last executing test programs: 52.578788138s ago: executing program 1 (id=403): socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) (async) gettid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {0xa, 0x0, 0xdcac1c7c5cda203}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x8084) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000b00000000000000000c85000000a800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x40000000, 0x4000000}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000003d51008e0000000071121500000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32=r11, @ANYRES32=r10, @ANYRES64=r8, @ANYRES32, @ANYBLOB="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", @ANYRES64=0x0], 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000800000000020a000000000000060000020008001e0001000000"], 0x24}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 52.372271286s ago: executing program 1 (id=406): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000100)='%pS \x00'}, 0x20) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000800)={'ip6_vti0\x00', &(0x7f0000000780)={'ip6tnl0\x00', 0x0, 0x4, 0x8, 0xd8, 0x4, 0x48, @dev={0xfe, 0x80, '\x00', 0x2d}, @remote, 0x8, 0x40, 0x40, 0x9}}) (rerun: 32) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=0xffffffffffffffff, 0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r0, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000900)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xf2, &(0x7f00000009c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xcf, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1b, 0x15, &(0x7f0000000640)=@raw=[@call={0x85, 0x0, 0x0, 0x57}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @generic={0x40, 0xb, 0x5, 0xbdf}], &(0x7f00000005c0)='syzkaller\x00', 0x12, 0x5b, &(0x7f0000000700)=""/91, 0x41100, 0x8, '\x00', r4, @fallback=0x2a, r5, 0x8, &(0x7f0000000880)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x3, 0x9, 0x7, 0x81}, 0x10, r6, r0, 0x0, &(0x7f0000000c00)=[r1, r1, r2, r1], 0x0, 0x10, 0xc1ee, @void, @value}, 0x94) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) (async) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r8, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) (async) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) (async) setsockopt$inet6_int(r8, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) (async, rerun: 32) sendmmsg$inet6(r8, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) (async, rerun: 32) recvmmsg(r8, &(0x7f0000000800), 0x62, 0x12141, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (rerun: 64) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@canfd={{0x4, 0x1, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "9bc6731f35f7b26adacab51267d29aa6f78b0ef8e53ae6650d43c0b15e1730392308376a3a1d34fa2c5e80d30947f21ac893dbdb8a57b0d53246b36591a6fe5e"}, 0x48}, 0x1, 0x0, 0x0, 0x81}, 0x40800) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 52.009217444s ago: executing program 1 (id=410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f0000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 36.630316418s ago: executing program 1 (id=410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f0000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 20.966456267s ago: executing program 1 (id=410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f0000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8.114549312s ago: executing program 1 (id=410): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x0, 0xffffffff}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)=@can={{0x0, 0x0, 0x1}, 0x0, 0x1, 0x4, 0x0, "3faf74080a51da9f"}, 0x10}, 0x1, 0x0, 0x0, 0x4040}, 0x8090) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="280000005f00013caf23b8000000000008003b"], 0x28}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="003f0000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r6, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002020200090001007f"], 0x34}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r8, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_macvtap\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20040004}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000ba000000a70000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.602609302s ago: executing program 4 (id=801): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6000000, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0x42, 0x4, 0x2b0, 0xffffffff, 0x1d8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2c0, 0x2c0, 0x2c0, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000002, 0x70, 0xa0, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x287, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {0x11e}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 1.425169408s ago: executing program 4 (id=805): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x4, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d, 0x2}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$qrtr(0x2a, 0x2, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)={0x14, 0x5f, 0xe25, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 1.34543628s ago: executing program 3 (id=806): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x50, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x34, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0xfffffffffffffe2b}]}]}, @NL802154_KEY_ATTR_BYTES={0x0, 0x4, "dccc73282991f08ad397870857bc5875"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.258952374s ago: executing program 0 (id=807): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="0e030e00c4e8120006001e0089e9aaa911d7c2290f0086dd", 0x18, 0x28000000, &(0x7f0000000540)={0x11, 0xc, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.216755134s ago: executing program 2 (id=808): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000440)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000580)=0x2) 1.151477868s ago: executing program 4 (id=809): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)={0x28, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0xc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.094809927s ago: executing program 3 (id=810): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40084}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/81, 0x51}], 0x1}, 0x0) 1.023987554s ago: executing program 0 (id=811): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-neonbs\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007980)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000000000)="ba0da1226011198bab81bc", 0xb}], 0x2, 0x0, 0x0, 0x20000800}], 0x1, 0x8001) read$alg(r1, &(0x7f0000001300)=""/4106, 0x100a) 971.713755ms ago: executing program 2 (id=812): unshare(0x22020400) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) 894.851323ms ago: executing program 3 (id=813): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 790.921827ms ago: executing program 4 (id=814): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@timestamp={0x8, 0x1000000}, @timestamp, @mss={0x2, 0x10000}, @timestamp, @window={0x3, 0x1000}, @timestamp], 0x2000000000000113) 746.988137ms ago: executing program 3 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x48}}, 0x0) 642.921914ms ago: executing program 2 (id=816): r0 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0x1ff) sendto$inet(r0, &(0x7f0000000180)="10", 0x1, 0xe61e28408550f8c0, &(0x7f0000000100)={0x2, 0x4e26, @remote}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x849, 0x4) 542.359346ms ago: executing program 4 (id=817): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@bridge_delneigh={0x28, 0x1c, 0xcafe28741a3524c9, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r1, 0x80, 0x5f, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0041}, 0x0) 530.721672ms ago: executing program 0 (id=818): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r2, &(0x7f0000000240)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x2, 0xfd}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044094}, 0x20000844) 432.640239ms ago: executing program 3 (id=819): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x22) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) 431.647888ms ago: executing program 2 (id=820): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r0], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) 427.217381ms ago: executing program 0 (id=821): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0xfffffffd) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r3, 0x100) listen(r2, 0x8) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x50) r5 = socket$inet6(0xa, 0x5, 0x0) listen(r5, 0x50) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 274.947185ms ago: executing program 2 (id=822): r0 = socket(0x25, 0x1, 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), r0) 273.778341ms ago: executing program 3 (id=823): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x32, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 155.528253ms ago: executing program 0 (id=824): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x5}, &(0x7f0000000440)=0x8) 154.871144ms ago: executing program 4 (id=825): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x1, @loopback}, 0x1c) shutdown(r0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0xb8040000}, 0x1c) 139.141613ms ago: executing program 2 (id=826): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) (async) sendto$inet6(r1, &(0x7f0000000080)="85", 0x1, 0x890, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) (async, rerun: 32) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x7, 0x4) (async, rerun: 32) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) (async, rerun: 64) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (rerun: 64) 0s ago: executing program 0 (id=827): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x14, 0x2, 0x9, 0x5}, 0x14}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0x2f, 0x0, &(0x7f0000000040)=0x700) setsockopt$sock_int(r0, 0x1, 0x1, &(0x7f0000000200), 0xd) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='io.stat\x00', 0x7a44, 0x1700) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000340), &(0x7f00000003c0)=0x8) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x0, 0x2}, 0x6) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) close(0x3) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, &(0x7f0000000000)=0xffffffff, 0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, r3, 0x952de000) syz_init_net_socket$ax25(0x3, 0x3, 0xcf) kernel console output (not intermixed with test programs): he transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.522155][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.554088][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.561983][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.562067][ T5846] Bluetooth: hci1: command tx timeout [ 80.588402][ T5857] Bluetooth: hci0: command tx timeout [ 80.595389][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.611590][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.618881][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.644863][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.656839][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.667579][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.693617][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.710174][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.717156][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.718014][ T5857] Bluetooth: hci3: command tx timeout [ 80.747553][ T5846] Bluetooth: hci4: command tx timeout [ 80.748790][ T53] Bluetooth: hci2: command tx timeout [ 80.756312][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.848036][ T5836] hsr_slave_0: entered promiscuous mode [ 80.854509][ T5836] hsr_slave_1: entered promiscuous mode [ 80.881691][ T5847] hsr_slave_0: entered promiscuous mode [ 80.888577][ T5847] hsr_slave_1: entered promiscuous mode [ 80.894730][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.902666][ T5847] Cannot create hsr debugfs directory [ 80.912489][ T5843] hsr_slave_0: entered promiscuous mode [ 80.918936][ T5843] hsr_slave_1: entered promiscuous mode [ 80.924931][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.933165][ T5843] Cannot create hsr debugfs directory [ 80.960616][ T5845] hsr_slave_0: entered promiscuous mode [ 80.966994][ T5845] hsr_slave_1: entered promiscuous mode [ 80.973439][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.981428][ T5845] Cannot create hsr debugfs directory [ 81.003444][ T5837] hsr_slave_0: entered promiscuous mode [ 81.009841][ T5837] hsr_slave_1: entered promiscuous mode [ 81.015828][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.023626][ T5837] Cannot create hsr debugfs directory [ 81.440865][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.457932][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.479119][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.492900][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.542504][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.554190][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.572115][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.583815][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.631461][ T5847] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.645963][ T5847] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.669368][ T5847] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.695605][ T5847] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.755088][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.778180][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.791505][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.802446][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.904364][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.921480][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.948940][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.960251][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.979193][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.025091][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.057988][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.075256][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.082612][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.125256][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.149045][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.156199][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.177631][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.189044][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.215304][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.223021][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.260931][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.268126][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.289436][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.326182][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.342367][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.349540][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.400343][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.407556][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.421730][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.428924][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.474728][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.481972][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.536961][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.639198][ T5857] Bluetooth: hci1: command tx timeout [ 82.644701][ T5857] Bluetooth: hci0: command tx timeout [ 82.679313][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.731085][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.738281][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.774414][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.781645][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.798134][ T53] Bluetooth: hci3: command tx timeout [ 82.799331][ T5846] Bluetooth: hci2: command tx timeout [ 82.803658][ T5857] Bluetooth: hci4: command tx timeout [ 82.860702][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.906479][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.076823][ T5843] veth0_vlan: entered promiscuous mode [ 83.100783][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.114596][ T5843] veth1_vlan: entered promiscuous mode [ 83.148171][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.157754][ T5845] veth0_vlan: entered promiscuous mode [ 83.231064][ T5845] veth1_vlan: entered promiscuous mode [ 83.276286][ T5843] veth0_macvtap: entered promiscuous mode [ 83.301543][ T5843] veth1_macvtap: entered promiscuous mode [ 83.356774][ T5837] veth0_vlan: entered promiscuous mode [ 83.403735][ T5837] veth1_vlan: entered promiscuous mode [ 83.431368][ T5845] veth0_macvtap: entered promiscuous mode [ 83.440872][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.471728][ T5845] veth1_macvtap: entered promiscuous mode [ 83.514753][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.544734][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.556642][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.569320][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.582059][ T5843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.591316][ T5843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.600819][ T5843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.610058][ T5843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.621511][ T5837] veth0_macvtap: entered promiscuous mode [ 83.633845][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.653060][ T5837] veth1_macvtap: entered promiscuous mode [ 83.661550][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.672845][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.686138][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.725068][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.736949][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.746570][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.756354][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.800014][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.811191][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.821576][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.832893][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.846499][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.872541][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.883976][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.893995][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.906632][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.918559][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.969261][ T5847] veth0_vlan: entered promiscuous mode [ 83.984656][ T5836] veth0_vlan: entered promiscuous mode [ 84.005189][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.014738][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.024236][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.033151][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.060634][ T5847] veth1_vlan: entered promiscuous mode [ 84.090759][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.100337][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.121692][ T5836] veth1_vlan: entered promiscuous mode [ 84.214698][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.215484][ T5847] veth0_macvtap: entered promiscuous mode [ 84.228143][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.254063][ T5836] veth0_macvtap: entered promiscuous mode [ 84.269223][ T5847] veth1_macvtap: entered promiscuous mode [ 84.284088][ T5836] veth1_macvtap: entered promiscuous mode [ 84.294239][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.306750][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.318523][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.325863][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.329031][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.346836][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.356999][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.368205][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.379216][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.409181][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.417075][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.434254][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.445564][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.457075][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.468746][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.478756][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.489909][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.502392][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.530100][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.541021][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.553157][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.564969][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.575222][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.585906][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.595801][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.606353][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.619665][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.636818][ T5847] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.640649][ T5845] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.647026][ T5847] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.669394][ T5847] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.678210][ T5847] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708182][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.724532][ T5857] Bluetooth: hci0: command tx timeout [ 84.724542][ T5846] Bluetooth: hci1: command tx timeout [ 84.735591][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.745618][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.762601][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.772960][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.813752][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.823920][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.834654][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.846241][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.878622][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.880114][ T5857] Bluetooth: hci2: command tx timeout [ 84.886518][ T5846] Bluetooth: hci4: command tx timeout [ 84.886567][ T5846] Bluetooth: hci3: command tx timeout [ 84.894878][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.907794][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.912736][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.928788][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.937699][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.064702][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.091403][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.185101][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.200473][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.299833][ T5932] Zero length message leads to an empty skb [ 85.321814][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.352480][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.372927][ T5926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.375499][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.424191][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.517242][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.540237][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.550744][ T5937] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 85.568367][ T5937] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 85.998188][ T5953] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 86.055149][ T5955] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 86.118598][ T5955] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 86.225608][ T5961] netlink: 'syz.2.10': attribute type 1 has an invalid length. [ 86.273005][ T5961] netlink: 'syz.2.10': attribute type 2 has an invalid length. [ 86.466798][ T5974] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.597220][ T5980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.628252][ T5980] netlink: 'syz.1.13': attribute type 7 has an invalid length. [ 86.653321][ T5979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.665042][ T5980] netlink: 'syz.1.13': attribute type 8 has an invalid length. [ 86.712949][ T5995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.732625][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 86.754351][ T5991] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17'. [ 86.780327][ T5993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17'. [ 86.800343][ T5846] Bluetooth: hci1: command tx timeout [ 86.800352][ T5857] Bluetooth: hci0: command tx timeout [ 86.958039][ T5846] Bluetooth: hci3: command tx timeout [ 86.961758][ T5857] Bluetooth: hci2: command tx timeout [ 86.964491][ T5846] Bluetooth: hci4: command tx timeout [ 87.058960][ T6001] warning: `syz.3.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.272879][ T6011] sctp: [Deprecated]: syz.4.21 (pid 6011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 87.272879][ T6011] Use struct sctp_sack_info instead [ 87.365670][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 87.841064][ T6026] netlink: 'syz.4.26': attribute type 9 has an invalid length. [ 87.969057][ T6028] netlink: 'syz.0.27': attribute type 12 has an invalid length. [ 88.018462][ T6028] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 88.246478][ T6040] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.407304][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.4.34'. [ 88.625849][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 89.280306][ T6088] SET target dimension over the limit! [ 89.452918][ T6093] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49'. [ 89.632589][ T6097] bond1: entered allmulticast mode [ 89.639871][ T6097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 89.742607][ T6100] tipc: Enabling of bearer rejected, media not registered [ 89.759585][ T6104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 89.811650][ T6113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.54'. [ 90.579198][ T6147] netlink: zone id is out of range [ 90.601694][ T6147] netlink: zone id is out of range [ 90.610103][ T6147] netlink: zone id is out of range [ 90.647869][ T6147] netlink: zone id is out of range [ 90.653169][ T6147] netlink: zone id is out of range [ 90.698831][ T6152] tipc: Started in network mode [ 90.698961][ T6147] netlink: zone id is out of range [ 90.718306][ T6152] tipc: Node identity d2185a9ddaf3, cluster identity 4711 [ 90.759810][ T6152] tipc: Enabled bearer , priority 0 [ 90.783056][ T6156] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 90.792501][ T6147] netlink: zone id is out of range [ 90.819771][ T6152] +: renamed from syzkaller0 [ 90.857391][ T6152] tipc: Disabling bearer [ 91.106776][ T6174] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 91.121649][ T6174] netlink: 'syz.0.71': attribute type 4 has an invalid length. [ 91.327710][ T6176] netlink: 'syz.4.73': attribute type 10 has an invalid length. [ 91.360080][ T5846] Bluetooth: hci4: command tx timeout [ 91.416681][ T6176] team0: Port device netdevsim0 added [ 91.424353][ T6180] xt_hashlimit: size too large, truncated to 1048576 [ 91.646076][ T6193] netlink: 'syz.1.79': attribute type 1 has an invalid length. [ 91.909858][ T6207] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 92.105330][ T6217] __nla_validate_parse: 3 callbacks suppressed [ 92.105353][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.88'. [ 92.142709][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.171906][ T973] cfg80211: failed to load regulatory.db [ 92.181721][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.221241][ T6217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.226722][ T6222] netlink: 'syz.4.87': attribute type 1 has an invalid length. [ 92.236673][ T6222] netlink: 'syz.4.87': attribute type 3 has an invalid length. [ 92.243211][ T6217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.257258][ T6222] netlink: 224 bytes leftover after parsing attributes in process `syz.4.87'. [ 92.265057][ T6224] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 92.345006][ T6228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.90'. [ 92.747403][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.763263][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.774678][ T6251] netlink: 108 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.803203][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 92.834877][ T6251] netlink: 'syz.4.97': attribute type 21 has an invalid length. [ 92.870603][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 93.207059][ T6267] tipc: Enabled bearer , priority 11 [ 93.612035][ T6285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.109'. [ 93.665097][ T6292] net_ratelimit: 16 callbacks suppressed [ 93.665118][ T6292] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.055036][ T6303] tipc: Started in network mode [ 94.071461][ T6303] tipc: Node identity 1a394d454b16, cluster identity 4711 [ 94.093675][ T6303] tipc: Enabled bearer , priority 0 [ 94.141804][ T6305] netlink: 'syz.2.117': attribute type 1 has an invalid length. [ 94.232434][ T6306] syzkaller0: entered promiscuous mode [ 94.239051][ T6306] syzkaller0: entered allmulticast mode [ 94.252242][ T6306] tipc: Resetting bearer [ 94.280943][ T6302] tipc: Resetting bearer [ 94.319040][ T973] tipc: Node number set to 149641885 [ 94.723824][ T6331] Unknown options in mask 1f4 [ 94.792504][ T6332] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 95.151378][ T5890] tipc: Node number set to 1362054469 [ 95.899032][ T6302] tipc: Disabling bearer [ 95.925883][ T6326] erspan0: entered promiscuous mode [ 95.932501][ T6326] batadv_slave_1: entered promiscuous mode [ 96.323972][ T6346] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 96.578821][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.587314][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.688222][ T6370] pimreg: entered allmulticast mode [ 97.096961][ T6380] FAULT_INJECTION: forcing a failure. [ 97.096961][ T6380] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 97.126634][ T6380] CPU: 0 UID: 0 PID: 6380 Comm: syz.3.142 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 97.126667][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 97.126688][ T6380] Call Trace: [ 97.126695][ T6380] [ 97.126704][ T6380] dump_stack_lvl+0x241/0x360 [ 97.126743][ T6380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.126767][ T6380] ? __pfx__printk+0x10/0x10 [ 97.126789][ T6380] ? __pfx_lock_release+0x10/0x10 [ 97.126830][ T6380] should_fail_ex+0x40a/0x550 [ 97.126863][ T6380] _copy_from_user+0x2d/0xb0 [ 97.126890][ T6380] copy_msghdr_from_user+0xae/0x680 [ 97.126919][ T6380] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 97.126940][ T6380] ? __fget_files+0x2a/0x410 [ 97.126972][ T6380] ? __fget_files+0x2a/0x410 [ 97.127010][ T6380] __sys_sendmsg+0x209/0x350 [ 97.127046][ T6380] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.127089][ T6380] ? do_sys_openat2+0x17a/0x1d0 [ 97.127144][ T6380] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.127177][ T6380] ? do_syscall_64+0x100/0x230 [ 97.127207][ T6380] ? do_syscall_64+0xb6/0x230 [ 97.127235][ T6380] do_syscall_64+0xf3/0x230 [ 97.127261][ T6380] ? clear_bhb_loop+0x35/0x90 [ 97.127294][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.127322][ T6380] RIP: 0033:0x7f75d8d8cde9 [ 97.127349][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.127366][ T6380] RSP: 002b:00007f75d9b78038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.127389][ T6380] RAX: ffffffffffffffda RBX: 00007f75d8fa5fa0 RCX: 00007f75d8d8cde9 [ 97.127404][ T6380] RDX: 00000000000048c0 RSI: 0000400000000140 RDI: 0000000000000005 [ 97.127417][ T6380] RBP: 00007f75d9b78090 R08: 0000000000000000 R09: 0000000000000000 [ 97.127435][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 97.127446][ T6380] R13: 0000000000000000 R14: 00007f75d8fa5fa0 R15: 00007fff1112af18 [ 97.127485][ T6380] [ 97.564461][ T6387] __nla_validate_parse: 10 callbacks suppressed [ 97.564486][ T6387] netlink: 64 bytes leftover after parsing attributes in process `syz.3.145'. [ 97.801546][ T6396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.149'. [ 97.813418][ T6371] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 97.823819][ T6392] netlink: 20 bytes leftover after parsing attributes in process `syz.2.138'. [ 97.863223][ T6398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.912103][ T6396] netlink: 28 bytes leftover after parsing attributes in process `syz.4.149'. [ 98.099571][ T6405] netlink: 'syz.4.149': attribute type 2 has an invalid length. [ 98.112616][ T6408] netlink: 16 bytes leftover after parsing attributes in process `syz.1.152'. [ 98.393009][ T6419] FAULT_INJECTION: forcing a failure. [ 98.393009][ T6419] name failslab, interval 1, probability 0, space 0, times 1 [ 98.420336][ T6419] CPU: 0 UID: 0 PID: 6419 Comm: syz.4.155 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 98.420377][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.420390][ T6419] Call Trace: [ 98.420397][ T6419] [ 98.420406][ T6419] dump_stack_lvl+0x241/0x360 [ 98.420437][ T6419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.420460][ T6419] ? __pfx__printk+0x10/0x10 [ 98.420483][ T6419] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 98.420513][ T6419] ? __pfx___might_resched+0x10/0x10 [ 98.420538][ T6419] ? aa_label_sk_perm+0x4f3/0x6c0 [ 98.420569][ T6419] should_fail_ex+0x40a/0x550 [ 98.420601][ T6419] should_failslab+0xac/0x100 [ 98.420630][ T6419] kmem_cache_alloc_node_noprof+0x77/0x380 [ 98.420658][ T6419] ? __alloc_skb+0x1c3/0x440 [ 98.420687][ T6419] __alloc_skb+0x1c3/0x440 [ 98.420718][ T6419] ? __pfx___alloc_skb+0x10/0x10 [ 98.420753][ T6419] netlink_sendmsg+0x634/0xcb0 [ 98.420786][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.420810][ T6419] ? aa_sock_msg_perm+0x91/0x160 [ 98.420844][ T6419] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.420863][ T6419] __sock_sendmsg+0x221/0x270 [ 98.420889][ T6419] ____sys_sendmsg+0x53a/0x860 [ 98.420926][ T6419] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.420955][ T6419] ? __fget_files+0x2a/0x410 [ 98.420987][ T6419] ? __fget_files+0x2a/0x410 [ 98.421022][ T6419] __sys_sendmsg+0x269/0x350 [ 98.421057][ T6419] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.421096][ T6419] ? do_sys_openat2+0x17a/0x1d0 [ 98.421146][ T6419] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.421179][ T6419] ? do_syscall_64+0x100/0x230 [ 98.421207][ T6419] ? do_syscall_64+0xb6/0x230 [ 98.421234][ T6419] do_syscall_64+0xf3/0x230 [ 98.421259][ T6419] ? clear_bhb_loop+0x35/0x90 [ 98.421296][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.421324][ T6419] RIP: 0033:0x7fd98778cde9 [ 98.421351][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.421368][ T6419] RSP: 002b:00007fd98862f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.421391][ T6419] RAX: ffffffffffffffda RBX: 00007fd9879a5fa0 RCX: 00007fd98778cde9 [ 98.421406][ T6419] RDX: 00000000000048c0 RSI: 0000400000000140 RDI: 0000000000000005 [ 98.421418][ T6419] RBP: 00007fd98862f090 R08: 0000000000000000 R09: 0000000000000000 [ 98.421430][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.421442][ T6419] R13: 0000000000000000 R14: 00007fd9879a5fa0 R15: 00007ffecc579008 [ 98.421470][ T6419] [ 99.099686][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.126554][ T6447] Bluetooth: MGMT ver 1.23 [ 99.143373][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.375437][ T6453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.168'. [ 99.413194][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 99.437681][ T6453] netlink: 'syz.1.168': attribute type 20 has an invalid length. [ 100.021829][ T6481] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 100.108912][ T6481] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 100.212254][ T6492] netlink: 'syz.1.181': attribute type 4 has an invalid length. [ 100.446814][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.484671][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.504826][ T6501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.523705][ T6501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.593556][ T5889] IPVS: starting estimator thread 0... [ 100.698817][ T6514] IPVS: using max 22 ests per chain, 52800 per kthread [ 100.730304][ T6519] FAULT_INJECTION: forcing a failure. [ 100.730304][ T6519] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.750073][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.1.187 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 100.750103][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 100.750115][ T6519] Call Trace: [ 100.750123][ T6519] [ 100.750131][ T6519] dump_stack_lvl+0x241/0x360 [ 100.750162][ T6519] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.750184][ T6519] ? __pfx__printk+0x10/0x10 [ 100.750206][ T6519] ? __pfx_lock_release+0x10/0x10 [ 100.750245][ T6519] should_fail_ex+0x40a/0x550 [ 100.750295][ T6519] _copy_from_iter+0x1df/0x1c40 [ 100.750319][ T6519] ? __virt_addr_valid+0x183/0x530 [ 100.750352][ T6519] ? __pfx_lock_release+0x10/0x10 [ 100.750390][ T6519] ? __alloc_skb+0x28f/0x440 [ 100.750417][ T6519] ? __pfx__copy_from_iter+0x10/0x10 [ 100.750448][ T6519] ? __virt_addr_valid+0x183/0x530 [ 100.750480][ T6519] ? __virt_addr_valid+0x183/0x530 [ 100.750511][ T6519] ? __virt_addr_valid+0x45f/0x530 [ 100.750544][ T6519] ? __phys_addr_symbol+0x2f/0x70 [ 100.750575][ T6519] ? __check_object_size+0x47a/0x730 [ 100.750615][ T6519] netlink_sendmsg+0x742/0xcb0 [ 100.750648][ T6519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.750673][ T6519] ? aa_sock_msg_perm+0x91/0x160 [ 100.750713][ T6519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.750732][ T6519] __sock_sendmsg+0x221/0x270 [ 100.750758][ T6519] ____sys_sendmsg+0x53a/0x860 [ 100.750798][ T6519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.750834][ T6519] ? __fget_files+0x2a/0x410 [ 100.750866][ T6519] ? __fget_files+0x2a/0x410 [ 100.750903][ T6519] __sys_sendmsg+0x269/0x350 [ 100.750938][ T6519] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.750980][ T6519] ? do_sys_openat2+0x17a/0x1d0 [ 100.751034][ T6519] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 100.751066][ T6519] ? do_syscall_64+0x100/0x230 [ 100.751094][ T6519] ? do_syscall_64+0xb6/0x230 [ 100.751122][ T6519] do_syscall_64+0xf3/0x230 [ 100.751147][ T6519] ? clear_bhb_loop+0x35/0x90 [ 100.751180][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.751208][ T6519] RIP: 0033:0x7f05c8b8cde9 [ 100.751227][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.751242][ T6519] RSP: 002b:00007f05c9ad3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.751265][ T6519] RAX: ffffffffffffffda RBX: 00007f05c8da5fa0 RCX: 00007f05c8b8cde9 [ 100.751280][ T6519] RDX: 00000000000048c0 RSI: 0000400000000140 RDI: 0000000000000005 [ 100.751293][ T6519] RBP: 00007f05c9ad3090 R08: 0000000000000000 R09: 0000000000000000 [ 100.751305][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.751316][ T6519] R13: 0000000000000000 R14: 00007f05c8da5fa0 R15: 00007ffee7038c68 [ 100.751344][ T6519] [ 101.237115][ T6530] x_tables: duplicate underflow at hook 3 [ 101.304326][ T6530] x_tables: duplicate underflow at hook 2 [ 101.932983][ T6560] netlink: 'syz.1.200': attribute type 8 has an invalid length. [ 102.017106][ T6566] FAULT_INJECTION: forcing a failure. [ 102.017106][ T6566] name failslab, interval 1, probability 0, space 0, times 0 [ 102.026488][ T6560] sctp: [Deprecated]: syz.1.200 (pid 6560) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.026488][ T6560] Use struct sctp_sack_info instead [ 102.119416][ T6566] CPU: 0 UID: 0 PID: 6566 Comm: syz.2.202 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 102.119449][ T6566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 102.119462][ T6566] Call Trace: [ 102.119470][ T6566] [ 102.119479][ T6566] dump_stack_lvl+0x241/0x360 [ 102.119511][ T6566] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.119533][ T6566] ? __pfx__printk+0x10/0x10 [ 102.119567][ T6566] should_fail_ex+0x40a/0x550 [ 102.119602][ T6566] should_failslab+0xac/0x100 [ 102.119630][ T6566] ? skb_clone+0x20c/0x390 [ 102.119661][ T6566] kmem_cache_alloc_noprof+0x70/0x380 [ 102.119696][ T6566] skb_clone+0x20c/0x390 [ 102.119731][ T6566] __netlink_deliver_tap+0x3c4/0x7f0 [ 102.119777][ T6566] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.119809][ T6566] netlink_deliver_tap+0x19d/0x1b0 [ 102.119842][ T6566] netlink_unicast+0x7c4/0x990 [ 102.119880][ T6566] ? __pfx_netlink_unicast+0x10/0x10 [ 102.119907][ T6566] ? __virt_addr_valid+0x45f/0x530 [ 102.119941][ T6566] ? __phys_addr_symbol+0x2f/0x70 [ 102.119973][ T6566] ? __check_object_size+0x47a/0x730 [ 102.120005][ T6566] netlink_sendmsg+0x8de/0xcb0 [ 102.120038][ T6566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.120063][ T6566] ? aa_sock_msg_perm+0x91/0x160 [ 102.120099][ T6566] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.120117][ T6566] __sock_sendmsg+0x221/0x270 [ 102.120144][ T6566] ____sys_sendmsg+0x53a/0x860 [ 102.120191][ T6566] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.120219][ T6566] ? __fget_files+0x2a/0x410 [ 102.120251][ T6566] ? __fget_files+0x2a/0x410 [ 102.120289][ T6566] __sys_sendmsg+0x269/0x350 [ 102.120323][ T6566] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.120366][ T6566] ? do_sys_openat2+0x17a/0x1d0 [ 102.120423][ T6566] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.120458][ T6566] ? do_syscall_64+0x100/0x230 [ 102.120488][ T6566] ? do_syscall_64+0xb6/0x230 [ 102.120516][ T6566] do_syscall_64+0xf3/0x230 [ 102.120542][ T6566] ? clear_bhb_loop+0x35/0x90 [ 102.120575][ T6566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.120604][ T6566] RIP: 0033:0x7f3a8698cde9 [ 102.120622][ T6566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.120639][ T6566] RSP: 002b:00007f3a877d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.120662][ T6566] RAX: ffffffffffffffda RBX: 00007f3a86ba5fa0 RCX: 00007f3a8698cde9 [ 102.120677][ T6566] RDX: 00000000000048c0 RSI: 0000400000000140 RDI: 0000000000000005 [ 102.120690][ T6566] RBP: 00007f3a877d4090 R08: 0000000000000000 R09: 0000000000000000 [ 102.120702][ T6566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.120714][ T6566] R13: 0000000000000000 R14: 00007f3a86ba5fa0 R15: 00007ffe484a5208 [ 102.120746][ T6566] [ 103.145321][ T6606] __nla_validate_parse: 12 callbacks suppressed [ 103.145343][ T6606] netlink: 16 bytes leftover after parsing attributes in process `syz.4.211'. [ 103.737813][ T6630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.214'. [ 103.828895][ T6621] IPVS: set_ctl: invalid protocol: 51 10.1.1.0:20000 [ 103.915062][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 103.938690][ T6635] bridge_slave_1: left allmulticast mode [ 103.971321][ T6635] bridge_slave_1: left promiscuous mode [ 103.971999][ T6571] syz.3.204: vmalloc error: size 809005056, failed to allocated page array size 1580088, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 104.001450][ T6635] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.127765][ T6571] CPU: 0 UID: 0 PID: 6571 Comm: syz.3.204 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 104.127798][ T6571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.127811][ T6571] Call Trace: [ 104.127819][ T6571] [ 104.127828][ T6571] dump_stack_lvl+0x241/0x360 [ 104.127859][ T6571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.127903][ T6571] ? __pfx__printk+0x10/0x10 [ 104.127929][ T6571] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 104.127956][ T6571] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 104.127985][ T6571] warn_alloc+0x278/0x410 [ 104.128011][ T6571] ? __pfx_warn_alloc+0x10/0x10 [ 104.128038][ T6571] ? ip_set_sockfn_get+0x1bb/0xe30 [ 104.128063][ T6571] ? __get_vm_area_node+0x1c8/0x2d0 [ 104.128093][ T6571] ? __get_vm_area_node+0x25c/0x2d0 [ 104.128130][ T6571] __vmalloc_node_range_noprof+0x62f/0x1380 [ 104.128202][ T6571] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 104.128243][ T6571] ? bpf_lsm_capable+0x9/0x10 [ 104.128275][ T6571] ? ip_set_sockfn_get+0x1bb/0xe30 [ 104.128299][ T6571] vmalloc_noprof+0x79/0x90 [ 104.128331][ T6571] ? ip_set_sockfn_get+0x1bb/0xe30 [ 104.128354][ T6571] ip_set_sockfn_get+0x1bb/0xe30 [ 104.128379][ T6571] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 104.128410][ T6571] ? __pfx_ip_set_sockfn_get+0x10/0x10 [ 104.128436][ T6571] ? __pfx_lock_release+0x10/0x10 [ 104.128475][ T6571] nf_getsockopt+0x299/0x2c0 [ 104.128503][ T6571] ip_getsockopt+0x222/0x2e0 [ 104.128535][ T6571] ? __pfx_ip_getsockopt+0x10/0x10 [ 104.128566][ T6571] ? __might_fault+0xaa/0x120 [ 104.128602][ T6571] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 104.128630][ T6571] do_sock_getsockopt+0x38e/0x740 [ 104.128666][ T6571] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 104.128694][ T6571] ? __fget_files+0x2a/0x410 [ 104.128724][ T6571] ? __fget_files+0x395/0x410 [ 104.128750][ T6571] ? __fget_files+0x2a/0x410 [ 104.128786][ T6571] __x64_sys_getsockopt+0x2a1/0x370 [ 104.128823][ T6571] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 104.128855][ T6571] ? do_syscall_64+0x100/0x230 [ 104.128884][ T6571] ? do_syscall_64+0xb6/0x230 [ 104.128913][ T6571] do_syscall_64+0xf3/0x230 [ 104.128938][ T6571] ? clear_bhb_loop+0x35/0x90 [ 104.128971][ T6571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.128999][ T6571] RIP: 0033:0x7f75d8d8cde9 [ 104.129019][ T6571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.129035][ T6571] RSP: 002b:00007f75d9b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 104.129057][ T6571] RAX: ffffffffffffffda RBX: 00007f75d8fa5fa0 RCX: 