302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.584712][ T5306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.614293][ T5306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.840948][T21719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.966551][T21723] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5380'. [ 520.980862][T21724] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.986608][T21723] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5380'. [ 521.044856][T21719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.089558][T21719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.676166][ T5091] Bluetooth: hci1: command 0x0405 tx timeout [ 522.214791][T21768] netlink: 'syz.3.5396': attribute type 10 has an invalid length. [ 522.262762][T21768] syz_tun: entered promiscuous mode [ 522.319742][T21768] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 523.206982][T21813] netlink: 'syz.4.5411': attribute type 10 has an invalid length. [ 523.677267][T21822] netlink: 'syz.4.5412': attribute type 10 has an invalid length. [ 523.755864][ T5091] Bluetooth: hci1: command 0x0405 tx timeout [ 524.293550][T21843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.432083][T21848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.506397][T21843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.135433][T21867] netlink: 'syz.2.5426': attribute type 10 has an invalid length. [ 525.172844][T21867] syz_tun: entered promiscuous mode [ 525.260144][T21867] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 525.634163][T21885] __nla_validate_parse: 23 callbacks suppressed [ 525.634183][T21885] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5433'. [ 525.688472][T21885] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5433'. [ 525.748245][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5433'. [ 525.791408][T21885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5433'. [ 525.836831][ T5091] Bluetooth: hci1: command 0x0405 tx timeout [ 525.893776][T21909] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5441'. [ 526.084654][T21896] netlink: 'syz.4.5437': attribute type 10 has an invalid length. [ 526.261365][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.392919][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.478571][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.552965][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.633811][ T35] bridge_slave_1: left allmulticast mode [ 526.642831][ T35] bridge_slave_1: left promiscuous mode [ 526.649050][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.658848][ T35] bridge_slave_0: left allmulticast mode [ 526.664526][ T35] bridge_slave_0: left promiscuous mode [ 526.671204][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.024373][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.037741][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.051244][ T35] bond0 (unregistering): Released all slaves [ 527.462827][ T35] hsr_slave_0: left promiscuous mode [ 527.489279][ T35] hsr_slave_1: left promiscuous mode [ 527.495535][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.505649][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.566551][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.592682][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 527.609104][T21922] FAULT_INJECTION: forcing a failure. [ 527.609104][T21922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.669746][T21922] CPU: 0 PID: 21922 Comm: syz.3.5447 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 527.679963][T21922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 527.690047][T21922] Call Trace: [ 527.693342][T21922] [ 527.696301][T21922] dump_stack_lvl+0x241/0x360 [ 527.701019][T21922] ? __pfx_dump_stack_lvl+0x10/0x10 [ 527.706250][T21922] ? __pfx__printk+0x10/0x10 [ 527.709152][ T35] veth1_macvtap: left promiscuous mode [ 527.710844][T21922] ? __pfx_lock_release+0x10/0x10 [ 527.721332][T21922] should_fail_ex+0x3b0/0x4e0 [ 527.726045][T21922] _copy_to_user+0x2f/0xb0 [ 527.726585][ T35] veth0_macvtap: left promiscuous mode [ 527.730465][T21922] bpf_test_finish+0x22c/0x8b0 [ 527.730500][T21922] ? __pfx_bpf_test_finish+0x10/0x10 [ 527.745999][T21922] ? _copy_from_user+0xa6/0xe0 [ 527.750780][ T35] veth1_vlan: left promiscuous mode [ 527.750788][T21922] ? bpf_test_init+0x15a/0x180 [ 527.760876][T21922] bpf_prog_test_run_xdp+0x905/0x11b0 [ 527.766276][T21922] ? __pfx_lock_release+0x10/0x10 [ 527.771312][T21922] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 