last executing test programs: 3.042523803s ago: executing program 3 (id=433): epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) 2.34783581s ago: executing program 3 (id=445): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 2.324845936s ago: executing program 1 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000004b00), r0) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000004cc0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000fedbdf250c00000040000580080001"], 0x54}, 0x1, 0x0, 0x0, 0x850}, 0x20000) 2.165148377s ago: executing program 3 (id=449): r0 = socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 2.058565161s ago: executing program 1 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r3, 0x10ada85e65c25359, 0x0, 0x8000000, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}]}]}]}, 0x38}}, 0x0) 1.927376111s ago: executing program 3 (id=455): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000002cc0)=[{{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f00000007c0)=[{&(0x7f00000004c0)=""/216, 0xd8}, {&(0x7f0000000040)=""/29, 0x1d}, {&(0x7f00000005c0)=""/201, 0xc9}, {&(0x7f00000006c0)=""/205, 0xcd}, {&(0x7f0000000180)=""/58, 0x3a}, {&(0x7f0000000bc0)=""/4093, 0xffd}], 0x6}}, {{&(0x7f0000000840)=@abs, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000900)=""/180, 0xb4}, {&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000000a00)=""/163, 0xa3}, {&(0x7f0000002bc0)=""/67, 0x43}], 0x4, &(0x7f0000002c40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}}], 0x2, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc703c, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.877467009s ago: executing program 1 (id=457): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.619311272s ago: executing program 1 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000000), &(0x7f0000000200)}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x2f, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3c, 0x2, [@TCA_BASIC_EMATCHES={0x38, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x2c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xe, 0x1}, {0x9, 0x8, 0x2549677028661870}}}]}}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 1.410993093s ago: executing program 1 (id=465): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8, 0xb, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 987.026277ms ago: executing program 3 (id=473): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000", 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180), &(0x7f0000000300)=0x8) 819.47583ms ago: executing program 0 (id=476): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x800) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) 812.78894ms ago: executing program 4 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x8, 0x0, 0xfffffffd}]}, 0x10) 756.729871ms ago: executing program 2 (id=478): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 699.486796ms ago: executing program 4 (id=479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x88}}, 0x0) 668.834545ms ago: executing program 2 (id=480): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 660.400306ms ago: executing program 0 (id=481): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f00000014c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 559.484465ms ago: executing program 4 (id=482): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000740)={0x2, 0x8, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f0000001d40)=[@zcopy_cookie={0x18}, @cswp={0x58, 0x114, 0x7, {{0x6, 0x100}, 0x0, 0x0, 0x8000000000000000, 0xa, 0x5, 0x3, 0x43, 0x1}}], 0x70, 0x8004}, 0x0) 543.053206ms ago: executing program 0 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 504.881167ms ago: executing program 2 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x3, 0x10004, 0x5, 0x0, 0xffffffffffffffff, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 443.512132ms ago: executing program 4 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) 434.757013ms ago: executing program 1 (id=486): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xd8, &(0x7f0000000000), 0x0) 358.658872ms ago: executing program 4 (id=487): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004000}, 0x10000000) 358.087573ms ago: executing program 2 (id=488): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x2, 0x4e1f, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000700000001890704"], 0x18}, 0x40040) 255.533301ms ago: executing program 0 (id=489): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, 0x0, 0x30004004) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 255.236221ms ago: executing program 2 (id=490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="fd8d00000000000000000200000008000300", @ANYRES32, @ANYBLOB="0a0009000180c2000000fdff08000b"], 0x30}}, 0x0) 174.96446ms ago: executing program 4 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 166.075625ms ago: executing program 0 (id=492): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1fd9a071a", 0x5, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 98.094345ms ago: executing program 2 (id=493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="38000000031401002dbd7000ffdbdf2509000200737d7a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) 39.531634ms ago: executing program 3 (id=494): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 0s ago: executing program 0 (id=495): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x50, 0x12, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, {0x0, 0x4e22, [0x0, 0x6], [], 0x0, [0x1, 0x3]}}, [@INET_DIAG_REQ_BYTECODE={0x4, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20004010) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.3' (ED25519) to the list of known hosts. [ 52.108218][ T5821] cgroup: Unknown subsys name 'net' [ 52.254751][ T5821] cgroup: Unknown subsys name 'cpuset' [ 52.262446][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 53.521957][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.319941][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.330872][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.342695][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.350453][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.373302][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.380925][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.389850][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.393356][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.398219][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.405827][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.411569][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.418504][ T5836] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.426618][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.443224][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.453802][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.464886][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.464986][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.472377][ T5844] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.487005][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.487073][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.501803][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.511440][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.522423][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.530254][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.539274][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.547489][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.556180][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.582813][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.592394][ T5834] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.604700][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 57.950541][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 58.022294][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 58.038790][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 58.099285][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.107441][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.114837][ T5831] bridge_slave_0: entered allmulticast mode [ 58.124158][ T5831] bridge_slave_0: entered promiscuous mode [ 58.138033][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 58.164260][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.171348][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.178521][ T5831] bridge_slave_1: entered allmulticast mode [ 58.185867][ T5831] bridge_slave_1: entered promiscuous mode [ 58.203904][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 58.264479][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.289594][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.299098][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.307113][ T5835] bridge_slave_0: entered allmulticast mode [ 58.316048][ T5835] bridge_slave_0: entered promiscuous mode [ 58.327774][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.363168][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.370292][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.379911][ T5835] bridge_slave_1: entered allmulticast mode [ 58.387157][ T5835] bridge_slave_1: entered promiscuous mode [ 58.434734][ T5831] team0: Port device team_slave_0 added [ 58.440684][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.448727][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.456376][ T5843] bridge_slave_0: entered allmulticast mode [ 58.464058][ T5843] bridge_slave_0: entered promiscuous mode [ 58.499293][ T5831] team0: Port device team_slave_1 added [ 58.507651][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.514909][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.522074][ T5843] bridge_slave_1: entered allmulticast mode [ 58.528555][ T5843] bridge_slave_1: entered promiscuous mode [ 58.537020][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.556461][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.563645][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.570811][ T5838] bridge_slave_0: entered allmulticast mode [ 58.577566][ T5838] bridge_slave_0: entered promiscuous mode [ 58.620655][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.638331][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.645538][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.653339][ T5838] bridge_slave_1: entered allmulticast mode [ 58.659906][ T5838] bridge_slave_1: entered promiscuous mode [ 58.681458][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.688455][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.714550][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.746029][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.753489][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.760585][ T5848] bridge_slave_0: entered allmulticast mode [ 58.767425][ T5848] bridge_slave_0: entered promiscuous mode [ 58.775365][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.782984][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.790058][ T5848] bridge_slave_1: entered allmulticast mode [ 58.796780][ T5848] bridge_slave_1: entered promiscuous mode [ 58.803698][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.810652][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.836784][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.849608][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.861023][ T5835] team0: Port device team_slave_0 added [ 58.868936][ T5835] team0: Port device team_slave_1 added [ 58.899741][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.920616][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.931468][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.950735][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.006911][ T5831] hsr_slave_0: entered promiscuous mode [ 59.013633][ T5831] hsr_slave_1: entered promiscuous mode [ 59.030082][ T5843] team0: Port device team_slave_0 added [ 59.037795][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.047803][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.054822][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.081181][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.093656][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.100616][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.126859][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.140819][ T5838] team0: Port device team_slave_0 added [ 59.149047][ T5838] team0: Port device team_slave_1 added [ 59.166051][ T5843] team0: Port device team_slave_1 added [ 59.226626][ T5848] team0: Port device team_slave_0 added [ 59.240233][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.247471][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.273614][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.285953][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.293104][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.319183][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.330902][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.338027][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.363951][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.377013][ T5848] team0: Port device team_slave_1 added [ 59.408886][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.415861][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.442113][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.463317][ T5842] Bluetooth: hci1: command tx timeout [ 59.510109][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.520624][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.546973][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.551714][ T5842] Bluetooth: hci3: command tx timeout [ 59.559776][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.563179][ T5834] Bluetooth: hci0: command tx timeout [ 59.570205][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.601585][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.615669][ T5835] hsr_slave_0: entered promiscuous mode [ 59.621742][ T5835] hsr_slave_1: entered promiscuous mode [ 59.627400][ T5834] Bluetooth: hci2: command tx timeout [ 59.632029][ T5834] Bluetooth: hci4: command tx timeout [ 59.633359][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.646241][ T5835] Cannot create hsr debugfs directory [ 59.687029][ T5843] hsr_slave_0: entered promiscuous mode [ 59.695905][ T5843] hsr_slave_1: entered promiscuous mode [ 59.701698][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.709433][ T5843] Cannot create hsr debugfs directory [ 59.729442][ T5838] hsr_slave_0: entered promiscuous mode [ 59.735475][ T5838] hsr_slave_1: entered promiscuous mode [ 59.741344][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.749011][ T5838] Cannot create hsr debugfs directory [ 59.790561][ T5848] hsr_slave_0: entered promiscuous mode [ 59.796942][ T5848] hsr_slave_1: entered promiscuous mode [ 59.803197][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.810755][ T5848] Cannot create hsr debugfs directory [ 60.009868][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 60.039174][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 