last executing test programs: 2.213029757s ago: executing program 0 (id=438): socket(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x1000080002, 0x100000000000088) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r2, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) recvfrom(r1, 0x0, 0x12, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "fc9749f20e8591ee", "c0b6c5b27fa2c238d41affffffff972d", "e9be1eae", "bb10000000000001"}, 0x28) 1.796257503s ago: executing program 3 (id=445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)='H', 0x1}], 0x1}, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[], 0xa) r3 = socket(0x400000000010, 0x3, 0x0) close(r3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x10, 0x803, 0x0) socket(0x10, 0x803, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000008c0)=ANY=[@ANYRES16=r6, @ANYBLOB="01002bbd7000ffdbdf25010000000000000001410500001c001700000003009bd617de7c6906b33ae6"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e22, @broadcast}, 0x3, 0x3, 0x1, 0x2}}, 0x2e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x4000010, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x8080) socket$inet(0x10, 0x3, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) 1.754669012s ago: executing program 2 (id=446): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.750015418s ago: executing program 1 (id=447): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="340000001100010028bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="420400008010000014003500"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x64000850) 1.570266718s ago: executing program 3 (id=448): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, 0x2, 0x1, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20004010}, 0x10) 1.413892554s ago: executing program 1 (id=449): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r1, 0x615, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x5}, 0x0) 1.376762987s ago: executing program 2 (id=450): socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) sendto$inet6(r0, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) shutdown(r0, 0x1) 1.313907205s ago: executing program 3 (id=452): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x11, @multicast2, 0x0, 0x0, 'ovf\x00', 0x1b, 0x569f, 0x400006b}, 0x2c) 1.210771019s ago: executing program 0 (id=453): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1.172871154s ago: executing program 1 (id=454): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x7fffffe, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x8, 0x0, 0x0, 0x1, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 1.121766588s ago: executing program 4 (id=455): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, 0x0) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.035627048s ago: executing program 2 (id=456): r0 = socket$inet6(0xa, 0x3, 0xd) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000180)=0x4, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0xff, @empty, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) 940.173875ms ago: executing program 4 (id=457): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000000)={0x84, @remote, 0x4e20, 0x2, 'rr\x00', 0x0, 0x7fff, 0x4000043}, 0x2c) 877.921525ms ago: executing program 0 (id=458): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000240)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x59, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xf5ffffff}]}}}}}}}}, 0x0) 877.739842ms ago: executing program 3 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r2, @ANYBLOB="040046000a0034000101010101010000080026006c090000800051802000008009000100b168fa316700000005000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4090}, 0x0) 868.42883ms ago: executing program 1 (id=460): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xa14a}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) 754.902788ms ago: executing program 2 (id=461): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3d, 0x107, 0x1, 0x0, {0x4, 0x7c}, [@typed={0x4, 0x70}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1f}]}]}, 0x20}}, 0x0) 673.876638ms ago: executing program 0 (id=462): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000640)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010102, 0x100, 0x0, 0xa, 0x4, 0xa, 0x10, 0x20, 0x5c}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000000001}, {0x0, 0x40000000, 0x0, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@multicast2, 0x4d6, 0x32}, 0x0, @in6=@empty, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) sendmmsg$inet6(r0, &(0x7f0000000380)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0}}], 0x1, 0x0) 673.772295ms ago: executing program 4 (id=463): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x8004b707, 0x0) 568.80996ms ago: executing program 1 (id=464): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001e00)=ANY=[@ANYBLOB="1c0000f50000020000000000000000000040"], 0x87b) 532.407129ms ago: executing program 3 (id=465): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000140)=r2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 461.775145ms ago: executing program 2 (id=466): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) 461.620714ms ago: executing program 0 (id=467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000940)={0x48, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x9}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x10) 461.445117ms ago: executing program 4 (id=468): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x6c, 0x10, 0x1, 0x2, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1438a}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8000b81a, @random="cb716c65dc83"}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0xbe8}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 252.802753ms ago: executing program 0 (id=469): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001c0093"], 0x14}}, 0x4080) 215.653337ms ago: executing program 2 (id=470): socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 161.913834ms ago: executing program 3 (id=471): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1440, 0x4) 161.828075ms ago: executing program 4 (id=472): unshare(0x24020400) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r0, &(0x7f0000000000)={0x2, 0x0, @multicast2, 0x3}, 0x10) 20.270376ms ago: executing program 4 (id=473): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}]}}]}, 0x3c}}, 0x0) 0s ago: executing program 1 (id=474): unshare(0x22020600) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x6, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 73.542080][ T5821] cgroup: Unknown subsys name 'net' [ 73.688739][ T5821] cgroup: Unknown subsys name 'cpuset' [ 73.697182][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.309826][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.696642][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.710905][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.719340][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.727067][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.735708][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.738571][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.745790][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.754943][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.757272][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.765213][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.772066][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.778647][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.794058][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.802650][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.811283][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.814909][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.819703][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.833364][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.834636][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.842627][ T5842] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.854988][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.866312][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.875175][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.890022][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.924815][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.933508][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.942778][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.951361][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.959385][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 77.967184][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.351610][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 78.422738][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 78.492936][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 78.532989][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 78.663033][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.671353][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.679533][ T5832] bridge_slave_0: entered allmulticast mode [ 78.686603][ T5832] bridge_slave_0: entered promiscuous mode [ 78.695978][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.703167][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.711116][ T5832] bridge_slave_1: entered allmulticast mode [ 78.718019][ T5832] bridge_slave_1: entered promiscuous mode [ 78.726122][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 78.784204][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.791708][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.800202][ T5851] bridge_slave_0: entered allmulticast mode [ 78.807970][ T5851] bridge_slave_0: entered promiscuous mode [ 78.826730][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.846673][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.853857][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.861361][ T5851] bridge_slave_1: entered allmulticast mode [ 78.868328][ T5851] bridge_slave_1: entered promiscuous mode [ 78.895571][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.913530][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.920944][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.928650][ T5831] bridge_slave_0: entered allmulticast mode [ 78.936291][ T5831] bridge_slave_0: entered promiscuous mode [ 78.974352][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.982346][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.989778][ T5831] bridge_slave_1: entered allmulticast mode [ 78.996894][ T5831] bridge_slave_1: entered promiscuous mode [ 79.034242][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.041588][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.048990][ T5835] bridge_slave_0: entered allmulticast mode [ 79.056230][ T5835] bridge_slave_0: entered promiscuous mode [ 79.066824][ T5832] team0: Port device team_slave_0 added [ 79.084457][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.096129][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.109495][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.116808][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.124019][ T5835] bridge_slave_1: entered allmulticast mode [ 79.130897][ T5835] bridge_slave_1: entered promiscuous mode [ 79.147694][ T5832] team0: Port device team_slave_1 added [ 79.155795][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.176712][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.222499][ T5831] team0: Port device team_slave_0 added [ 79.248778][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.271447][ T5831] team0: Port device team_slave_1 added [ 79.290596][ T5851] team0: Port device team_slave_0 added [ 79.296711][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.303820][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.311267][ T5836] bridge_slave_0: entered allmulticast mode [ 79.318771][ T5836] bridge_slave_0: entered promiscuous mode [ 79.327885][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.347165][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.354212][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.380850][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.426030][ T5851] team0: Port device team_slave_1 added [ 79.432100][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.442908][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.450194][ T5836] bridge_slave_1: entered allmulticast mode [ 79.457524][ T5836] bridge_slave_1: entered promiscuous mode [ 79.473431][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.480437][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.506470][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.524589][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.531649][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.563665][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.577106][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.584069][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.610134][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.640548][ T5835] team0: Port device team_slave_0 added [ 79.649639][ T5835] team0: Port device team_slave_1 added [ 79.700748][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.708741][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.735900][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.756173][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.768290][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.778535][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.785769][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.811777][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.823534][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.830923][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.857384][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.892790][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.900202][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.926295][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.949742][ T5832] hsr_slave_0: entered promiscuous mode [ 79.955902][ T55] Bluetooth: hci0: command tx timeout [ 79.956387][ T5838] Bluetooth: hci1: command tx timeout [ 79.961421][ T5147] Bluetooth: hci2: command tx timeout [ 79.967320][ T5847] Bluetooth: hci3: command tx timeout [ 79.974430][ T5832] hsr_slave_1: entered promiscuous mode [ 80.008571][ T5836] team0: Port device team_slave_0 added [ 80.031453][ T5831] hsr_slave_0: entered promiscuous mode [ 80.037240][ T5847] Bluetooth: hci4: command tx timeout [ 80.042310][ T5831] hsr_slave_1: entered promiscuous mode [ 80.049370][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.057430][ T5831] Cannot create hsr debugfs directory [ 80.064630][ T5836] team0: Port device team_slave_1 added [ 80.126325][ T5851] hsr_slave_0: entered promiscuous mode [ 80.132546][ T5851] hsr_slave_1: entered promiscuous mode [ 80.139116][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.146790][ T5851] Cannot create hsr debugfs directory [ 80.192847][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.200142][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.226461][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.239481][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.246925][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.272929][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.288806][ T5835] hsr_slave_0: entered promiscuous mode [ 80.295872][ T5835] hsr_slave_1: entered promiscuous mode [ 80.301823][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.309643][ T5835] Cannot create hsr debugfs directory [ 80.500613][ T5836] hsr_slave_0: entered promiscuous mode [ 80.508397][ T5836] hsr_slave_1: entered promiscuous mode [ 80.514485][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.522333][ T5836] Cannot create hsr debugfs directory [ 