527.777123][T21922] ? __fget_files+0x29/0x470 [ 527.781725][T21922] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 527.787530][T21922] bpf_prog_test_run+0x33a/0x3b0 [ 527.792470][T21922] __sys_bpf+0x48d/0x810 [ 527.796720][T21922] ? __pfx___sys_bpf+0x10/0x10 [ 527.801497][T21922] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 527.807477][T21922] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 527.813805][T21922] ? do_syscall_64+0x100/0x230 [ 527.818568][T21922] __x64_sys_bpf+0x7c/0x90 [ 527.822990][T21922] do_syscall_64+0xf3/0x230 [ 527.827493][T21922] ? clear_bhb_loop+0x35/0x90 [ 527.832170][T21922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.838057][T21922] RIP: 0033:0x7f5b17d75bd9 [ 527.842471][T21922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 527.862075][T21922] RSP: 002b:00007f5b18a8e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 527.870484][T21922] RAX: ffffffffffffffda RBX: 00007f5b17f03f60 RCX: 00007f5b17d75bd9 [ 527.878458][T21922] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 527.886465][T21922] RBP: 00007f5b18a8e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 527.894453][T21922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 527.902426][T21922] R13: 000000000000000b R14: 00007f5b17f03f60 R15: 00007fff8b4f5368 [ 527.910434][T21922] [ 527.917017][ T35] veth0_vlan: left promiscuous mode [ 528.167838][T21938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5452'. [ 528.232110][ T5091] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.256967][ T5091] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.265344][ T5091] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.301671][ T5091] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.310018][ T5091] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 528.318793][ T5091] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.862114][ T35] team0 (unregistering): Port device team_slave_1 removed [ 528.907677][ T35] team0 (unregistering): Port device team_slave_0 removed [ 529.392019][T21950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5453'. [ 529.528579][T21942] lo speed is unknown, defaulting to 1000 [ 529.669268][T21964] netlink: 'syz.4.5455': attribute type 10 has an invalid length. [ 530.023373][T21977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 530.273247][T21984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.292581][T21985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5464'. [ 530.397435][T21112] Bluetooth: hci1: command tx timeout [ 530.431205][T21997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.464621][T21984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.471094][T21992] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5468'. [ 530.477827][T21984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.552467][T22002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5466'. [ 530.666163][T21942] chnl_net:caif_netlink_parms(): no params data found [ 530.869738][T21942] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.902210][T21942] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.933054][T21942] bridge_slave_0: entered allmulticast mode [ 530.962113][T21942] bridge_slave_0: entered promiscuous mode [ 530.985432][T22020] netlink: 'syz.0.5473': attribute type 10 has an invalid length. [ 530.999343][T22025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.048313][T21942] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.075851][T21942] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.093722][T21942] bridge_slave_1: entered allmulticast mode [ 531.121777][T21942] bridge_slave_1: entered promiscuous mode [ 531.156689][T22029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5477'. [ 531.227713][T21942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.269860][T21942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.384940][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5479'. [ 531.408320][T22041] FAULT_INJECTION: forcing a failure. [ 531.408320][T22041] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.422132][T21942] team0: Port device team_slave_0 added [ 531.425431][T21942] team0: Port device team_slave_1 added [ 531.453174][T22041] CPU: 0 PID: 22041 Comm: syz.3.5479 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 531.463376][T22041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 531.473453][T22041] Call Trace: [ 531.476752][T22041] [ 531.479709][T22041] dump_stack_lvl+0x241/0x360 [ 531.484415][T22041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 