60.063312][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.075711][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.187984][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.200859][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.210300][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.229576][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.269936][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 60.279763][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 60.289765][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 60.319173][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 60.376378][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.385993][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.398889][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.415266][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.445577][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 60.470388][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.493684][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.519443][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.526702][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.539300][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.546434][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.555494][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.567646][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.590946][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.678567][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.760470][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.769258][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.795738][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.802840][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.813842][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.821540][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.905105][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.940290][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.947441][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.960383][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.967462][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.980655][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.008228][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.026415][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.048483][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.079353][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.106198][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.113331][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.124757][ T1163] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.131917][ T1163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.145838][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.177145][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.184278][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.196984][ T1163] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.204115][ T1163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.218387][ T5831] veth0_vlan: entered promiscuous mode [ 61.290235][ T5831] veth1_vlan: entered promiscuous mode [ 61.345399][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.429927][ T5831] veth0_macvtap: entered promiscuous mode [ 61.448231][ T5831] veth1_macvtap: entered promiscuous mode [ 61.512309][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.549691][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.556799][ T5834] Bluetooth: hci1: command tx timeout [ 61.568050][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.611487][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.628545][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.638219][ T5834] Bluetooth: hci0: command tx timeout [ 61.638572][ T5842] Bluetooth: hci3: command tx timeout [ 61.644006][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.658071][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.702335][ T5842] Bluetooth: hci4: command tx timeout [ 61.702655][ T5834] Bluetooth: hci2: command tx timeout [ 61.777930][ T5835] veth0_vlan: entered promiscuous mode [ 61.793406][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.829747][ T5835] veth1_vlan: entered promiscuous mode [ 61.907023][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.933084][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.943103][ T5835] veth0_macvtap: entered promiscuous mode [ 61.969969][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.981559][ T5835] veth1_macvtap: entered promiscuous mode [ 62.002976][ T5848] veth0_vlan: entered promiscuous mode [ 62.028813][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.042071][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.053496][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.062771][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.070605][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.072936][ T5838] veth0_vlan: entered promiscuous mode [ 62.088519][ T5848] veth1_vlan: entered promiscuous mode [ 62.097847][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.110157][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.124335][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.136284][ T5838] veth1_vlan: entered promiscuous mode [ 62.171936][ T5843] veth0_vlan: entered promiscuous mode [ 62.196508][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.210084][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.219305][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.228242][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.253846][ T5843] veth1_vlan: entered promiscuous mode [ 62.263958][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 62.341254][ T5848] veth0_macvtap: entered promiscuous mode [ 62.386595][ T5848] veth1_macvtap: entered promiscuous mode [ 62.409339][ T5843] veth0_macvtap: entered promiscuous mode [ 62.421098][ T5838] veth0_macvtap: entered promiscuous mode [ 62.430051][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.441817][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 62.457042][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.469130][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.479320][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.490573][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.505059][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.515103][ T5838] veth1_macvtap: entered promiscuous mode [ 62.524867][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.543128][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.552457][ T5843] veth1_macvtap: entered promiscuous mode [ 