00007f75d8d8cde9 [ 104.129072][ T6571] RDX: 0000000000000053 RSI: 0000000000000000 RDI: 0000000000000009 [ 104.129084][ T6571] RBP: 00007f75d8e0e2a0 R08: 0000400000000040 R09: 0000000000000000 [ 104.129098][ T6571] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000000 [ 104.129110][ T6571] R13: 0000000000000000 R14: 00007f75d8fa5fa0 R15: 00007fff1112af18 [ 104.129140][ T6571] [ 104.129148][ T6571] Mem-Info: [ 104.476834][ T6635] bridge_slave_0: left allmulticast mode [ 104.484833][ T6571] active_anon:7805 inactive_anon:0 isolated_anon:0 [ 104.484833][ T6571] active_file:1193 inactive_file:38304 isolated_file:0 [ 104.484833][ T6571] unevictable:768 dirty:126 writeback:0 [ 104.484833][ T6571] slab_reclaimable:9799 slab_unreclaimable:99075 [ 104.484833][ T6571] mapped:32468 shmem:4215 pagetables:955 [ 104.484833][ T6571] sec_pagetables:0 bounce:0 [ 104.484833][ T6571] kernel_misc_reclaimable:0 [ 104.484833][ T6571] free:1314082 free_pcp:663 free_cma:0 [ 104.517637][ T6635] bridge_slave_0: left promiscuous mode [ 104.546289][ T6635] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.579153][ T6571] Node 0 active_anon:31720kB inactive_anon:0kB active_file:4772kB inactive_file:153136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118772kB dirty:492kB writeback:0kB shmem:15524kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11192kB pagetables:3820kB sec_pagetables:0kB all_unreclaimable? no [ 104.613756][ T6650] FAULT_INJECTION: forcing a failure. [ 104.613756][ T6650] name failslab, interval 1, probability 0, space 0, times 0 [ 104.630718][ T6650] CPU: 0 UID: 0 PID: 6650 Comm: syz.1.220 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 104.630745][ T6650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 104.630758][ T6650] Call Trace: [ 104.630765][ T6650] [ 104.630774][ T6650] dump_stack_lvl+0x241/0x360 [ 104.630806][ T6650] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.630830][ T6650] ? __pfx__printk+0x10/0x10 [ 104.630863][ T6650] should_fail_ex+0x40a/0x550 [ 104.630897][ T6650] should_failslab+0xac/0x100 [ 104.630926][ T6650] ? skb_clone+0x20c/0x390 [ 104.630963][ T6650] kmem_cache_alloc_noprof+0x70/0x380 [ 104.630999][ T6650] skb_clone+0x20c/0x390 [ 104.631028][ T6650] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 104.631059][ T6650] dev_queue_xmit_nit+0x249/0xca0 [ 104.631088][ T6650] ? dev_queue_xmit_nit+0x2b/0xca0 [ 104.631116][ T6650] ? validate_xmit_skb+0x9b8/0xff0 [ 104.631152][ T6650] dev_hard_start_xmit+0x15f/0x7d0 [ 104.631184][ T6650] ? __pfx_validate_xmit_skb+0x10/0x10 [ 104.631227][ T6650] __dev_queue_xmit+0x1b73/0x3f50 [ 104.631258][ T6650] ? kasan_save_track+0x51/0x80 [ 104.631286][ T6650] ? ____sys_sendmsg+0x53a/0x860 [ 104.631322][ T6650] ? __dev_queue_xmit+0x2f4/0x3f50 [ 104.631359][ T6650] ? __pfx___dev_queue_xmit+0x10/0x10 [ 104.631409][ T6650] ? __copy_skb_header+0xa7/0x5a0 [ 104.631441][ T6650] ? __asan_memcpy+0x40/0x70 [ 104.631495][ T6650] ? skb_clone+0x240/0x390 [ 104.631531][ T6650] __netlink_deliver_tap+0x561/0x7f0 [ 104.631577][ T6650] ? netlink_deliver_tap+0x2e/0x1b0 [ 104.631608][ T6650] netlink_deliver_tap+0x19d/0x1b0 [ 104.631642][ T6650] netlink_unicast+0x7c4/0x990 [ 104.631681][ T6650] ? __pfx_netlink_unicast+0x10/0x10 [ 104.631708][ T6650] ? __virt_addr_valid+0x45f/0x530 [ 104.631742][ T6650] ? __phys_addr_symbol+0x2f/0x70 [ 104.631774][ T6650] ? __check_object_size+0x47a/0x730 [ 104.631807][ T6650] netlink_sendmsg+0x8de/0xcb0 [ 104.631840][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.631866][ T6650] ? aa_sock_msg_perm+0x91/0x160 [ 104.631902][ T6650] ? __pfx_netlink_sendmsg+0x10/0x10 [ 104.631919][ T6650] __sock_sendmsg+0x221/0x270 [ 104.631947][ T6650] ____sys_sendmsg+0x53a/0x860 [ 104.631996][ T6650] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.632025][ T6650] ? __fget_files+0x2a/0x410 [ 104.632058][ T6650] ? __fget_files+0x2a/0x410 [ 104.632097][ T6650] __sys_sendmsg+0x269/0x350 [ 104.632133][ T6650] ? __pfx___sys_sendmsg+0x10/0x10 [ 104.632179][ T6650] ? do_sys_openat2+0x17a/0x1d0 [ 104.632239][ T6650] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.632273][ T6650] ? do_syscall_64+0x100/0x230 [ 104.632303][ T6650] ? do_syscall_64+0xb6/0x230 [ 104.632332][ T6650] do_syscall_64+0xf3/0x230 [ 104.632357][ T6650] ? clear_bhb_loop+0x35/0x90 [ 104.632391][ T6650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.632419][ T6650] RIP: 0033:0x7f05c8b8cde9 [ 104.632439][ T6650] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.632456][ T6650] RSP: 002b:00007f05c9ab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.632478][ T6650] RAX: ffffffffffffffda RBX: 00007f05c8da6080 RCX: 00007f05c8b8cde9 [ 104.632493][ T6650] RDX: 00000000000048c0 RSI: 0000400000000140 RDI: 0000000000000005 [ 104.632506][ T6650] RBP: 00007f05c9ab2090 R08: 0000000000000000 R09: 0000000000000000 [ 104.632518][ T6650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.632530][ T6650] R13: 0000000000000001 R14: 00007f05c8da6080 R15: 00007ffee7038c68 [ 104.632561][ T6650] [ 104.980656][ T6571] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 105.011157][ T6571] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.038371][ T6571] lowmem_reserve[]: 0 2490 2490 0 0 [ 105.043702][ T6571] Node 0 DMA32 free:1343100kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:20184kB inactive_anon:0kB active_file:4772kB inactive_file:152820kB unevictable:1536kB writepending:488kB present:3129332kB managed:2549872kB mlocked:0kB bounce:0kB free_pcp:1520kB local_pcp:1020kB free_cma:0kB [ 105.074330][ T6571] lowmem_reserve[]: 0 0 0 0 0 [ 105.079210][ T6571] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 105.107185][ T6571] lowmem_reserve[]: 0 0 0 0 0 [ 105.112507][ T6571] Node 1 Normal free:3909656kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 105.142094][ T6571] lowmem_reserve[]: 0 0 0 0 0 [ 105.146888][ T6571] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 105.159793][ T6571] Node 0 DMA32: 103*4kB (UME) 63*8kB (ME) 53*16kB (ME) 83*32kB (UME) 54*64kB (UME) 23*128kB (UME) 12*256kB (UME) 5*512kB (UM) 5*1024kB (M) 3*2048kB (M) 321*4096kB (M) = 1342532kB [ 105.178088][ T6571] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 105.190370][ T6571] Node 1 Normal: 186*4kB (UE) 60*8kB (UME) 35*16kB (UME) 185*32kB (UME) 86*64kB (UME) 35*128kB (UME) 9*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (UM) = 3909656kB [ 105.209251][ T6571] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.218959][ T6571] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 105.228370][ T6571] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 105.238107][ T6571] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 105.247517][ T6571] 40918 total pagecache pages [ 105.252243][ T6571] 0 pages in swap cache [ 105.256417][ T6571] Free swap = 124996kB [ 105.260737][ T6571] Total swap = 124996kB [ 105.264933][ T6571] 2097051 pages RAM [ 105.268845][ T6571] 0 pages HighMem/MovableOnly [ 105.273856][ T6571] 427861 pages reserved [ 105.278168][ T6571] 0 pages cma reserved [ 105.476249][ T6658] delete_channel: no stack [ 106.353087][ T6694] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 3, id = 0 [ 106.483805][ T6698] syz.1.233 uses obsolete (PF_INET,SOCK_PACKET) [ 106.501271][ C1] Unknown status report in ack skb [ 107.029258][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.043210][ T6715] batadv_slave_1: entered promiscuous mode [ 107.085746][ T6715] batadv_slave_1: entered allmulticast mode [ 107.101321][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 107.338092][ T6738] netlink: 60 bytes leftover after parsing attributes in process `syz.3.241'. [ 107.788042][ T6751] netlink: 40 bytes leftover after parsing attributes in process `syz.3.246'. [ 107.978643][ T6760] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 108.054554][ T5853] IPVS: starting estimator thread 0... [ 108.075316][ T6756] wg1 speed is unknown, defaulting to 1000 [ 108.105767][ T6771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.252'. [ 108.113938][ T6756] wg1 speed is unknown, defaulting to 1000 [ 108.129967][ T6756] wg1 speed is unknown, defaulting to 1000 [ 108.167679][ T6767] IPVS: using max 21 ests per chain, 50400 per kthread [ 108.171564][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.4.252'. [ 108.363630][ T6756] infiniband syz0: set active [ 108.368851][ T6756] infiniband syz0: added wg1 [ 108.381584][ T5893] wg1 speed is unknown, defaulting to 1000 [ 108.392662][ T6783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.254'. [ 108.418267][ T6756] RDS/IB: syz0: added [ 108.423379][ T6756] smc: adding ib device syz0 with port count 1 [ 108.430680][ T6756] smc: ib device syz0 port 1 has pnetid [ 108.454542][ T5893] wg1 speed is unknown, defaulting to 1000 [ 108.552485][ T6756] wg1 speed is unknown, defaulting to 1000 [ 108.873517][ T6802] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.258'. [ 108.918571][ T6804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 109.099176][ T6807] veth0: entered promiscuous mode [ 109.104600][ T6810] veth0: left promiscuous mode [ 109.152451][ T6756] wg1 speed is unknown, defaulting to 1000 [ 109.189850][ T6817] netlink: 96 bytes leftover after parsing attributes in process `syz.3.262'. [ 109.245576][ T6817] tls_set_device_offload: netdev not found [ 109.578907][ T6837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 109.587785][ T6835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.265'. [ 109.750734][ T6756] wg1 speed is unknown, defaulting to 1000 [ 109.811102][ T6841] netlink: 36 bytes leftover after parsing attributes in process `syz.0.268'. [ 109.968119][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.270'. [ 110.084689][ T6858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.272'. [ 110.086958][ T6843] xt_CT: No such helper "pptp" [ 110.194241][ T6756] wg1 speed is unknown, defaulting to 1000 [ 110.629669][ T6756] wg1 speed is unknown, defaulting to 1000 [ 111.214917][ T6904] netlink: 'syz.1.286': attribute type 28 has an invalid length. [ 111.233859][ T6904] netlink: 'syz.1.286': attribute type 3 has an invalid length. [ 111.720938][ T6928] sctp: [Deprecated]: syz.0.294 (pid 6928) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.720938][ T6928] Use struct sctp_sack_info instead [ 111.836019][ T6933] SET target dimension over the limit! [ 112.097011][ T6938] wg1 speed is unknown, defaulting to 1000 [ 112.247745][ T6944] netlink: 'syz.1.301': attribute type 21 has an invalid length. [ 113.388791][ T6938] __nla_validate_parse: 7 callbacks suppressed [ 113.388815][ T6938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 113.506075][ T6939] netlink: 'syz.2.299': attribute type 4 has an invalid length. [ 113.595598][ T6985] wg1 speed is unknown, defaulting to 1000 [ 113.769098][ T6992] openvswitch: netlink: Tunnel attr 162 out of range max 16 [ 113.853297][ T6995] netlink: 'syz.3.315': attribute type 32 has an invalid length. [ 114.300567][ T7004] netlink: 36 bytes leftover after parsing attributes in process `syz.1.318'. [ 114.532673][ T7019] netlink: 196 bytes leftover after parsing attributes in process `syz.2.321'. [ 114.599566][ T7023] netlink: 68 bytes leftover after parsing attributes in process `syz.3.323'. [ 114.616768][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.323'. [ 114.713094][ T7023] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 114.828517][ T7023] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 114.918704][ T6985] netlink: 16 bytes leftover after parsing attributes in process `syz.0.312'. [ 115.177788][ T7041] Bluetooth: MGMT ver 1.23 [ 115.582380][ T7054] openvswitch: netlink: EtherType 50a is less than min 600 [ 115.954218][ T7054] netlink: 240 bytes leftover after parsing attributes in process `syz.0.330'. [ 116.139743][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.3.332'. [ 116.405237][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 116.658057][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.337'. [ 117.409032][ T7130] atomic_op ffff888024ce9198 conn xmit_atomic 0000000000000000 [ 117.833478][ T7158] netlink: 'syz.1.353': attribute type 12 has an invalid length. [ 117.852176][ T7158] netlink: 'syz.1.353': attribute type 29 has an invalid length. [ 117.882076][ T7155] sch_tbf: burst 0 is lower than device team_slave_0 mtu (1514) ! [ 117.934109][ T7155] 0·: renamed from hsr0 (while UP) [ 117.947030][ T7155] 0·: entered promiscuous mode [ 117.957146][ T7155] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 118.001756][ T7155] Cannot find add_set index 1 as target [ 118.034339][ T7155] x_tables: duplicate underflow at hook 3 [ 118.334429][ T7182] x_tables: duplicate underflow at hook 2 [ 118.551190][ T7199] netlink: 'syz.3.361': attribute type 10 has an invalid length. [ 118.738141][ T7199] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 118.777872][ T7202] __nla_validate_parse: 13 callbacks suppressed [ 118.777895][ T7202] netlink: 132 bytes leftover after parsing attributes in process `syz.3.361'. [ 118.861384][ T7198] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.028453][ T7215] netlink: 80 bytes leftover after parsing attributes in process `syz.1.366'. [ 119.086494][ T7215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 119.584071][ T7253] IPVS: length: 218 != 8 [ 119.651125][ T7252] xt_connbytes: Forcing CT accounting to be enabled [ 119.738251][ T7252] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 120.181373][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 120.627903][ T7304] erspan0: entered promiscuous mode [ 120.637522][ T7308] netlink: 12 bytes leftover after parsing attributes in process `syz.2.388'. [ 120.654274][ T7304] vlan2: entered promiscuous mode [ 120.687564][ T7308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.388'. [ 120.710445][ T7316] sctp: [Deprecated]: syz.3.390 (pid 7316) Use of int in max_burst socket option. [ 120.710445][ T7316] Use struct sctp_assoc_value instead [ 120.728317][ T7304] erspan0: left promiscuous mode [ 120.914658][ T7327] sctp: [Deprecated]: syz.3.390 (pid 7327) Use of int in maxseg socket option. [ 120.914658][ T7327] Use struct sctp_assoc_value instead [ 121.118861][ T5857] Bluetooth: hci4: command 0x0405 tx timeout [ 121.291891][ T7335] netlink: 'syz.2.392': attribute type 33 has an invalid length. [ 121.342295][ T7341] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 121.363485][ T7343] netlink: 16 bytes leftover after parsing attributes in process `syz.4.394'. [ 121.378949][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 121.406821][ T7347] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 121.458399][ T7343] xt_hashlimit: invalid interval [ 122.821800][ T1341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.979641][ T1341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.149193][ T1341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.167961][ T7415] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 123.346155][ T1341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.401200][ T57] wg1 speed is unknown, defaulting to 1000 [ 123.412828][ T57] wg1 speed is unknown, defaulting to 1000 [ 123.635012][ T1341] bridge_slave_1: left allmulticast mode [ 123.652676][ T1341] bridge_slave_1: left promiscuous mode [ 123.679880][ T1341] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.742450][ T1341] bridge_slave_0: left allmulticast mode [ 123.765216][ T1341] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.797716][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 123.810143][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 123.827936][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 123.838565][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 123.852092][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 123.862826][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 124.348206][ T1341] erspan0 (unregistering): left promiscuous mode [ 124.712679][ T1341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.725757][ T1341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.746423][ T1341] bond0 (unregistering): Released all slaves [ 124.869452][ T1341] bond1 (unregistering): Released all slaves [ 124.887616][ T7454] __nla_validate_parse: 6 callbacks suppressed [ 124.887636][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.420'. [ 124.912364][ T7459] syz.3.420 (7459) used greatest stack depth: 17552 bytes left [ 125.051282][ T1341] tipc: Disabling bearer [ 125.110690][ T1341] tipc: Left network mode [ 125.115535][ T7433] wg1 speed is unknown, defaulting to 1000 [ 125.178924][ T7480] netlink: 'syz.3.423': attribute type 1 has an invalid length. [ 125.206440][ T7480] netlink: 228 bytes leftover after parsing attributes in process `syz.3.423'. [ 125.273153][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'. [ 125.353634][ T7484] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 125.919037][ T5857] Bluetooth: hci2: command tx timeout [ 125.977001][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 126.337115][ T7519] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 126.458170][ T1341] batadv_slave_1: left promiscuous mode [ 126.520637][ T1341] hsr_slave_0: left promiscuous mode [ 126.527186][ T1341] hsr_slave_1: left promiscuous mode [ 126.580763][ T1341] veth1_macvtap: left promiscuous mode [ 126.587102][ T1341] veth0_macvtap: left promiscuous mode [ 126.620523][ T1341] veth1_vlan: left promiscuous mode [ 126.646815][ T1341] veth0_vlan: left promiscuous mode [ 127.109452][ T1341] team0 (unregistering): Port device team_slave_1 removed [ 127.154042][ T1341] team0 (unregistering): Port device team_slave_0 removed [ 127.335407][ T1102] smc: removing ib device syz0 [ 127.821640][ T7535] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.853522][ T7535] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.909027][ T7545] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 127.932210][ T7545] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.998111][ T5857] Bluetooth: hci2: command tx timeout [ 128.398170][ T7433] chnl_net:caif_netlink_parms(): no params data found [ 128.475320][ T7570] netlink: 16 bytes leftover after parsing attributes in process `syz.0.443'. [ 128.547955][ T7567] .: renamed from bond0 (while UP) [ 128.665616][ T7575] netlink: 156 bytes leftover after parsing attributes in process `syz.2.445'. [ 128.781146][ T7581] netlink: 'syz.2.445': attribute type 10 has an invalid length. [ 128.839715][ T7575] rdma_rxe: rxe_newlink: failed to add lo [ 128.870497][ T7581] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.946787][ T7583] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 129.299361][ T7603] xt_TCPMSS: Only works on TCP SYN packets [ 129.496551][ T7602] netlink: 'syz.4.452': attribute type 21 has an invalid length. [ 129.528643][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.452'. [ 129.540445][ T7618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 129.571009][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.604819][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.626335][ T7433] bridge_slave_0: entered allmulticast mode [ 129.648741][ T7623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 129.659109][ T7433] bridge_slave_0: entered promiscuous mode [ 129.713247][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.735021][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.762907][ T7433] bridge_slave_1: entered allmulticast mode [ 129.781348][ T7433] bridge_slave_1: entered promiscuous mode [ 130.013741][ T7636] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 130.062441][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.077741][ T5857] Bluetooth: hci2: command tx timeout [ 130.105896][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.371957][ T7433] team0: Port device team_slave_0 added [ 130.454375][ T7659] __nla_validate_parse: 3 callbacks suppressed [ 130.454396][ T7659] netlink: 24 bytes leftover after parsing attributes in process `syz.2.464'. [ 130.527385][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.467'. [ 130.553195][ T7433] team0: Port device team_slave_1 added [ 130.576837][ T7664] sctp: [Deprecated]: syz.0.466 (pid 7664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.576837][ T7664] Use struct sctp_sack_info instead [ 130.591101][ T7654] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 130.806987][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.819462][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.846916][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.904534][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.469'. [ 130.937562][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.944785][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.976884][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.121136][ T7433] hsr_slave_0: entered promiscuous mode [ 131.126994][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 131.147087][ T7433] hsr_slave_1: entered promiscuous mode [ 131.160781][ T29] audit: type=1800 audit(1740001309.456:2): pid=7685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.470" name=4008 dev="tmpfs" ino=514 res=0 errno=0 [ 131.461654][ T7698] ip6tnl1: entered allmulticast mode [ 131.751033][ T7706] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.902909][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.477'. [ 131.957225][ T7715] openvswitch: netlink: IPv4 tun info is not correct [ 132.157671][ T5857] Bluetooth: hci2: command tx timeout [ 132.220476][ T7731] FAULT_INJECTION: forcing a failure. [ 132.220476][ T7731] name failslab, interval 1, probability 0, space 0, times 0 [ 132.233614][ T7731] CPU: 0 UID: 0 PID: 7731 Comm: syz.2.480 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 132.233641][ T7731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 132.233654][ T7731] Call Trace: [ 132.233662][ T7731] [ 132.233670][ T7731] dump_stack_lvl+0x241/0x360 [ 132.233708][ T7731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.233731][ T7731] ? __pfx__printk+0x10/0x10 [ 132.233758][ T7731] ? __pfx_lock_acquire+0x10/0x10 [ 132.233797][ T7731] should_fail_ex+0x40a/0x550 [ 132.233832][ T7731] should_failslab+0xac/0x100 [ 132.233861][ T7731] ? __inet_hash_connect+0x11cc/0x2170 [ 132.233893][ T7731] kmem_cache_alloc_noprof+0x70/0x380 [ 132.233928][ T7731] __inet_hash_connect+0x11cc/0x2170 [ 132.233987][ T7731] ? __pfx___inet_hash_connect+0x10/0x10 [ 132.234028][ T7731] ? inet6_hash_connect+0x7d/0xd0 [ 132.234056][ T7731] tcp_v6_connect+0x116c/0x1e50 [ 132.234092][ T7731] ? __pfx_tcp_v6_connect+0x10/0x10 [ 132.234115][ T7731] ? kasan_save_track+0x3f/0x80 [ 132.234133][ T7731] ? __kasan_kmalloc+0x98/0xb0 [ 132.234184][ T7731] __inet_stream_connect+0x262/0xf30 [ 132.234235][ T7731] ? __pfx___inet_stream_connect+0x10/0x10 [ 132.234266][ T7731] ? __kasan_kmalloc+0x98/0xb0 [ 132.234291][ T7731] ? __kmalloc_cache_noprof+0x243/0x390 [ 132.234318][ T7731] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 132.234350][ T7731] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 132.234385][ T7731] tcp_sendmsg_locked+0x4c09/0x5330 [ 132.234410][ T7731] ? mark_lock+0x9a/0x360 [ 132.234432][ T7731] ? __lock_acquire+0x1397/0x2100 [ 132.234483][ T7731] ? mark_lock+0x9a/0x360 [ 132.234506][ T7731] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.234540][ T7731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.234576][ T7731] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 132.234608][ T7731] ? tcp_sendmsg+0x22/0x50 [ 132.234634][ T7731] ? do_raw_spin_unlock+0x13c/0x8b0 [ 132.234671][ T7731] tcp_sendmsg+0x30/0x50 [ 132.234698][ T7731] __sock_sendmsg+0xef/0x270 [ 132.234727][ T7731] __sys_sendto+0x363/0x4c0 [ 132.234761][ T7731] ? __pfx___sys_sendto+0x10/0x10 [ 132.234802][ T7731] ? __fget_files+0x2a/0x410 [ 132.234841][ T7731] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 132.234875][ T7731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 132.234913][ T7731] __x64_sys_sendto+0xde/0x100 [ 132.234942][ T7731] do_syscall_64+0xf3/0x230 [ 132.234975][ T7731] ? clear_bhb_loop+0x35/0x90 [ 132.235008][ T7731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.235035][ T7731] RIP: 0033:0x7f3a8698cde9 [ 132.235055][ T7731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.235072][ T7731] RSP: 002b:00007f3a877d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 132.235094][ T7731] RAX: ffffffffffffffda RBX: 00007f3a86ba5fa0 RCX: 00007f3a8698cde9 [ 132.235109][ T7731] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000004 [ 132.235122][ T7731] RBP: 00007f3a877d4090 R08: 00004000000001c0 R09: 000000000000001c [ 132.235135][ T7731] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 132.235148][ T7731] R13: 0000000000000000 R14: 00007f3a86ba5fa0 R15: 00007ffe484a5208 [ 132.235180][ T7731] [ 133.121312][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.131943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.194861][ T7433] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 133.233843][ T7433] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 133.314918][ T7433] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.383954][ T7433] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.527202][ T7768] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 133.535774][ T7768] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 133.601538][ T7772] FAULT_INJECTION: forcing a failure. [ 133.601538][ T7772] name failslab, interval 1, probability 0, space 0, times 0 [ 133.697659][ T7772] CPU: 1 UID: 0 PID: 7772 Comm: syz.4.491 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 133.697686][ T7772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 133.697696][ T7772] Call Trace: [ 133.697702][ T7772] [ 133.697710][ T7772] dump_stack_lvl+0x241/0x360 [ 133.697736][ T7772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.697754][ T7772] ? __pfx__printk+0x10/0x10 [ 133.697773][ T7772] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 133.697798][ T7772] ? __pfx___might_resched+0x10/0x10 [ 133.697826][ T7772] should_fail_ex+0x40a/0x550 [ 133.697855][ T7772] should_failslab+0xac/0x100 [ 133.697878][ T7772] kmem_cache_alloc_node_noprof+0x77/0x380 [ 133.697901][ T7772] ? __alloc_skb+0x1c3/0x440 [ 133.697927][ T7772] __alloc_skb+0x1c3/0x440 [ 133.697949][ T7772] ? tcp_call_bpf+0x285/0x5f0 [ 133.697970][ T7772] ? __pfx___alloc_skb+0x10/0x10 [ 133.697995][ T7772] ? __asan_memset+0x23/0x50 [ 133.698023][ T7772] tcp_stream_alloc_skb+0x3d/0x310 [ 133.698048][ T7772] tcp_connect+0x11ee/0x4940 [ 133.698093][ T7772] ? __pfx_tcp_connect+0x10/0x10 [ 133.698116][ T7772] ? inet6_hash_connect+0x7d/0xd0 [ 133.698139][ T7772] tcp_v6_connect+0x14c5/0x1e50 [ 133.698168][ T7772] ? __pfx_tcp_v6_connect+0x10/0x10 [ 133.698186][ T7772] ? kasan_save_track+0x3f/0x80 [ 133.698203][ T7772] ? __kasan_kmalloc+0x98/0xb0 [ 133.698244][ T7772] __inet_stream_connect+0x262/0xf30 [ 133.698281][ T7772] ? __pfx___inet_stream_connect+0x10/0x10 [ 133.698310][ T7772] ? __kasan_kmalloc+0x98/0xb0 [ 133.698333][ T7772] ? __kmalloc_cache_noprof+0x243/0x390 [ 133.698360][ T7772] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 133.698391][ T7772] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 133.698426][ T7772] tcp_sendmsg_locked+0x4c09/0x5330 [ 133.698450][ T7772] ? mark_lock+0x9a/0x360 [ 133.698475][ T7772] ? __lock_acquire+0x1397/0x2100 [ 133.698525][ T7772] ? mark_lock+0x9a/0x360 [ 133.698548][ T7772] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.698575][ T7772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.698614][ T7772] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 133.698639][ T7772] ? tcp_sendmsg+0x22/0x50 [ 133.698660][ T7772] ? do_raw_spin_unlock+0x13c/0x8b0 [ 133.698689][ T7772] tcp_sendmsg+0x30/0x50 [ 133.698710][ T7772] __sock_sendmsg+0xef/0x270 [ 133.698732][ T7772] __sys_sendto+0x363/0x4c0 [ 133.698758][ T7772] ? __pfx___sys_sendto+0x10/0x10 [ 133.698790][ T7772] ? __fget_files+0x2a/0x410 [ 133.698821][ T7772] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 133.698850][ T7772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 133.698879][ T7772] __x64_sys_sendto+0xde/0x100 [ 133.698904][ T7772] do_syscall_64+0xf3/0x230 [ 133.698926][ T7772] ? clear_bhb_loop+0x35/0x90 [ 133.698952][ T7772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.698974][ T7772] RIP: 0033:0x7fd98778cde9 [ 133.698990][ T7772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.699003][ T7772] RSP: 002b:00007fd98862f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 133.699022][ T7772] RAX: ffffffffffffffda RBX: 00007fd9879a5fa0 RCX: 00007fd98778cde9 [ 133.699034][ T7772] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000004 [ 133.699044][ T7772] RBP: 00007fd98862f090 R08: 00004000000001c0 R09: 000000000000001c [ 133.699055][ T7772] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 133.699065][ T7772] R13: 0000000000000000 R14: 00007fd9879a5fa0 R15: 00007ffecc579008 [ 133.699089][ T7772] [ 134.096507][ T7433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.113884][ T7433] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.146480][ T7780] netlink: 72 bytes leftover after parsing attributes in process `syz.3.494'. [ 134.208109][ T7780] netlink: 72 bytes leftover after parsing attributes in process `syz.3.494'. [ 134.274591][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.281790][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.314829][ T7780] syz.3.494 (7780) used greatest stack depth: 17360 bytes left [ 134.334894][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.343324][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.352513][ T7788] netlink: 'syz.2.493': attribute type 10 has an invalid length. [ 134.469271][ T7788] macvlan0: entered promiscuous mode [ 134.480239][ T7788] macvlan0: entered allmulticast mode [ 134.535938][ T7788] veth1_vlan: entered allmulticast mode [ 134.569848][ T7788] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 134.573796][ T7802] netlink: 'syz.0.496': attribute type 4 has an invalid length. [ 134.602294][ T7802] netlink: 152 bytes leftover after parsing attributes in process `syz.0.496'. [ 134.659057][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 134.699290][ T7806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.499'. [ 135.013025][ T7433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.204438][ T7433] veth0_vlan: entered promiscuous mode [ 135.244020][ T7433] veth1_vlan: entered promiscuous mode [ 135.428095][ T7433] veth0_macvtap: entered promiscuous mode [ 135.454541][ T7433] veth1_macvtap: entered promiscuous mode [ 