531.489644][T22041] ? __pfx__printk+0x10/0x10 [ 531.494248][T22041] ? __pfx_lock_release+0x10/0x10 [ 531.499293][T22041] ? __lock_acquire+0x1346/0x1fd0 [ 531.504312][T22041] should_fail_ex+0x3b0/0x4e0 [ 531.509014][T22041] _copy_from_user+0x2f/0xe0 [ 531.513631][T22041] kstrtouint_from_user+0xc6/0x190 [ 531.518779][T22041] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 531.524533][T22041] ? __pfx_lock_acquire+0x10/0x10 [ 531.529593][T22041] proc_fail_nth_write+0xaa/0x2d0 [ 531.534638][T22041] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 531.540637][T22041] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.546271][T22041] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.551903][T22041] vfs_write+0x2a2/0xc90 [ 531.556165][T22041] ? __pfx_vfs_write+0x10/0x10 [ 531.560941][T22041] ? __fget_files+0x29/0x470 [ 531.565540][T22041] ? __fget_files+0x3f6/0x470 [ 531.570239][T22041] ksys_write+0x1a0/0x2c0 [ 531.574572][T22041] ? __pfx_ksys_write+0x10/0x10 [ 531.579428][T22041] ? do_syscall_64+0x100/0x230 [ 531.584191][T22041] ? do_syscall_64+0xb6/0x230 [ 531.588868][T22041] do_syscall_64+0xf3/0x230 [ 531.593370][T22041] ? clear_bhb_loop+0x35/0x90 [ 531.598049][T22041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.603938][T22041] RIP: 0033:0x7f5b17d7475f [ 531.608411][T22041] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 29 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 7c 8c 02 00 48 [ 531.628021][T22041] RSP: 002b:00007f5b18a6d040 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 531.636440][T22041] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5b17d7475f [ 531.644408][T22041] RDX: 0000000000000001 RSI: 00007f5b18a6d0b0 RDI: 0000000000000008 [ 531.652372][T22041] RBP: 00007f5b18a6d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.660339][T22041] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 531.668320][T22041] R13: 000000000000006e R14: 00007f5b17f04038 R15: 00007fff8b4f5368 [ 531.676415][T22041] [ 531.816790][T21942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.836693][T21942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.898164][T21942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.909715][T22052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.922461][T22056] netlink: 'syz.3.5487': attribute type 2 has an invalid length. [ 531.936823][T21942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.944577][T21942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.003311][ T5302] ------------[ cut here ]------------ [ 532.012005][ T5302] WARNING: CPU: 0 PID: 5302 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 532.022866][ T5302] Modules linked in: [ 532.022930][T21942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 532.026815][ T5302] CPU: 0 PID: 5302 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 532.026887][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 532.026903][ T5302] Workqueue: cfg80211 cfg80211_event_work [ 532.026936][ T5302] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 532.026964][ T5302] Code: a4 00 89 c3 31 ff 89 c6 e8 03 0e b1 f6 85 db 74 29 e8 ba 36 97 f6 84 c0 74 27 e8 b1 09 b1 f6 e9 84 00 00 00 e8 a7 09 b1 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 91 09 b1 f6 eb [ 532.026981][ T5302] RSP: 0018:ffffc90004bcf9e0 EFLAGS: 00010293 [ 532.027001][ T5302] RAX: ffffffff8ae51db9 RBX: 0000000000000000 RCX: ffff88802254bc00 [ 532.027016][ T5302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.027031][ T5302] RBP: ffffc90004bcfb00 R08: ffffffff8ae51989 R09: 1ffffffff25f7abd [ 532.027054][ T5302] R10: dffffc0000000000 R11: fffffbfff25f7abe R12: ffff88805aff2898 [ 532.027072][ T5302] R13: dffffc0000000000 R14: ffff88805aff2818 R15: ffff88802d303000 [ 532.027089][ T5302] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 532.027109][ T5302] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 532.027125][ T5302] CR2: 00007f0dfaab7fa8 CR3: 0000000065358000 CR4: 00000000003506f0 [ 532.027144][ T5302] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 532.027159][ T5302] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 532.027174][ T5302] Call Trace: [ 532.027184][ T5302] [ 532.027195][ T5302] ? __warn+0x163/0x4e0 [ 532.027221][ T5302] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 532.027250][ T5302] ? report_bug+0x2b3/0x500 [ 532.027275][ T5302] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 532.027306][ T5302] ? handle_bug+0x3e/0x70 [ 532.027327][ T5302] ? exc_invalid_op+0x1a/0x50 [ 532.027349][ T5302] ? asm_exc_invalid_op+0x1a/0x20 [ 532.027378][ T5302] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 532.027401][ T5302] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 532.027428][ T5302] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 532.027471][ T5302] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 532.027500][ T5302] ? lockdep_hardirqs_on+0x99/0x150 [ 532.027533][ T5302] cfg80211_process_wdev_events+0x356/0x510 [ 532.070869][T22066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 532.073289][ T5302] cfg80211_process_rdev_events+0xac/0x110 [ 532.280550][ T5302] ? process_scheduled_works+0x945/0x1830 [ 532.286589][ T5302] cfg80211_event_work+0x2f/0x40 [ 532.291637][ T5302] process_scheduled_works+0xa2c/0x1830 [ 532.297312][ T5302] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.303329][ T5302] ? assign_work+0x364/0x3d0 [ 532.308992][ T5302] worker_thread+0x86d/0xd50 [ 532.313620][ T5302] ? __kthread_parkme+0x169/0x1d0 [ 532.318979][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 532.324118][ T5302] kthread+0x2f0/0x390 [ 532.328256][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 532.333368][ T5302] ? __pfx_kthread+0x10/0x10 [ 532.339085][ T5302] ret_from_fork+0x4b/0x80 [ 532.343536][ T5302] ? __pfx_kthread+0x10/0x10 [ 532.348217][ T5302] ret_from_fork_asm+0x1a/0x30 [ 532.353013][ T5302] [ 532.356110][ T5302] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 532.363380][ T5302] CPU: 0 PID: 5302 Comm: kworker/u8:10 Not tainted 6.10.0-rc6-syzkaller-01270-g870a1dbcbc2e #0 [ 532.373700][ T5302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 532.383753][ T5302] Workqueue: cfg80211 cfg80211_event_work [ 532.389483][ T5302] Call Trace: [ 532.392757][ T5302] [ 532.395684][ T5302] dump_stack_lvl+0x241/0x360 [ 532.400368][ T5302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.405568][ T5302] ? __pfx__printk+0x10/0x10 [ 532.410162][ T5302] ? vscnprintf+0x5d/0x90 [ 532.414510][ T5302] panic+0x349/0x860 [ 532.418410][ T5302] ? __warn+0x172/0x4e0 [ 532.422573][ T5302] ? __pfx_panic+0x10/0x10 [ 532.426995][ T5302] ? ret_from_fork_asm+0x1a/0x30 [ 532.431942][ T5302] __warn+0x346/0x4e0 [ 532.435918][ T5302] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 532.441899][ T5302] report_bug+0x2b3/0x500 [ 532.446225][ T5302] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 532.452206][ T5302] handle_bug+0x3e/0x70 [ 532.456355][ T5302] exc_invalid_op+0x1a/0x50 [ 532.460853][ T5302] asm_exc_invalid_op+0x1a/0x20 [ 532.465705][ T5302] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 532.472304][ T5302] Code: a4 00 89 c3 31 ff 89 c6 e8 03 0e b1 f6 85 db 74 29 e8 ba 36 97 f6 84 c0 74 27 e8 b1 09 b1 f6 e9 84 00 00 00 e8 a7 09 b1 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 91 09 b1 f6 eb [ 532.491904][ T5302] RSP: 0018:ffffc90004bcf9e0 EFLAGS: 00010293 [ 532.497968][ T5302] RAX: ffffffff8ae51db9 RBX: 0000000000000000 RCX: ffff88802254bc00 [ 532.505935][ T5302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 532.513902][ T5302] RBP: ffffc90004bcfb00 R08: ffffffff8ae51989 R09: 1ffffffff25f7abd [ 532.521868][ T5302] R10: dffffc0000000000 R11: fffffbfff25f7abe R12: ffff88805aff2898 [ 532.529833][ T5302] R13: dffffc0000000000 R14: ffff88805aff2818 R15: ffff88802d303000 [ 532.537804][ T5302] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 532.543781][ T5302] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 532.549778][ T5302] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 532.555931][ T5302] ? lockdep_hardirqs_on+0x99/0x150 [ 532.561129][ T5302] cfg80211_process_wdev_events+0x356/0x510 [ 532.567031][ T5302] cfg80211_process_rdev_events+0xac/0x110 [ 532.572834][ T5302] ? process_scheduled_works+0x945/0x1830 [ 532.578551][ T5302] cfg80211_event_work+0x2f/0x40 [ 532.583485][ T5302] process_scheduled_works+0xa2c/0x1830 [ 532.589051][ T5302] ? __pfx_process_scheduled_works+0x10/0x10 [ 532.595032][ T5302] ? assign_work+0x364/0x3d0 [ 532.599622][ T5302] worker_thread+0x86d/0xd50 [ 532.604219][ T5302] ? __kthread_parkme+0x169/0x1d0 [ 532.609254][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 532.614362][ T5302] kthread+0x2f0/0x390 [ 532.618429][ T5302] ? __pfx_worker_thread+0x10/0x10 [ 532.623536][ T5302] ? __pfx_kthread+0x10/0x10 [ 532.628132][ T5302] ret_from_fork+0x4b/0x80 [ 532.632545][ T5302] ? __pfx_kthread+0x10/0x10 [ 532.637129][ T5302] ret_from_fork_asm+0x1a/0x30 [ 532.641918][ T5302] [ 532.645189][ T5302] Kernel Offset: disabled [ 532.649594][ T5302] Rebooting in 86400 seconds..