62.569093][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.590879][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.600922][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.612216][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.623341][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.638280][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.649191][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.665913][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.676716][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.687046][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.697752][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.709299][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.734217][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.746363][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.757152][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.769024][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.784589][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.795345][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.806561][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.830616][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.840623][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.851008][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.861045][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.871501][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.882935][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.892986][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.903875][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.921729][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.932753][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.944116][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.954831][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.968323][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.977872][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.978627][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.996276][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008160][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.017209][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.035880][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.048379][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.049720][ T5922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.065953][ T5922] bond0: (slave bond1): Enslaving as an active interface with an up link [ 63.090746][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.101791][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.128535][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.139165][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.149336][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.159879][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.169969][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.180526][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.191474][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.219678][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.230683][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.239478][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.248447][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.402421][ T5928] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 63.424500][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.435590][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.526404][ T1085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.570933][ T1085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.622179][ T5834] Bluetooth: hci1: command tx timeout [ 63.650856][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.688861][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.702023][ T5834] Bluetooth: hci3: command tx timeout [ 63.702592][ T5842] Bluetooth: hci0: command tx timeout [ 63.741768][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.762292][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.782424][ T5842] Bluetooth: hci2: command tx timeout [ 63.782994][ T5834] Bluetooth: hci4: command tx timeout [ 63.830601][ T3577] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.856625][ T3577] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.959283][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.980451][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.256817][ T5952] No such timeout policy "syz0" [ 64.434715][ T5957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19'. [ 64.998057][ T5976] netlink: 108 bytes leftover after parsing attributes in process `syz.1.27'. [ 65.043462][ T5976] netlink: 108 bytes leftover after parsing attributes in process `syz.1.27'. [ 65.058859][ T5976] netlink: 84 bytes leftover after parsing attributes in process `syz.1.27'. [ 65.257222][ T5986] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 65.487349][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 65.504432][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 65.525751][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.32'. [ 65.536658][ T5991] netlink: 28 bytes leftover after parsing attributes in process `syz.4.34'. [ 65.702823][ T5834] Bluetooth: hci1: command tx timeout [ 65.782196][ T5834] Bluetooth: hci0: command tx timeout [ 65.788256][ T5842] Bluetooth: hci3: command tx timeout [ 65.862248][ T5834] Bluetooth: hci2: command tx timeout [ 65.867741][ T5842] Bluetooth: hci4: command tx timeout [ 66.520713][ T6032] bond1: entered promiscuous mode [ 66.531125][ T6032] bond1: entered allmulticast mode [ 66.549362][ T6032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.565395][ T6037] delete_channel: no stack [ 67.009743][ T6032] bond1 (unregistering): Released all slaves [ 67.032306][ T974] IPVS: starting estimator thread 0... [ 67.132578][ T6054] IPVS: using max 22 ests per chain, 52800 per kthread [ 67.328465][ T6065] tipc: Can't bind to reserved service type 2 [ 67.610170][ T6052] infiniband syz2: set active [ 67.652930][ T6052] infiniband syz2: added veth0_to_bond [ 67.803105][ T6052] RDS/IB: syz2: added [ 67.872433][ T6052] smc: adding ib device syz2 with port count 1 [ 67.958607][ T6052] smc: ib device syz2 port 1 has pnetid [ 68.266020][ T6098] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 68.372316][ T6103] __nla_validate_parse: 3 callbacks suppressed [ 68.372333][ T6103] netlink: 16 bytes leftover after parsing attributes in process `syz.3.79'. [ 69.843324][ T6144] netlink: 8 bytes leftover after parsing attributes in process `syz.2.98'. [ 70.334355][ T6158] netlink: 4 bytes leftover after parsing attributes in process `syz.4.105'. [ 70.434150][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 70.440781][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.448691][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.456588][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.464497][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.472349][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.480205][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.488051][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.495960][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.503797][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.511660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.519514][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.527403][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.535270][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.543160][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.550980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.558898][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.566747][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.574645][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.582481][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.590347][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.598207][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.606096][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.613958][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.621829][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.629684][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.637562][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.645401][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.653328][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.661153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.669058][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.676906][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.684818][