135.533242][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.566629][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.632650][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.653636][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.687592][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.737602][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.779151][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.850170][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.892768][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.937580][ T7433] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.957710][ T7433] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.988738][ T7433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.046881][ T7433] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.070237][ T7433] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.101745][ T7433] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.136007][ T7433] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.221984][ T7873] __nla_validate_parse: 1 callbacks suppressed [ 136.222006][ T7873] netlink: 104 bytes leftover after parsing attributes in process `syz.4.514'. [ 136.476734][ T3499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.534463][ T3499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.576764][ T7890] netlink: 'syz.0.518': attribute type 10 has an invalid length. [ 136.601443][ T7889] No such timeout policy "syz0" [ 136.685406][ T7890] .: (slave bridge0): Enslaving as an active interface with an up link [ 136.736878][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.751047][ T7902] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 136.785297][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.850121][ T7902] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.979614][ T7905] bond1: (slave ip6gretap1): making interface the new active one [ 137.010270][ T7905] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 137.345005][ T7927] FAULT_INJECTION: forcing a failure. [ 137.345005][ T7927] name failslab, interval 1, probability 0, space 0, times 0 [ 137.359684][ T7927] CPU: 1 UID: 0 PID: 7927 Comm: syz.0.525 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 137.359713][ T7927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 137.359726][ T7927] Call Trace: [ 137.359733][ T7927] [ 137.359742][ T7927] dump_stack_lvl+0x241/0x360 [ 137.359773][ T7927] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.359797][ T7927] ? __pfx__printk+0x10/0x10 [ 137.359821][ T7927] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 137.359851][ T7927] ? __pfx___might_resched+0x10/0x10 [ 137.359884][ T7927] should_fail_ex+0x40a/0x550 [ 137.359918][ T7927] should_failslab+0xac/0x100 [ 137.359948][ T7927] kmem_cache_alloc_node_noprof+0x77/0x380 [ 137.359976][ T7927] ? __alloc_skb+0x1c3/0x440 [ 137.360002][ T7927] ? alloc_pages_mpol+0x4bd/0x660 [ 137.360032][ T7927] __alloc_skb+0x1c3/0x440 [ 137.360058][ T7927] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 137.360089][ T7927] ? __pfx___alloc_skb+0x10/0x10 [ 137.360117][ T7927] ? alloc_pages_mpol+0x660/0x660 [ 137.360145][ T7927] ? alloc_pages_noprof+0x136/0x190 [ 137.360174][ T7927] tcp_stream_alloc_skb+0x3d/0x310 [ 137.360206][ T7927] tcp_connect+0x1e44/0x4940 [ 137.360259][ T7927] ? __pfx_tcp_connect+0x10/0x10 [ 137.360286][ T7927] ? inet6_hash_connect+0x7d/0xd0 [ 137.360312][ T7927] tcp_v6_connect+0x14c5/0x1e50 [ 137.360346][ T7927] ? __pfx_tcp_v6_connect+0x10/0x10 [ 137.360367][ T7927] ? kasan_save_track+0x3f/0x80 [ 137.360386][ T7927] ? __kasan_kmalloc+0x98/0xb0 [ 137.360432][ T7927] __inet_stream_connect+0x262/0xf30 [ 137.360471][ T7927] ? __pfx___inet_stream_connect+0x10/0x10 [ 137.360498][ T7927] ? __kasan_kmalloc+0x98/0xb0 [ 137.360521][ T7927] ? __kmalloc_cache_noprof+0x243/0x390 [ 137.360548][ T7927] ? tcp_sendmsg_fastopen+0x1d8/0x5d0 [ 137.360594][ T7927] tcp_sendmsg_fastopen+0x3a2/0x5d0 [ 137.360628][ T7927] tcp_sendmsg_locked+0x4c09/0x5330 [ 137.360654][ T7927] ? mark_lock+0x9a/0x360 [ 137.360679][ T7927] ? __lock_acquire+0x1397/0x2100 [ 137.360732][ T7927] ? mark_lock+0x9a/0x360 [ 137.360756][ T7927] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.360790][ T7927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.360829][ T7927] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 137.360861][ T7927] ? tcp_sendmsg+0x22/0x50 [ 137.360888][ T7927] ? do_raw_spin_unlock+0x13c/0x8b0 [ 137.360924][ T7927] tcp_sendmsg+0x30/0x50 [ 137.360952][ T7927] __sock_sendmsg+0xef/0x270 [ 137.360979][ T7927] __sys_sendto+0x363/0x4c0 [ 137.361013][ T7927] ? __pfx___sys_sendto+0x10/0x10 [ 137.361055][ T7927] ? __fget_files+0x2a/0x410 [ 137.361094][ T7927] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 137.361128][ T7927] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 137.361166][ T7927] __x64_sys_sendto+0xde/0x100 [ 137.361198][ T7927] do_syscall_64+0xf3/0x230 [ 137.361224][ T7927] ? clear_bhb_loop+0x35/0x90 [ 137.361258][ T7927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.361286][ T7927] RIP: 0033:0x7ff9c1f8cde9 [ 137.361305][ T7927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.361322][ T7927] RSP: 002b:00007ff9c2d0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 137.361345][ T7927] RAX: ffffffffffffffda RBX: 00007ff9c21a5fa0 RCX: 00007ff9c1f8cde9 [ 137.361360][ T7927] RDX: 0000000000000001 RSI: 0000400000000240 RDI: 0000000000000004 [ 137.361372][ T7927] RBP: 00007ff9c2d0b090 R08: 00004000000001c0 R09: 000000000000001c [ 137.361385][ T7927] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001 [ 137.361397][ T7927] R13: 0000000000000000 R14: 00007ff9c21a5fa0 R15: 00007ffcbd60d5b8 [ 137.361428][ T7927] [ 138.281696][ T3499] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.338396][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.531'. [ 138.378687][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.531'. [ 138.408936][ T7955] netlink: 32 bytes leftover after parsing attributes in process `syz.4.531'. [ 138.427730][ T7955] block nbd0: Unsupported socket: shutdown callout must be supported. [ 138.611645][ T3499] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.667700][ T7967] netlink: 5 bytes leftover after parsing attributes in process `syz.0.532'. [ 138.677338][ T7968] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 138.817212][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 138.918247][ T3499] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.130575][ T3499] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.570367][ T8014] netlink: 24 bytes leftover after parsing attributes in process `syz.4.543'. [ 139.593009][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 139.609226][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 139.617951][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 139.626064][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 139.633933][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 139.642490][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 139.780429][ T3499] bridge_slave_1: left allmulticast mode [ 139.799513][ T3499] bridge_slave_1: left promiscuous mode [ 139.823833][ T3499] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.924421][ T3499] bridge_slave_0: left allmulticast mode [ 139.940943][ T3499] bridge_slave_0: left promiscuous mode [ 139.962282][ T3499] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.884326][ T3499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.896218][ T3499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.912679][ T3499] bond0 (unregistering): Released all slaves [ 140.948127][ T8047] netlink: 'syz.3.547': attribute type 3 has an invalid length. [ 140.955942][ T8047] netlink: 766 bytes leftover after parsing attributes in process `syz.3.547'. [ 141.542896][ T8092] tipc: Started in network mode [ 141.567730][ T8092] tipc: Node identity ac14140f, cluster identity 4711 [ 141.575167][ T8092] tipc: New replicast peer: 255.255.255.255 [ 141.623664][ T8092] tipc: Enabled bearer , priority 10 [ 141.678411][ T5846] Bluetooth: hci2: command tx timeout [ 141.717024][ T8097] wireguard: wg1: Could not create IPv4 socket [ 141.942702][ T8108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.556'. [ 141.964805][ T8116] netlink: 87 bytes leftover after parsing attributes in process `syz.3.557'. [ 142.193948][ T3499] hsr_slave_0: left promiscuous mode [ 142.220648][ T3499] hsr_slave_1: left promiscuous mode [ 142.235562][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.245427][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.260750][ T3499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.270399][ T8126] Driver unsupported XDP return value 0 on prog (id 102) dev N/A, expect packet loss! [ 142.271522][ T3499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.385053][ T3499] veth1_macvtap: left promiscuous mode [ 142.406614][ T3499] veth0_macvtap: left promiscuous mode [ 142.417989][ T3499] veth1_vlan: left promiscuous mode [ 142.423365][ T3499] veth0_vlan: left promiscuous mode [ 142.485237][ T8130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.563'. [ 142.737628][ T5925] tipc: Node number set to 2886997007 [ 143.433832][ T3499] team0 (unregistering): Port device team_slave_1 removed [ 143.539241][ T3499] team0 (unregistering): Port device team_slave_0 removed [ 143.760692][ T5846] Bluetooth: hci2: command tx timeout [ 144.023012][ T8015] chnl_net:caif_netlink_parms(): no params data found [ 144.056106][ T8128] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 144.070772][ T8128] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 144.098558][ T8161] netlink: 'syz.2.569': attribute type 29 has an invalid length. [ 144.128570][ T8162] netlink: 'syz.2.569': attribute type 29 has an invalid length. [ 144.175300][ T8163] netlink: 'syz.2.569': attribute type 29 has an invalid length. [ 144.311790][ T8170] netlink: 36 bytes leftover after parsing attributes in process `syz.4.572'. [ 144.387006][ T8174] netlink: 4071 bytes leftover after parsing attributes in process `syz.0.573'. [ 144.564908][ T8015] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.622723][ T8015] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.631973][ T8015] bridge_slave_0: entered allmulticast mode [ 144.722509][ T8015] bridge_slave_0: entered promiscuous mode [ 144.761502][ T8189] netlink: 'syz.2.577': attribute type 13 has an invalid length. [ 144.805048][ T8192] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 144.830504][ T8015] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.842180][ T8015] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.854503][ T8015] bridge_slave_1: entered allmulticast mode [ 144.865618][ T8015] bridge_slave_1: entered promiscuous mode [ 144.908912][ T8189] veth0_macvtap: left promiscuous mode [ 144.914775][ T8189] macvtap0: entered allmulticast mode [ 144.953280][ T8189] macvtap0: refused to change device tx_queue_len [ 144.953679][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 145.096015][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 145.115337][ T8198] bridge_slave_1: left allmulticast mode [ 145.124974][ T8198] bridge_slave_1: left promiscuous mode [ 145.151131][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.189394][ T8198] bridge_slave_0: left allmulticast mode [ 145.205346][ T8198] bridge_slave_0: left promiscuous mode [ 145.215706][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.234775][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 145.346566][ T8015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.429669][ T8015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.657603][ T8233] netlink: 'syz.2.583': attribute type 7 has an invalid length. [ 145.686048][ T8015] team0: Port device team_slave_0 added [ 145.721451][ T8231] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 145.724371][ T8015] team0: Port device team_slave_1 added [ 145.848399][ T5846] Bluetooth: hci2: command tx timeout [ 145.882749][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.889965][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.916098][ T8015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.943331][ T8245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.587'. [ 145.953528][ T8015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.970865][ T8015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.997126][ T8015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.033738][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.589'. [ 146.227047][ T8015] hsr_slave_0: entered promiscuous mode [ 146.249395][ T8015] hsr_slave_1: entered promiscuous mode [ 146.545115][ T8269] syz.4.592: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 146.578041][ T8269] CPU: 1 UID: 0 PID: 8269 Comm: syz.4.592 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 146.578071][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 146.578084][ T8269] Call Trace: [ 146.578092][ T8269] [ 146.578102][ T8269] dump_stack_lvl+0x241/0x360 [ 146.578136][ T8269] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.578161][ T8269] ? __pfx__printk+0x10/0x10 [ 146.578188][ T8269] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 146.578217][ T8269] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 146.578248][ T8269] warn_alloc+0x278/0x410 [ 146.578272][ T8269] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 146.578308][ T8269] ? __pfx_warn_alloc+0x10/0x10 [ 146.578331][ T8269] ? kasan_save_track+0x3f/0x80 [ 146.578352][ T8269] ? __kasan_kmalloc+0x98/0xb0 [ 146.578382][ T8269] ? xsk_setsockopt+0x4aa/0x810 [ 146.578413][ T8269] ? do_sock_setsockopt+0x3af/0x720 [ 146.578443][ T8269] ? __x64_sys_setsockopt+0x1ee/0x280 [ 146.578471][ T8269] ? do_syscall_64+0xf3/0x230 [ 146.578496][ T8269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.578537][ T8269] __vmalloc_node_range_noprof+0x126/0x1380 [ 146.578612][ T8269] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 146.578655][ T8269] ? __kasan_kmalloc+0x98/0xb0 [ 146.578685][ T8269] vmalloc_user_noprof+0x74/0x80 [ 146.578720][ T8269] ? xskq_create+0xb6/0x170 [ 146.578752][ T8269] xskq_create+0xb6/0x170 [ 146.578789][ T8269] xsk_init_queue+0xa1/0x100 [ 146.578825][ T8269] xsk_setsockopt+0x4aa/0x810 [ 146.578861][ T8269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 146.578894][ T8269] ? __pfx_aa_sk_perm+0x10/0x10 [ 146.578927][ T8269] ? aa_sock_opt_perm+0x79/0x120 [ 146.578964][ T8269] ? __pfx_xsk_setsockopt+0x10/0x10 [ 146.578994][ T8269] do_sock_setsockopt+0x3af/0x720 [ 146.579032][ T8269] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 146.579068][ T8269] ? __fget_files+0x395/0x410 [ 146.579097][ T8269] ? __fget_files+0x2a/0x410 [ 146.579136][ T8269] __x64_sys_setsockopt+0x1ee/0x280 [ 146.579174][ T8269] do_syscall_64+0xf3/0x230 [ 146.579201][ T8269] ? clear_bhb_loop+0x35/0x90 [ 146.579253][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.579281][ T8269] RIP: 0033:0x7fd98778cde9 [ 146.579300][ T8269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.579317][ T8269] RSP: 002b:00007fd9885ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 146.579340][ T8269] RAX: ffffffffffffffda RBX: 00007fd9879a6160 RCX: 00007fd98778cde9 [ 146.579356][ T8269] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 146.579368][ T8269] RBP: 00007fd98780e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 146.579381][ T8269] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.579394][ T8269] R13: 0000000000000000 R14: 00007fd9879a6160 R15: 00007ffecc579008 [ 146.579427][ T8269] [ 146.579471][ T8269] Mem-Info: [ 146.998156][ T8269] active_anon:5205 inactive_anon:0 isolated_anon:0 [ 146.998156][ T8269] active_file:1259 inactive_file:38326 isolated_file:0 [ 146.998156][ T8269] unevictable:768 dirty:71 writeback:0 [ 146.998156][ T8269] slab_reclaimable:10165 slab_unreclaimable:98438 [ 146.998156][ T8269] mapped:31716 shmem:1419 pagetables:878 [ 146.998156][ T8269] sec_pagetables:0 bounce:0 [ 146.998156][ T8269] kernel_misc_reclaimable:0 [ 146.998156][ T8269] free:1341290 free_pcp:279 free_cma:0 [ 147.063835][ T8269] Node 0 active_anon:20920kB inactive_anon:0kB active_file:5036kB inactive_file:153224kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127364kB dirty:284kB writeback:0kB shmem:4140kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11428kB pagetables:3512kB sec_pagetables:0kB all_unreclaimable? no [ 147.208819][ T8274] pim6reg: entered allmulticast mode [ 147.217600][ T8269] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 147.257891][ T8279] hsr_slave_0: left promiscuous mode [ 147.314331][ T8279] hsr_slave_1: left promiscuous mode [ 147.357804][ T8269] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.488780][ T8269] lowmem_reserve[]: 0 2490 2490 0 0 [ 147.494229][ T8269] Node 0 DMA32 free:1435516kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:21236kB inactive_anon:0kB active_file:5036kB inactive_file:152912kB unevictable:1536kB writepending:280kB present:3129332kB managed:2549872kB mlocked:0kB bounce:0kB free_pcp:2504kB local_pcp:776kB free_cma:0kB [ 147.617720][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 147.633044][ T8269] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 147.718333][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 147.725509][ T8269] Node 1 Normal free:3909848kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.817633][ T8269] lowmem_reserve[]: 0 0 0 0 0 [ 147.828172][ T8269] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 147.914975][ T8269] Node 0 DMA32: 2*4kB (ME) 0*8kB 7*16kB (M) 76*32kB (UME) 93*64kB (UME) 180*128kB (UME) 110*256kB (UM) 57*512kB (UME) 23*1024kB (UME) 8*2048kB (UME) 319*4096kB (M) = 1435448kB [ 147.938329][ T5846] Bluetooth: hci2: command tx timeout [ 147.961873][ T8269] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 147.975489][ T8269] Node 1 Normal: 192*4kB (UE) 61*8kB (UME) 35*16kB (UME) 182*32kB (UME) 86*64kB (UME) 33*128kB (UME) 11*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (UM) = 3909848kB [ 147.995067][ T8269] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.007167][ T8269] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.017384][ T8269] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.027810][ T8269] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.037161][ T8269] 41008 total pagecache pages [ 148.043066][ T8269] 0 pages in swap cache [ 148.047277][ T8269] Free swap = 124996kB [ 148.056857][ T8269] Total swap = 124996kB [ 148.061601][ T8269] 2097051 pages RAM [ 148.065463][ T8269] 0 pages HighMem/MovableOnly [ 148.077107][ T8269] 427861 pages reserved [ 148.081811][ T8269] 0 pages cma reserved [ 148.154630][ T8308] syzkaller0: entered allmulticast mode [ 149.019965][ T8359] lo speed is unknown, defaulting to 1000 [ 149.025877][ T8359] lo speed is unknown, defaulting to 1000 [ 149.069006][ T8359] lo speed is unknown, defaulting to 1000 [ 149.105035][ T8359] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 149.176891][ T8362] netlink: 'syz.2.610': attribute type 11 has an invalid length. [ 149.243745][ T8367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.300433][ T8359] lo speed is unknown, defaulting to 1000 [ 149.324594][ T8370] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 149.349250][ T8359] lo speed is unknown, defaulting to 1000 [ 149.368414][ T8370] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 149.383789][ T8373] netlink: 'syz.0.612': attribute type 10 has an invalid length. [ 149.386537][ T8359] lo speed is unknown, defaulting to 1000 [ 149.427838][ T8373] hsr0: entered promiscuous mode [ 149.480590][ T8373] .: (slave hsr0): The slave device specified does not support setting the MAC address [ 149.516381][ T8373] .: (slave hsr0): Error -95 calling set_mac_address [ 149.546482][ T8359] lo speed is unknown, defaulting to 1000 [ 149.588720][ T8359] lo speed is unknown, defaulting to 1000 [ 149.711092][ T8015] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.778604][ T8015] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.807790][ T8388] netlink: 'syz.0.615': attribute type 1 has an invalid length. [ 149.831221][ T8015] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.852217][ T8388] __nla_validate_parse: 2 callbacks suppressed [ 149.852238][ T8388] netlink: 244 bytes leftover after parsing attributes in process `syz.0.615'. [ 149.902277][ T8015] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.947839][ T8391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.616'. [ 150.055462][ T8391] netlink: 48 bytes leftover after parsing attributes in process `syz.4.616'. [ 150.280038][ T8406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.619'. [ 150.300235][ T8406] netlink: 64 bytes leftover after parsing attributes in process `syz.0.619'. [ 150.391344][ T8015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.482257][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.500091][ T8421] netlink: 36 bytes leftover after parsing attributes in process `syz.2.622'. [ 150.556219][ T8416] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 150.582439][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.589776][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.626193][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.633482][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.660888][ T8428] raw_sendmsg: syz.0.624 forgot to set AF_INET. Fix it! [ 150.949389][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.626'. [ 151.191439][ T8015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.321640][ T8455] netlink: 44 bytes leftover after parsing attributes in process `syz.2.631'. [ 151.375933][ T8015] veth0_vlan: entered promiscuous mode [ 151.408849][ T8015] veth1_vlan: entered promiscuous mode [ 151.505720][ T8015] veth0_macvtap: entered promiscuous mode [ 151.565620][ T8015] veth1_macvtap: entered promiscuous mode [ 151.606389][ T8471] netlink: 'syz.2.636': attribute type 32 has an invalid length. [ 151.622377][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.635488][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.643248][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 151.648611][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.713484][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.736569][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.772116][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.784797][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.803912][ T8471] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 151.815224][ T8471] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 151.828857][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.894990][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.919036][ T8015] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.960576][ T8015] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.979471][ T8015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.044415][ T8015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.056671][ T8015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.066185][ T8015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.076331][ T8015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.255259][ T8493] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 152.416992][ T8496] netlink: 84 bytes leftover after parsing attributes in process `syz.4.641'. [ 152.490477][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.521027][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.605692][ T8504] ip6gre1: entered allmulticast mode [ 152.787857][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.821316][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.215997][ T8528] tc_dump_action: action bad kind [ 153.840569][ T1329] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.133361][ T1329] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.368734][ T8585] sctp: [Deprecated]: syz.0.660 (pid 8585) Use of int in max_burst socket option. [ 154.368734][ T8585] Use struct sctp_assoc_value instead [ 154.373616][ T1329] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.673834][ T1329] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.078080][ T8611] dvmrp0: entered allmulticast mode [ 155.083860][ T1329] bridge_slave_1: left allmulticast mode [ 155.101258][ T1329] bridge_slave_1: left promiscuous mode [ 155.128580][ T1329] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.253988][ T1329] bridge_slave_0: left allmulticast mode [ 155.284111][ T1329] bridge_slave_0: left promiscuous mode [ 155.294722][ T8623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.316757][ T1329] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.358694][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 155.369343][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 155.378001][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 155.387200][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 155.397071][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 155.404704][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 155.873467][ T1329] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.892134][ T1329] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.906739][ T1329] bond0 (unregistering): Released all slaves [ 155.924284][ T8616] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 155.983273][ T8635] __nla_validate_parse: 6 callbacks suppressed [ 155.983297][ T8635] netlink: 40 bytes leftover after parsing attributes in process `syz.2.670'. [ 156.077337][ T8627] lo speed is unknown, defaulting to 1000 [ 156.373792][ T8653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.673'. [ 157.037680][ T1329] hsr_slave_0: left promiscuous mode [ 157.056685][ T1329] hsr_slave_1: left promiscuous mode [ 157.073545][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.085713][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.111564][ T1329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.141808][ T1329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.158751][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.683'. [ 157.171934][ T8691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.683'. [ 157.184306][ T8691] openvswitch: netlink: Flow actions attr not present in new flow. [ 157.248866][ T1329] veth1_macvtap: left promiscuous mode [ 157.254525][ T1329] veth0_macvtap: left promiscuous mode [ 157.285488][ T1329] veth1_vlan: left promiscuous mode [ 157.312657][ T1329] veth0_vlan: left promiscuous mode [ 157.448768][ T5857] Bluetooth: hci2: command tx timeout [ 157.921815][ T1329] team0 (unregistering): Port device team_slave_1 removed [ 157.971953][ T1329] team0 (unregistering): Port device team_slave_0 removed [ 158.472592][ T8692] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-xor(2) [ 158.491424][ T8696] [H: renamed from veth0_vlan (while UP) [ 158.693222][ T8709] netlink: 'syz.4.690': attribute type 21 has an invalid length. [ 158.701508][ T8709] netlink: 'syz.4.690': attribute type 6 has an invalid length. [ 158.710265][ T8709] netlink: 132 bytes leftover after parsing attributes in process `syz.4.690'. [ 158.782404][ T8703] netlink: 228 bytes leftover after parsing attributes in process `syz.3.686'. [ 158.885333][ T8627] chnl_net:caif_netlink_parms(): no params data found [ 159.048241][ T8719] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 159.164049][ T8731] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 159.259828][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 159.389335][ T8740] netlink: 39 bytes leftover after parsing attributes in process `syz.4.696'. [ 159.404364][ T8627] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.430660][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.469406][ T8627] bridge_slave_0: entered allmulticast mode [ 159.486910][ T8627] bridge_slave_0: entered promiscuous mode [ 159.489539][ T8749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.698'. [ 159.527930][ T5857] Bluetooth: hci2: command tx timeout [ 159.560994][ T8743] gre1: entered promiscuous mode [ 159.566292][ T8743] gre1: entered allmulticast mode [ 159.595632][ T8627] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.650298][ T8757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 159.662536][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.727061][ T8627] bridge_slave_1: entered allmulticast mode [ 159.755071][ T8627] bridge_slave_1: entered promiscuous mode [ 159.954066][ T8627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.987091][ T8627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.038706][ T8770] xfrm1: entered promiscuous mode [ 160.056539][ T8770] xfrm1: entered allmulticast mode [ 160.240397][ T8627] team0: Port device team_slave_0 added [ 160.283543][ T8627] team0: Port device team_slave_1 added [ 160.342866][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.358301][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.379535][ T8790] netlink: 'syz.0.710': attribute type 6 has an invalid length. [ 160.411628][ T8627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.426337][ T8790] netlink: 'syz.0.710': attribute type 5 has an invalid length. [ 160.435484][ T8627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.456572][ T8627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.515165][ T8627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.552541][ T8790] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.638011][ T5857] Bluetooth: hci0: command tx timeout [ 160.758108][ T8627] hsr_slave_0: entered promiscuous mode [ 160.780336][ T8627] hsr_slave_1: entered promiscuous mode [ 161.032523][ T8812] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 161.597710][ T5857] Bluetooth: hci2: command tx timeout [ 161.986746][ T8844] __nla_validate_parse: 6 callbacks suppressed [ 161.986769][ T8844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.722'. [ 162.006576][ T8840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.721'. [ 162.043006][ T8844] vxcan1: tx address claim with dest, not broadcast [ 162.108907][ T8627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 162.124525][ T8627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 162.170007][ T8627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 162.230830][ T8627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 162.381564][ T8856] netlink: 'syz.2.724': attribute type 29 has an invalid length. [ 162.545247][ T8875] netlink: 36 bytes leftover after parsing attributes in process `syz.0.723'. [ 162.595414][ T8865] netlink: 'syz.4.725': attribute type 12 has an invalid length. [ 162.614892][ T8865] netlink: 132 bytes leftover after parsing attributes in process `syz.4.725'. [ 162.771823][ T8627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.832018][ T8627] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.871420][ T1341] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.878832][ T1341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.919658][ T1341] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.927010][ T1341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.936240][ T8885] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 163.274758][ T8901] smc: net device bond0 applied user defined pnetid SYZ0 [ 163.616958][ T8627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.626745][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.735'. [ 163.688465][ T5846] Bluetooth: hci2: command tx timeout [ 163.862145][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 163.890943][ T8627] veth0_vlan: entered promiscuous mode [ 163.926586][ T8627] veth1_vlan: entered promiscuous mode [ 164.036144][ T8953] netlink: 8 bytes leftover after parsing attributes in process `syz.3.736'. [ 164.218740][ T8627] veth0_macvtap: entered promiscuous mode [ 164.275016][ T8627] veth1_macvtap: entered promiscuous mode [ 164.419245][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.457765][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.496767][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.535766][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.557671][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.579967][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.640575][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.689646][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.717672][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.753674][ T8627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.797846][ T8627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.820658][ T8627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.895238][ T8992] netlink: 104 bytes leftover after parsing attributes in process `syz.3.746'. [ 164.947937][ T8986] lo speed is unknown, defaulting to 1000 [ 164.950721][ T8627] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.983328][ T8627] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.008811][ T8627] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.024493][ T8627] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.134326][ T8995] netlink: 'syz.2.748': attribute type 1 has an invalid length. [ 165.177577][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 165.293740][ T8992] tipc: Enabling of bearer rejected, failed to enable media [ 165.535049][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.570261][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.665136][ T1329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.705328][ T1329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.758238][ T5846] Bluetooth: hci2: command 0x0405 tx timeout [ 165.834276][ T9014] netlink: 'syz.4.749': attribute type 11 has an invalid length. [ 165.898508][ T8990] tipc: Enabling of bearer rejected, already enabled [ 165.918896][ T9014] x_tables: duplicate underflow at hook 1 [ 165.926128][ T9014] netlink: 830 bytes leftover after parsing attributes in process `syz.4.749'. [ 165.949586][ T9018] C: renamed from team_slave_0 (while UP) [ 166.007642][ T9018] netlink: 'syz.3.752': attribute type 1 has an invalid length. [ 166.015504][ T9018] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 166.526209][ T9046] No such timeout policy "syz0" [ 166.830924][ T8950] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.946728][ T8950] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.073850][ T8950] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.160274][ T8950] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.300273][ T8950] bridge_slave_1: left allmulticast mode [ 167.307058][ T8950] bridge_slave_1: left promiscuous mode [ 167.321007][ T8950] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.406001][ T8950] bridge_slave_0: left allmulticast mode [ 167.437491][ T8950] bridge_slave_0: left promiscuous mode [ 167.462328][ T8950] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.500329][ T9086] netlink: 'syz.4.760': attribute type 4 has an invalid length. [ 167.638228][ T9091] netlink: 'syz.2.761': attribute type 1 has an invalid length. [ 167.766316][ T9096] __nla_validate_parse: 3 callbacks suppressed [ 167.766338][ T9096] netlink: 8 bytes leftover after parsing attributes in process `syz.3.762'. [ 167.840948][ T9100] openvswitch: netlink: Flow key attribute not present in set flow. [ 168.134763][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.147083][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.159552][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.169803][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.180465][ T5846] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.189066][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.464180][ T8950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.477318][ T8950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.489742][ T8950] bond0 (unregistering): Released all slaves [ 168.503316][ T9077] netlink: 'syz.4.760': attribute type 21 has an invalid length. [ 168.514897][ T9077] netlink: 128 bytes leftover after parsing attributes in process `syz.4.760'. [ 168.526292][ T9077] netlink: 'syz.4.760': attribute type 4 has an invalid length. [ 168.550799][ T9077] netlink: 'syz.4.760': attribute type 5 has an invalid length. [ 168.559831][ T9077] netlink: 3 bytes leftover after parsing attributes in process `syz.4.760'. [ 168.608442][ T9114] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 168.763229][ T9125] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 168.782063][ T9108] lo speed is unknown, defaulting to 1000 [ 168.951127][ T9130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.766'. [ 169.388110][ T9151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 169.392941][ T8950] hsr_slave_0: left promiscuous mode [ 169.410184][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 169.423081][ T8950] hsr_slave_1: left promiscuous mode [ 169.437119][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.446227][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'. [ 169.470837][ T8950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.478965][ T9158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 169.502566][ T8950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.511966][ T8950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.617860][ T8950] veth1_macvtap: left promiscuous mode [ 169.625705][ T8950] veth0_macvtap: left promiscuous mode [ 169.643274][ T8950] veth1_vlan: left promiscuous mode [ 169.659663][ T8950] veth0_vlan: left promiscuous mode [ 170.253832][ T5846] Bluetooth: hci2: command tx timeout [ 170.302430][ T8950] team0 (unregistering): Port device team_slave_1 removed [ 170.359265][ T8950] team0 (unregistering): Port device team_slave_0 removed [ 170.976033][ T9108] chnl_net:caif_netlink_parms(): no params data found [ 171.023239][ T9189] netlink: 'syz.0.779': attribute type 1 has an invalid length. [ 171.139617][ T9189] bond3: entered promiscuous mode [ 171.145248][ T9189] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.234091][ T9192] ipip0: entered promiscuous mode [ 171.241225][ T9192] ipip0: entered allmulticast mode [ 171.277162][ T9192] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.293866][ T9192] bond3: (slave ipip0): The slave device specified does not support setting the MAC address [ 171.305708][ T9192] bond3: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 171.331279][ T9192] bond3: (slave ipip0): making interface the new active one [ 171.351333][ T9192] bond3: (slave ipip0): Enslaving as an active interface with an up link [ 171.369782][ T9195] tipc: Started in network mode [ 171.396317][ T9195] tipc: Node identity , cluster identity 4711 [ 171.412767][ T9195] tipc: Failed to set node id, please configure manually [ 171.431965][ T9195] tipc: Enabling of bearer rejected, failed to enable media [ 171.786738][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.824493][ T9227] xt_bpf: check failed: parse error [ 171.829721][ T9108] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.837289][ T9108] bridge_slave_0: entered allmulticast mode [ 171.885978][ T9108] bridge_slave_0: entered promiscuous mode [ 171.922091][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.929009][ T9233] netlink: 44 bytes leftover after parsing attributes in process `syz.4.787'. [ 171.943507][ T9108] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.971906][ T9108] bridge_slave_1: entered allmulticast mode [ 171.993257][ T9108] bridge_slave_1: entered promiscuous mode [ 172.208907][ T9108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.265549][ T9108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.317572][ T5846] Bluetooth: hci2: command tx timeout [ 172.409643][ T9108] team0: Port device team_slave_0 added [ 172.443331][ T9108] team0: Port device team_slave_1 added [ 172.597324][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.626159][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.706737][ T9108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.748261][ T9108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.776875][ T9108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.808371][ T9108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.824177][ T9271] netlink: 5 bytes leftover after parsing attributes in process `syz.2.798'. [ 173.072052][ T9108] hsr_slave_0: entered promiscuous mode [ 173.109706][ T9108] hsr_slave_1: entered promiscuous mode [ 173.351922][ T9293] netlink: 'syz.3.806': attribute type 37 has an invalid length. [ 173.643873][ T9307] netlink: 'syz.4.809': attribute type 37 has an invalid length. [ 174.216949][ T9333] netlink: 60 bytes leftover after parsing attributes in process `syz.2.820'. [ 174.398263][ T5846] Bluetooth: hci2: command tx timeout [ 174.511835][ T9347] non-paged memory [ 174.515975][ T9347] list_del corruption, ffff888142bdab80->next is LIST_POISON1 (dead000000000100) [ 174.605823][ T9347] ------------[ cut here ]------------ [ 174.611725][ T9347] kernel BUG at lib/list_debug.c:58! [ 174.646211][ T9347] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 174.653241][ T9347] CPU: 0 UID: 0 PID: 9347 Comm: syz.2.826 Not tainted 6.14.0-rc2-syzkaller-00175-ga92c32287664 #0 [ 174.663882][ T9347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 174.673981][ T9347] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 [ 174.678741][ T9108] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 174.681041][ T9347] Code: 00 f0 80 8c 4c 89 fe e8 4f f1 2a fc 90 0f 0b 48 89 df e8 c4 eb 0a fd 48 c7 c7 60 f0 80 8c 4c 89 fe 48 89 da e8 32 f1 2a fc 90 <0f> 0b 48 89 df e8 a7 eb 0a fd 48 c7 c7 c0 f0 80 8c 4c 89 fe 48 89 [ 174.681062][ T9347] RSP: 0018:ffffc90003f6faf0 EFLAGS: 00010246 [ 174.681084][ T9347] RAX: 000000000000004e RBX: dead000000000100 RCX: 532915b207816600 [ 174.721734][ T9347] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 174.729762][ T9347] RBP: dffffc0000000000 R08: ffffffff81a1105c R09: 1ffff920007edef8 [ 174.737784][ T9347] R10: dffffc0000000000 R11: fffff520007edef9 R12: dead000000000122 [ 174.745824][ T9347] R13: dffffc0000000000 R14: dead000000000100 R15: ffff888142bdab80 [ 174.753867][ T9347] FS: 00007f3a877b36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 174.762813][ T9347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.769498][ T9347] CR2: 000000110c36fb43 CR3: 0000000054d7a000 CR4: 00000000003526f0 [ 174.777590][ T9347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 174.785587][ T9347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 174.793593][ T9347] Call Trace: [ 174.796875][ T9347] [ 174.799807][ T9347] ? __die_body+0x5f/0xb0 [ 174.804167][ T9347] ? die+0x9e/0xc0 [ 174.807921][ T9347] ? do_trap+0x15a/0x3a0 [ 174.812174][ T9347] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 174.818647][ T9347] ? do_error_trap+0x1dc/0x2c0 [ 174.823614][ T9347] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 174.830053][ T9347] ? __pfx_do_error_trap+0x10/0x10 [ 174.835185][ T9347] ? handle_invalid_op+0x34/0x40 [ 174.840142][ T9347] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 174.846590][ T9347] ? exc_invalid_op+0x38/0x50 [ 174.851287][ T9347] ? asm_exc_invalid_op+0x1a/0x20 [ 174.856333][ T9347] ? __wake_up_klogd+0xcc/0x110 [ 174.861203][ T9347] ? __list_del_entry_valid_or_report+0x10f/0x190 [ 174.867671][ T9347] mgmt_pending_remove+0x26/0x1a0 [ 174.872801][ T9347] mgmt_pending_foreach+0xd1/0x130 [ 174.877923][ T9347] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 174.883311][ T9347] mgmt_index_removed+0x133/0x390 [ 174.888355][ T9347] ? __pfx_mgmt_index_removed+0x10/0x10 [ 174.894004][ T9347] ? apparmor_capable+0x13b/0x1b0 [ 174.899042][ T9347] ? _raw_read_unlock+0x28/0x50 [ 174.903905][ T9347] hci_sock_bind+0xd70/0x12d0 [ 174.908606][ T9347] ? __pfx_hci_sock_bind+0x10/0x10 [ 174.913743][ T9347] ? __might_fault+0xc6/0x120 [ 174.918476][ T9347] __sys_bind+0x1e4/0x290 [ 174.922832][ T9347] ? __pfx___sys_bind+0x10/0x10 [ 174.927709][ T9347] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 174.934074][ T9347] ? do_syscall_64+0x100/0x230 [ 174.938860][ T9347] __x64_sys_bind+0x7a/0x90 [ 174.943388][ T9347] do_syscall_64+0xf3/0x230 [ 174.947924][ T9347] ? clear_bhb_loop+0x35/0x90 [ 174.952719][ T9347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.958644][ T9347] RIP: 0033:0x7f3a8698cde9 [ 174.963079][ T9347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.982705][ T9347] RSP: 002b:00007f3a877b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 174.991137][ T9347] RAX: ffffffffffffffda RBX: 00007f3a86ba6080 RCX: 00007f3a8698cde9 [ 174.999134][ T9347] RDX: 0000000000000006 RSI: 0000400000000040 RDI: 0000000000000005 [ 175.007130][ T9347] RBP: 00007f3a86a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.015116][ T9347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.023102][ T9347] R13: 0000000000000000 R14: 00007f3a86ba6080 R15: 00007ffe484a5208 [ 175.031096][ T9347] [ 175.034121][ T9347] Modules linked in: [ 175.038954][ T9347] ---[ end trace 0000000000000000 ]--- [ 175.054783][ T9347] RIP: 0010:__list_del_entry_valid_or_report+0x10f/0x190 [ 175.062231][ T9347] Code: 00 f0 80 8c 4c 89 fe e8 4f f1 2a fc 90 0f 0b 48 89 df e8 c4 eb 0a fd 48 c7 c7 60 f0 80 8c 4c 89 fe 48 89 da e8 32 f1 2a fc 90 <0f> 0b 48 89 df e8 a7 eb 0a fd 48 c7 c7 c0 f0 80 8c 4c 89 fe 48 89 [ 175.104497][ T9347] RSP: 0018:ffffc90003f6faf0 EFLAGS: 00010246 [ 175.111887][ T9347] RAX: 000000000000004e RBX: dead000000000100 RCX: 532915b207816600 [ 175.128701][ T9108] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 175.148891][ T9347] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 175.164690][ T9347] RBP: dffffc0000000000 R08: ffffffff81a1105c R09: 1ffff920007edef8 [ 175.165133][ T9108] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 175.183456][ T9347] R10: dffffc0000000000 R11: fffff520007edef9 R12: dead000000000122 [ 175.194216][ T9108] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 175.200683][ T9347] R13: dffffc0000000000 R14: dead000000000100 R15: ffff888142bdab80 [ 175.209577][ T9347] FS: 00007f3a877b36c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 175.221609][ T9347] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 175.229034][ T9347] CR2: 00007f99fcd2f784 CR3: 0000000054d7a000 CR4: 00000000003526f0 [ 175.237236][ T9347] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 175.248019][ T9347] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 175.271683][ T9347] Kernel panic - not syncing: Fatal exception [ 175.278159][ T9347] Kernel Offset: disabled [ 175.282553][ T9347] Rebooting in 86400 seconds..