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.692656][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.700524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.708384][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.716279][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.724134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.732025][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.739846][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.747739][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.755575][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.763456][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.771274][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.779169][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.787002][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.794890][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.802740][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.810594][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.818432][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.826325][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.834156][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.842029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.849825][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.857713][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.865545][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.873477][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.881296][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.889200][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.897046][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.904904][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.912752][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.920593][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.928419][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.936277][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.944126][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.951993][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.959785][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.967659][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.975488][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.983369][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 70.991183][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 70.999108][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.006954][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.014885][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.022729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.030594][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.038443][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.046347][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.054212][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.062114][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.069929][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.077836][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.085677][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.093587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.101402][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.109304][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.117147][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.125053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.132894][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.141290][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.149149][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.157053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.164914][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.172801][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.180616][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.188529][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.196393][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.204293][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 71.212144][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 71.550019][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.556758][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.299098][ T6203] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'. [ 72.336889][ T6203] netem: unknown loss type 13 [ 72.341753][ T6203] netem: change failed [ 72.855899][ T6192] ip6t_rpfilter: unknown options [ 72.862472][ T6222] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 73.490842][ T6234] netlink: 268 bytes leftover after parsing attributes in process `syz.0.142'. [ 73.562905][ T6234] unsupported nla_type 65024 [ 73.603674][ T6120] Set syz1 is full, maxelem 65536 reached [ 73.644671][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 73.684433][ T6242] netlink: 3 bytes leftover after parsing attributes in process `syz.1.146'. [ 73.712277][ T6240] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 73.733875][ T6242] 0ªX¹¦À: renamed from caif0 [ 73.754342][ T6242] 0ªX¹¦À: entered allmulticast mode [ 73.762695][ T6242] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 75.407670][ T6275] syz.2.160: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 75.471952][ T6275] CPU: 1 UID: 0 PID: 6275 Comm: syz.2.160 Not tainted 6.14.0-rc1-syzkaller-00130-ge589adf5b70c #0 [ 75.471976][ T6275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 75.471990][ T6275] Call Trace: [ 75.472001][ T6275] [ 75.472008][ T6275] dump_stack_lvl+0x241/0x360 [ 75.472042][ T6275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 75.472059][ T6275] ? __pfx__printk+0x10/0x10 [ 75.472087][ T6275] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 75.472106][ T6275] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 75.472126][ T6275] warn_alloc+0x278/0x410 [ 75.472152][ T6275] ? __pfx_warn_alloc+0x10/0x10 [ 75.472178][ T6275] ? translate_table+0x174/0x2260 [ 75.472196][ T6275] ? __get_vm_area_node+0x1c8/0x2d0 [ 75.472215][ T6275] ? __get_vm_area_node+0x25c/0x2d0 [ 75.472239][ T6275] __vmalloc_node_range_noprof+0x62f/0x1380 [ 75.472283][ T6275] ? rcu_is_watching+0x15/0xb0 [ 75.472299][ T6275] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 75.472320][ T6275] ? rcu_is_watching+0x15/0xb0 [ 75.472337][ T6275] ? trace_kmalloc+0x1f/0xd0 [ 75.472352][ T6275] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 75.472368][ T6275] ? __kvmalloc_node_noprof+0x72/0x190 [ 75.472391][ T6275] __kvmalloc_node_noprof+0x142/0x190 [ 75.472410][ T6275] ? translate_table+0x174/0x2260 [ 75.472429][ T6275] translate_table+0x174/0x2260 [ 75.472468][ T6275] ? __pfx_translate_table+0x10/0x10 [ 75.472488][ T6275] ? __might_fault+0xaa/0x120 [ 75.472510][ T6275] ? __pfx_lock_release+0x10/0x10 [ 75.472538][ T6275] ? __virt_addr_valid+0x183/0x530 [ 75.472562][ T6275] ? __might_fault+0xaa/0x120 [ 75.472581][ T6275] ? __might_fault+0xc6/0x120 [ 75.472605][ T6275] ? copy_from_sockptr_offset+0x6b/0xb0 [ 75.472626][ T6275] do_ipt_set_ctl+0xe3d/0x1250 [ 75.472652][ T6275] ? nf_setsockopt+0x240/0x2c0 [ 75.472668][ T6275] ? do_ip_setsockopt+0x1f44/0x3cd0 [ 75.472688][ T6275] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 75.472707][ T6275] ? rcu_is_watching+0x15/0xb0 [ 75.472725][ T6275] ? trace_contention_end+0x3c/0x120 [ 75.472751][ T6275] ? __mutex_unlock_slowpath+0x227/0x800 [ 75.472784][ T6275] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 75.472808][ T6275] ? __pfx___mutex_lock+0x10/0x10 [ 75.472836][ T6275] nf_setsockopt+0x295/0x2c0 [ 75.472856][ T6275] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 75.472881][ T6275] smc_setsockopt+0x275/0xe50 [ 75.472909][ T6275] ? __pfx_smc_setsockopt+0x10/0x10 [ 75.472933][ T6275] ? aa_sock_opt_perm+0x79/0x120 [ 75.472960][ T6275] ? __pfx_smc_setsockopt+0x10/0x10 [ 75.472981][ T6275] do_sock_setsockopt+0x3af/0x720 [ 75.473020][ T6275] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 75.473050][ T6275] ? __fget_files+0x395/0x410 [ 75.473067][ T6275] ? __fget_files+0x2a/0x410 [ 75.473090][ T6275] __x64_sys_setsockopt+0x1ee/0x280 [ 75.473118][ T6275] do_syscall_64+0xf3/0x230 [ 75.473139][ T6275] ? clear_bhb_loop+0x35/0x90 [ 75.473163][ T6275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.473185][ T6275] RIP: 0033:0x7f487b58cde9 [ 75.473208][ T6275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.473221][ T6275] RSP: 002b:00007f48793f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 75.473240][ T6275] RAX: ffffffffffffffda RBX: 00007f487b7a5fa0 RCX: 00007f487b58cde9 [ 75.473250][ T6275] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003 [ 75.473259][ T6275] RBP: 00007f487b60e2a0 R08: 0000000000000298 R09: 0000000000000000 [ 75.473267][ T6275] R10: 0000400000000300 R11: 0000000000000246 R12: 0000000000000000 [ 75.473275][ T6275] R13: 0000000000000000 R14: 00007f487b7a5fa0 R15: 00007fff9be27f18 [ 75.473295][ T6275] [ 75.473306][ T6275] Mem-Info: [ 75.908482][ T6275] active_anon:4805 inactive_anon:0 isolated_anon:0 [ 75.908482][ T6275] active_file:1053 inactive_file:38299 isolated_file:0 [ 75.908482][ T6275] unevictable:768 dirty:1434 writeback:0 [ 75.908482][ T6275] slab_reclaimable:9689 slab_unreclaimable:101664 [ 75.908482][ T6275] mapped:28400 shmem:1429 pagetables:843 [ 75.908482][ T6275] sec_pagetables:0 bounce:0 [ 75.908482][ T6275] kernel_misc_reclaimable:0 [ 75.908482][ T6275] free:1327075 free_pcp:262 free_cma:0 [ 75.956508][ T6275] Node 0 active_anon:19220kB inactive_anon:0kB active_file:4212kB inactive_file:153120kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113600kB dirty:5724kB writeback:0kB shmem:4180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10872kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no [ 76.002803][ T6275] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:12kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 76.048312][ T6275] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 76.118738][ T6275] lowmem_reserve[]: 0 2491 2491 0 0 [ 76.138309][ T6275] Node 0 DMA32 free:1392812kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:19048kB inactive_anon:0kB active_file:4212kB inactive_file:152540kB unevictable:1536kB writepending:5720kB present:3129332kB managed:2551084kB mlocked:0kB bounce:0kB free_pcp:1008kB local_pcp:652kB free_cma:0kB [ 76.179533][ T6275] lowmem_reserve[]: 0 0 0 0 0 [ 76.184935][ T6275] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 76.252095][ T6275] lowmem_reserve[]: 0 0 0 0 0 [ 76.256885][ T6275] Node 1 Normal free:3900584kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:12kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:96kB free_cma:0kB [ 76.272513][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 76.331935][ T6275] lowmem_reserve[]: 0 0 0 0 0 [ 76.346945][ T6275] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 76.388053][ T6275] Node 0 DMA32: 14*4kB (UE) 30*8kB (UE) 24*16kB (UM) 74*32kB (UME) 28*64kB (UME) 17*128kB (UME) 14*256kB (UME) 8*512kB (UME) 5*1024kB (UM) 0*2048kB 335*4096kB (M) = 1391976kB [ 76.430439][ T6275] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 76.465570][ T6336] netlink: 308 bytes leftover after parsing attributes in process `syz.3.188'. [ 76.493702][ T6275] Node 1 Normal: 234*4kB (UE) 68*8kB (UME) 36*16kB (UME) 239*32kB (UME) 101*64kB (UME) 37*128kB (UME) 13*256kB (UME) 11*512kB (UME) 4*1024kB (UME) 0*2048kB 944*4096kB (M) = 3900584kB [ 76.561969][ T6275] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.571568][ T6275] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.639201][ T6275] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 76.681955][ T6275] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 76.682999][ T25] cfg80211: failed to load regulatory.db [ 76.715068][ T6275] 40783 total pagecache pages [ 76.719803][ T6275] 0 pages in swap cache [ 76.732589][ T6342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.191'. [ 76.769754][ T6342] openvswitch: netlink: Message has 8 unknown bytes. [ 76.777223][ T6275] Free swap = 124996kB [ 76.792071][ T6275] Total swap = 124996kB [ 76.796272][ T6275] 2097051 pages RAM [ 76.800089][ T6275] 0 pages HighMem/MovableOnly [ 76.857201][ T6275] 427494 pages reserved [ 76.861406][ T6275] 0 pages cma reserved [ 77.215188][ T6360] netlink: 'syz.1.199': attribute type 3 has an invalid length. [ 77.219117][ T6359] syz.4.200 uses obsolete (PF_INET,SOCK_PACKET) [ 77.626325][ T6361] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.634692][ T6361] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.301329][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.317970][ T6361] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.470768][ T6361] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.480254][ T6361] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.490609][ T6361] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.499946][ T6361] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.066212][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz.1.213'. [ 79.104776][ T6390] IPVS: Unknown mcast interface: vcan0 [ 79.433825][ T6404] netlink: 4 bytes leftover after parsing attributes in process `syz.4.216'. [ 79.819689][ T29] audit: type=1107 audit(1739406570.751:2): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 80.093815][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 80.482222][ T6440] sch_tbf: burst 9895 is lower than device lo mtu (65550) ! [ 80.602572][ T6443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.722641][ T6443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.019942][ T6443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.214899][ T6443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.686569][ T6443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.743511][ T6443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.819227][ T6443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.874138][ T6443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.069621][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 82.488780][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 82.708628][ T6492] netlink: 'syz.0.257': attribute type 13 has an invalid length. [ 82.748253][ T6495] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 82.755296][ T6495] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 82.786949][ T6495] hsr_slave_0: left promiscuous mode [ 82.822258][ T6495] hsr_slave_1: left promiscuous mode [ 82.923557][ T6500] netlink: 'syz.0.261': attribute type 4 has an invalid length. [ 82.951514][ T6500] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.261'. [ 83.424575][ T6521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.269'. [ 83.485525][ T6523] Cannot find del_set index 1 as target [ 83.799133][ T6532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 83.829309][ T6532] openvswitch: netlink: Message has 8 unknown bytes. [ 84.521962][ T6558] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.598821][ T6558] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.627827][ T6560] ipvlan1: entered promiscuous mode [ 84.634430][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.288'. [ 84.665493][ T6560] ipvlan1 (unregistering): left promiscuous mode [ 84.685819][ T6558] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.750919][ T6558] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.966375][ T6572] wireguard0: entered promiscuous mode [ 84.979539][ T6572] wireguard0: entered allmulticast mode [ 85.445964][ T6558] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.471654][ T6558] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.496047][ T6558] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.521001][ T6558] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.724039][ T6583] xt_hashlimit: max too large, truncated to 1048576 [ 85.933694][ T6596] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 2, id = 0 [ 86.899438][ T6631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.314'. [ 87.979269][ T6670] IPVS: Unknown mcast interface: syzkaller1 [ 88.441822][ T6679] netlink: 292 bytes leftover after parsing attributes in process `syz.2.337'. [ 89.710134][ T6712] netlink: 60 bytes leftover after parsing attributes in process `syz.1.353'. [ 89.730035][ T6712] unsupported nlmsg_type 40 [ 90.223277][ T6723] netlink: 32 bytes leftover after parsing attributes in process `syz.3.358'. [ 90.898746][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.2.368'. [ 90.926126][ T6744] openvswitch: netlink: Message has 8 unknown bytes. [ 91.236824][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.374'. [ 91.647554][ T6757] netlink: 40 bytes leftover after parsing attributes in process `syz.1.374'. [ 92.075332][ T6779] netlink: 76 bytes leftover after parsing attributes in process `syz.3.384'. [ 92.142913][ T6776] bond1: entered promiscuous mode [ 92.148811][ T6776] bond1: entered allmulticast mode [ 92.154468][ T6776] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.204930][ T6781] netlink: 'syz.1.385': attribute type 1 has an invalid length. [ 92.571823][ T6776] bond1 (unregistering): Released all slaves [ 92.677406][ T6791] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.002327][ T6797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.392'. [ 93.486978][ T6826] netlink: 3 bytes leftover after parsing attributes in process `syz.3.403'. [ 93.533029][ T6826] 0ªX¹¦À: renamed from caif0 [ 93.540544][ T6826] 0ªX¹¦À: entered allmulticast mode [ 93.572851][ T6826] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 93.828353][ T6835] netlink: 'syz.2.406': attribute type 4 has an invalid length. [ 94.046535][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.410'. [ 94.157501][ T6708] Set syz1 is full, maxelem 65536 reached [ 94.431694][ T6852] xt_connbytes: Forcing CT accounting to be enabled [ 94.460552][ T6852] Cannot find del_set index 1 as target [ 94.669338][ T6869] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.757790][ T6871] bridge0: entered promiscuous mode [ 94.778412][ T6871] macvlan2: entered promiscuous mode [ 94.787283][ T6871] bridge0: port 3(macvlan2) entered blocking state [ 94.794925][ T6871] bridge0: port 3(macvlan2) entered disabled state [ 94.801707][ T6871] macvlan2: entered allmulticast mode [ 94.809151][ T6871] bridge0: entered allmulticast mode [ 94.818171][ T6871] macvlan2: left allmulticast mode [ 94.838173][ T6871] bridge0: left allmulticast mode [ 94.853484][ T6871] bridge0: left promiscuous mode [ 94.894765][ T6877] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 94.983113][ T6877] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.163460][ T6897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.429'. [ 95.309681][ T6901] macsec1: entered promiscuous mode [ 95.343292][ T6901] bond0: entered promiscuous mode [ 95.371278][ T6901] bond_slave_0: entered promiscuous mode [ 95.407880][ T6901] bond_slave_1: entered promiscuous mode [ 95.433306][ T6901] macsec1: entered allmulticast mode [ 95.438626][ T6901] bond0: entered allmulticast mode [ 95.479299][ T6901] bond_slave_0: entered allmulticast mode [ 95.501579][ T6901] bond_slave_1: entered allmulticast mode [ 95.556960][ T6901] bond0: left allmulticast mode [ 95.574641][ T6901] bond_slave_0: left allmulticast mode [ 95.580148][ T6901] bond_slave_1: left allmulticast mode [ 95.606691][ T6901] bond0: left promiscuous mode [ 95.611752][ T6901] bond_slave_0: left promiscuous mode [ 95.652192][ T6901] bond_slave_1: left promiscuous mode [ 96.021480][ T6938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.446'. [ 96.136962][ T6942] netlink: 96 bytes leftover after parsing attributes in process `syz.3.449'. [ 96.572732][ T6963] netlink: 76 bytes leftover after parsing attributes in process `syz.2.459'. [ 96.650697][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.1.461'. [ 97.407625][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 98.244033][ T7043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 98.255416][ T7043] [ 98.257764][ T7043] ====================================================== [ 98.264777][ T7043] WARNING: possible circular locking dependency detected [ 98.271791][ T7043] 6.14.0-rc1-syzkaller-00130-ge589adf5b70c #0 Not tainted [ 98.278882][ T7043] ------------------------------------------------------ [ 98.285882][ T7043] syz.2.493/7043 is trying to acquire lock: [ 98.291756][ T7043] ffff88805c214218 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 98.301071][ T7043] [ 98.301071][ T7043] but task is already holding lock: [ 98.308426][ T7043] ffffffff8fa5a588 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6bc/0xcd0 [ 98.316518][ T7043] [ 98.316518][ T7043] which lock already depends on the new lock. [ 98.316518][ T7043] [ 98.326904][ T7043] [ 98.326904][ T7043] the existing dependency chain (in reverse order) is: [ 98.335901][ T7043] [ 98.335901][ T7043] -> #3 (lock#7){+.+.}-{4:4}: [ 98.342765][ T7043] lock_acquire+0x1ed/0x550 [ 98.347785][ T7043] __mutex_lock+0x19c/0x1010 [ 98.352887][ T7043] cma_init+0x1e/0x140 [ 98.357467][ T7043] do_one_initcall+0x248/0x870 [ 98.362742][ T7043] do_initcall_level+0x157/0x210 [ 98.368192][ T7043] do_initcalls+0x3f/0x80 [ 98.373032][ T7043] kernel_init_freeable+0x435/0x5d0 [ 98.378743][ T7043] kernel_init+0x1d/0x2b0 [ 98.383576][ T7043] ret_from_fork+0x4b/0x80 [ 98.388503][ T7043] ret_from_fork_asm+0x1a/0x30 [ 98.393782][ T7043] [ 98.393782][ T7043] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 98.401012][ T7043] lock_acquire+0x1ed/0x550 [ 98.406031][ T7043] __mutex_lock+0x19c/0x1010 [ 98.411135][ T7043] start_sync_thread+0xdc/0x2dc0 [ 98.416583][ T7043] do_ip_vs_set_ctl+0x442/0x13d0 [ 98.422025][ T7043] nf_setsockopt+0x295/0x2c0 [ 98.427120][ T7043] smc_setsockopt+0x275/0xe50 [ 98.432310][ T7043] do_sock_setsockopt+0x3af/0x720 [ 98.437845][ T7043] __x64_sys_setsockopt+0x1ee/0x280 [ 98.443559][ T7043] do_syscall_64+0xf3/0x230 [ 98.448571][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.454973][ T7043] [ 98.454973][ T7043] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 98.463568][ T7043] lock_acquire+0x1ed/0x550 [ 98.468584][ T7043] __mutex_lock+0x19c/0x1010 [ 98.473685][ T7043] smc_switch_to_fallback+0x35/0xd90 [ 98.479478][ T7043] smc_sendmsg+0x11f/0x530 [ 98.484405][ T7043] __sock_sendmsg+0x221/0x270 [ 98.489591][ T7043] __sys_sendto+0x363/0x4c0 [ 98.494610][ T7043] __x64_sys_sendto+0xde/0x100 [ 98.499891][ T7043] do_syscall_64+0xf3/0x230 [ 98.504911][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.511318][ T7043] [ 98.511318][ T7043] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 98.518952][ T7043] validate_chain+0x18ef/0x5920 [ 98.524309][ T7043] __lock_acquire+0x1397/0x2100 [ 98.529669][ T7043] lock_acquire+0x1ed/0x550 [ 98.534684][ T7043] lock_sock_nested+0x48/0x100 [ 98.539955][ T7043] sock_set_reuseaddr+0x17/0x60 [ 98.545314][ T7043] siw_create_listen+0x19d/0x11d0 [ 98.550846][ T7043] iw_cm_listen+0x15e/0x230 [ 98.555857][ T7043] rdma_listen+0x941/0xd60 [ 98.560777][ T7043] cma_listen_on_dev+0x3e3/0x6f0 [ 98.566220][ T7043] cma_add_one+0x7d7/0xcd0 [ 98.571141][ T7043] add_client_context+0x536/0x8b0 [ 98.576672][ T7043] enable_device_and_get+0x1e6/0x440 [ 98.582468][ T7043] ib_register_device+0x10d4/0x13e0 [ 98.588176][ T7043] siw_newlink+0x905/0xd60 [ 98.593099][ T7043] nldev_newlink+0x5c0/0x640 [ 98.598197][ T7043] rdma_nl_rcv+0x6dd/0x9e0 [ 98.603127][ T7043] netlink_unicast+0x7f6/0x990 [ 98.608404][ T7043] netlink_sendmsg+0x8e4/0xcb0 [ 98.613675][ T7043] __sock_sendmsg+0x221/0x270 [ 98.618859][ T7043] ____sys_sendmsg+0x52a/0x7e0 [ 98.624127][ T7043] __sys_sendmsg+0x269/0x350 [ 98.629224][ T7043] do_syscall_64+0xf3/0x230 [ 98.634237][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.640638][ T7043] [ 98.640638][ T7043] other info that might help us debug this: [ 98.640638][ T7043] [ 98.650849][ T7043] Chain exists of: [ 98.650849][ T7043] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 98.650849][ T7043] [ 98.662668][ T7043] Possible unsafe locking scenario: [ 98.662668][ T7043] [ 98.670098][ T7043] CPU0 CPU1 [ 98.675446][ T7043] ---- ---- [ 98.680791][ T7043] lock(lock#7); [ 98.684422][ T7043] lock(rtnl_mutex); [ 98.690910][ T7043] lock(lock#7); [ 98.697056][ T7043] lock(sk_lock-AF_INET); [ 98.701463][ T7043] [ 98.701463][ T7043] *** DEADLOCK *** [ 98.701463][ T7043] [ 98.709594][ T7043] 6 locks held by syz.2.493/7043: [ 98.714611][ T7043] #0: ffffffff9a7bfa38 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32d/0x9e0 [ 98.724617][ T7043] #1: ffffffff8fa46750 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42a/0x640 [ 98.734009][ T7043] #2: ffffffff8fa39430 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x12e/0x440 [ 98.744008][ T7043] #3: ffffffff8fa39730 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x196/0x440 [ 98.754007][ T7043] #4: ffff88807e9c85e0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4f4/0x8b0 [ 98.764867][ T7043] #5: ffffffff8fa5a588 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6bc/0xcd0 [ 98.773391][ T7043] [ 98.773391][ T7043] stack backtrace: [ 98.779262][ T7043] CPU: 1 UID: 0 PID: 7043 Comm: syz.2.493 Not tainted 6.14.0-rc1-syzkaller-00130-ge589adf5b70c #0 [ 98.779277][ T7043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 98.779285][ T7043] Call Trace: [ 98.779292][ T7043] [ 98.779298][ T7043] dump_stack_lvl+0x241/0x360 [ 98.779315][ T7043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.779327][ T7043] ? __pfx__printk+0x10/0x10 [ 98.779350][ T7043] print_circular_bug+0x13a/0x1b0 [ 98.779365][ T7043] check_noncircular+0x36a/0x4a0 [ 98.779379][ T7043] ? __pfx_check_noncircular+0x10/0x10 [ 98.779392][ T7043] ? lockdep_lock+0x123/0x2b0 [ 98.779407][ T7043] ? mark_lock+0x9a/0x360 [ 98.779427][ T7043] validate_chain+0x18ef/0x5920 [ 98.779446][ T7043] ? __pfx_validate_chain+0x10/0x10 [ 98.779460][ T7043] ? mark_lock+0x9a/0x360 [ 98.779477][ T7043] ? mark_lock+0x9a/0x360 [ 98.779494][ T7043] ? look_up_lock_class+0x77/0x170 [ 98.779512][ T7043] ? register_lock_class+0x102/0x980 [ 98.779529][ T7043] ? __pfx_register_lock_class+0x10/0x10 [ 98.779546][ T7043] ? mark_lock+0x9a/0x360 [ 98.779564][ T7043] __lock_acquire+0x1397/0x2100 [ 98.779582][ T7043] ? lockdep_init_map_type+0xa1/0x910 [ 98.779605][ T7043] lock_acquire+0x1ed/0x550 [ 98.779621][ T7043] ? sock_set_reuseaddr+0x17/0x60 [ 98.779640][ T7043] ? __pfx_lock_acquire+0x10/0x10 [ 98.779658][ T7043] ? apparmor_socket_post_create+0x2b7/0x2e0 [ 98.779675][ T7043] ? bpf_lsm_socket_post_create+0x9/0x10 [ 98.779696][ T7043] lock_sock_nested+0x48/0x100 [ 98.779712][ T7043] ? sock_set_reuseaddr+0x17/0x60 [ 98.779729][ T7043] sock_set_reuseaddr+0x17/0x60 [ 98.779745][ T7043] siw_create_listen+0x19d/0x11d0 [ 98.779760][ T7043] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 98.779777][ T7043] ? __pfx_siw_create_listen+0x10/0x10 [ 98.779795][ T7043] iw_cm_listen+0x15e/0x230 [ 98.779811][ T7043] rdma_listen+0x941/0xd60 [ 98.779825][ T7043] ? __pfx_rdma_listen+0x10/0x10 [ 98.779839][ T7043] ? rdma_restrack_add+0x288/0x7b0 [ 98.779852][ T7043] ? _cma_attach_to_dev+0x295/0x490 [ 98.779867][ T7043] cma_listen_on_dev+0x3e3/0x6f0 [ 98.779883][ T7043] cma_add_one+0x7d7/0xcd0 [ 98.779900][ T7043] ? __pfx_cma_add_one+0x10/0x10 [ 98.779916][ T7043] ? _raw_spin_unlock+0x28/0x50 [ 98.779930][ T7043] add_client_context+0x536/0x8b0 [ 98.779945][ T7043] ? __pfx_add_client_context+0x10/0x10 [ 98.779957][ T7043] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 98.779973][ T7043] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 98.779991][ T7043] enable_device_and_get+0x1e6/0x440 [ 98.780011][ T7043] ? __pfx_enable_device_and_get+0x10/0x10 [ 98.780030][ T7043] ? device_add+0x460/0xbf0 [ 98.780044][ T7043] ib_register_device+0x10d4/0x13e0 [ 98.780065][ T7043] ? __pfx_ib_register_device+0x10/0x10 [ 98.780085][ T7043] ? xa_load+0x2dd/0x350 [ 98.780102][ T7043] ? xa_load+0x147/0x350 [ 98.780118][ T7043] ? __asan_memset+0x23/0x50 [ 98.780135][ T7043] ? lockdep_init_map_type+0xa1/0x910 [ 98.780151][ T7043] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 98.780169][ T7043] ? ib_device_set_netdev+0x5b6/0x6b0 [ 98.780183][ T7043] ? __raw_spin_lock_init+0x45/0x100 [ 98.780198][ T7043] siw_newlink+0x905/0xd60 [ 98.780215][ T7043] nldev_newlink+0x5c0/0x640 [ 98.780232][ T7043] ? __pfx_nldev_newlink+0x10/0x10 [ 98.780274][ T7043] ? __pfx_aa_get_newest_label+0x10/0x10 [ 98.780290][ T7043] ? __pfx_aa_get_newest_label+0x10/0x10 [ 98.780311][ T7043] ? bpf_lsm_capable+0x9/0x10 [ 98.780325][ T7043] ? security_capable+0x7e/0x2d0 [ 98.780342][ T7043] ? __pfx_nldev_newlink+0x10/0x10 [ 98.780359][ T7043] rdma_nl_rcv+0x6dd/0x9e0 [ 98.780380][ T7043] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 98.780406][ T7043] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.780419][ T7043] netlink_unicast+0x7f6/0x990 [ 98.780439][ T7043] ? __pfx_netlink_unicast+0x10/0x10 [ 98.780455][ T7043] ? __virt_addr_valid+0x45f/0x530 [ 98.780473][ T7043] ? __phys_addr_symbol+0x2f/0x70 [ 98.780490][ T7043] ? __check_object_size+0x47a/0x730 [ 98.780503][ T7043] netlink_sendmsg+0x8e4/0xcb0 [ 98.780519][ T7043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.780533][ T7043] ? aa_sock_msg_perm+0x91/0x160 [ 98.780550][ T7043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.780561][ T7043] __sock_sendmsg+0x221/0x270 [ 98.780578][ T7043] ____sys_sendmsg+0x52a/0x7e0 [ 98.780593][ T7043] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.780609][ T7043] ? __fget_files+0x2a/0x410 [ 98.780622][ T7043] ? __fget_files+0x2a/0x410 [ 98.780637][ T7043] __sys_sendmsg+0x269/0x350 [ 98.780651][ T7043] ? __pfx___sys_sendmsg+0x10/0x10 [ 98.780677][ T7043] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 98.780694][ T7043] ? do_syscall_64+0x100/0x230 [ 98.780711][ T7043] ? do_syscall_64+0xb6/0x230 [ 98.780728][ T7043] do_syscall_64+0xf3/0x230 [ 98.780745][ T7043] ? clear_bhb_loop+0x35/0x90 [ 98.780763][ T7043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.780779][ T7043] RIP: 0033:0x7f487b58cde9 [ 98.780792][ T7043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.780803][ T7043] RSP: 002b:00007f48793f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.780816][ T7043] RAX: ffffffffffffffda RBX: 00007f487b7a5fa0 RCX: 00007f487b58cde9 [ 98.780826][ T7043] RDX: 0000000020000010 RSI: 0000400000000080 RDI: 0000000000000005 [ 98.780835][ T7043] RBP: 00007f487b60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 98.780843][ T7043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 98.780850][ T7043] R13: 0000000000000000 R14: 00007f487b7a5fa0 R15: 00007fff9be27f18 [ 98.780864][ T7043] [ 99.387650][ T7043] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98