80.702995][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.720997][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.742810][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.758952][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.823347][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.837892][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.848935][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.872493][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.946097][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.962548][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.972968][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.998902][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.048656][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.074119][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.094620][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.109078][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.119056][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.171779][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.210542][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.221292][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.232990][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.240292][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.252717][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.259872][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.281417][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.307165][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.329811][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.413602][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.440616][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.447787][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.480821][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.488390][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.516477][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.597330][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.623040][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.657749][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.664940][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.678883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.686049][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.732074][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.748547][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.766272][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.782666][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.789911][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.800051][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.807188][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.826351][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.843918][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.941716][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.008157][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.015346][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.025377][ T5847] Bluetooth: hci0: command tx timeout [ 82.025772][ T55] Bluetooth: hci3: command tx timeout [ 82.030801][ T5847] Bluetooth: hci2: command tx timeout [ 82.044034][ T5847] Bluetooth: hci1: command tx timeout [ 82.093297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.100499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.109573][ T5847] Bluetooth: hci4: command tx timeout [ 82.173425][ T5831] veth0_vlan: entered promiscuous mode [ 82.206848][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.259222][ T5831] veth1_vlan: entered promiscuous mode [ 82.357233][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.402654][ T5832] veth0_vlan: entered promiscuous mode [ 82.440194][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.448331][ T5832] veth1_vlan: entered promiscuous mode [ 82.482349][ T5831] veth0_macvtap: entered promiscuous mode [ 82.524038][ T5831] veth1_macvtap: entered promiscuous mode [ 82.598924][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.609646][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.623953][ T5832] veth0_macvtap: entered promiscuous mode [ 82.651919][ T5835] veth0_vlan: entered promiscuous mode [ 82.668268][ T5832] veth1_macvtap: entered promiscuous mode [ 82.684295][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.720459][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.730759][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.741652][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.764010][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.778800][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.791389][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.803882][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.821107][ T5835] veth1_vlan: entered promiscuous mode [ 82.843707][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.854439][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.867386][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.897693][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.907187][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.917288][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.926103][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.948495][ T5836] veth0_vlan: entered promiscuous mode [ 83.010103][ T5851] veth0_vlan: entered promiscuous mode [ 83.034514][ T5836] veth1_vlan: entered promiscuous mode [ 83.081356][ T5851] veth1_vlan: entered promiscuous mode [ 83.106913][ T5835] veth0_macvtap: entered promiscuous mode [ 83.120333][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.129728][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.144611][ T5835] veth1_macvtap: entered promiscuous mode [ 83.198392][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.211777][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.235470][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.238114][ T5836] veth0_macvtap: entered promiscuous mode [ 83.243318][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.255690][ T5836] veth1_macvtap: entered promiscuous mode [ 83.285564][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.289809][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.293429][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.310881][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.321970][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.332592][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.343812][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.374443][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.386303][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.406781][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.417357][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.427228][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.437740][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.453778][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.476905][ T5851] veth0_macvtap: entered promiscuous mode [ 83.502496][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.514434][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.529062][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.539591][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.551772][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.578189][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.583010][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.606365][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.615631][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.624347][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.641594][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.652294][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.663562][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.674578][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.685139][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.696081][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.707654][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.726173][ T5851] veth1_macvtap: entered promiscuous mode [ 83.743206][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753623][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.794791][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.803557][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.870147][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.882154][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.892823][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.903759][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.914314][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.926437][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.926611][ T5921] netlink: 'syz.1.2': attribute type 8 has an invalid length. [ 83.936909][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.956508][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.973032][ T5922] Zero length message leads to an empty skb [ 83.979027][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.019091][ T5922] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.062395][ T5921] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.106698][ T5847] Bluetooth: hci1: command tx timeout [ 84.115337][ T5847] Bluetooth: hci3: command tx timeout [ 84.120902][ T5838] Bluetooth: hci2: command tx timeout [ 84.121468][ T55] Bluetooth: hci0: command tx timeout [ 84.188241][ T55] Bluetooth: hci4: command tx timeout [ 84.234357][ T5921] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.274402][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.300190][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.328911][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.457378][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.475162][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.494568][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.506708][ T5851] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.526839][ T5851] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.547616][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.675715][ T5921] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.746712][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.764383][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.776429][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.792919][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.880225][ T5921] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.952265][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.960998][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.053254][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.082430][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.131639][ T5921] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.149359][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.161593][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.198568][ T5921] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.276708][ T5921] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.312893][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.335078][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.336709][ T5921] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.433183][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.458739][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.585301][ T5932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 85.605078][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.634840][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.693714][ T5934] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.736606][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.783584][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 85.785213][ T5932] bridge_slave_1 (unregistering): left allmulticast mode [ 85.801312][ T5932] bridge_slave_1 (unregistering): left promiscuous mode [ 85.808837][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.875999][ T5937] tipc: Started in network mode [ 85.886691][ T5937] tipc: Node identity ac14142f, cluster identity 4711 [ 85.891243][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.902306][ T5937] tipc: New replicast peer: 0.0.0.0 [ 85.911978][ T5937] tipc: Enabled bearer , priority 10 [ 85.961044][ T5934] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.000634][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.023279][ T5950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.024396][ T5943] bridge_slave_1 (unregistering): left allmulticast mode [ 86.045779][ T5943] bridge_slave_1 (unregistering): left promiscuous mode [ 86.052867][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.090775][ T5944] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.139827][ T5934] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.185589][ T55] Bluetooth: hci0: command tx timeout [ 86.186026][ T5838] Bluetooth: hci2: command tx timeout [ 86.191357][ T55] Bluetooth: hci3: command tx timeout [ 86.197482][ T5847] Bluetooth: hci1: command tx timeout [ 86.275165][ T5838] Bluetooth: hci4: command tx timeout [ 86.315621][ T5934] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.581667][ T5934] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.642630][ T5934] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.702107][ T5934] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.747218][ T5934] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.761505][ T5965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12'. [ 86.788764][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.831681][ T5965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.913240][ T5972] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11'. [ 86.927392][ T5971] veth1_macvtap: left promiscuous mode [ 87.025897][ T5886] tipc: Node number set to 2886997039 [ 87.341664][ T5976] warning: `syz.2.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.443840][ T5978] netlink: 'syz.0.16': attribute type 12 has an invalid length. [ 87.595459][ T5980] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.744218][ T5982] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 87.915304][ T5978] netlink: zone id is out of range [ 87.981976][ T5980] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 88.017140][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 88.076876][ T5980] Tq€!7: entered promiscuous mode [ 88.404058][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21'. [ 88.419505][ T5978] netlink: set zone limit has 4 unknown bytes [ 88.453763][ T6007] netlink: 3 bytes leftover after parsing attributes in process `syz.1.22'. [ 88.513220][ T6007] batadv1: entered promiscuous mode [ 88.547026][ T6007] batadv1: entered allmulticast mode [ 88.552764][ T6007] bridge0: port 2(batadv1) entered blocking state [ 88.614900][ T6007] bridge0: port 2(batadv1) entered disabled state [ 88.780360][ T6010] syz.1.22 uses obsolete (PF_INET,SOCK_PACKET) [ 89.045423][ T6022] Bluetooth: MGMT ver 1.23 [ 89.077557][ T53] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 89.087405][ T53] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 89.172187][ T6028] sctp: [Deprecated]: syz.4.25 (pid 6028) Use of int in max_burst socket option deprecated. [ 89.172187][ T6028] Use struct sctp_assoc_value instead [ 89.670952][ T6042] Bluetooth: MGMT ver 1.23 [ 90.219694][ T6068] nft_compat: unsupported protocol 0 [ 90.436184][ T6073] netlink: 40 bytes leftover after parsing attributes in process `syz.3.37'. [ 90.580319][ T6076] netlink: 'syz.1.38': attribute type 12 has an invalid length. [ 90.781052][ T6087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.024142][ T6065] veth1_macvtap: left promiscuous mode [ 91.175099][ T6076] netlink: zone id is out of range [ 91.228854][ T6087] netlink: 'syz.1.38': attribute type 2 has an invalid length. [ 91.285539][ T6073] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 91.395710][ T6087] Tq€!7: entered promiscuous mode [ 91.450570][ T6073] syz.3.37 (6073) used greatest stack depth: 18512 bytes left [ 91.640914][ T6076] netlink: set zone limit has 4 unknown bytes [ 91.940975][ T6117] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 91.957130][ T6115] netlink: 'syz.2.45': attribute type 10 has an invalid length. [ 91.996426][ T6117] macsec0: entered promiscuous mode [ 92.023389][ T6117] macsec0: entered allmulticast mode [ 92.053505][ T6117] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 92.102414][ T6115] team0: Port device dummy0 added [ 92.170814][ T6121] team0: Port device dummy0 removed [ 92.200451][ T10] cfg80211: failed to load regulatory.db [ 92.217179][ T6121] bridge_slave_0: left allmulticast mode [ 92.257652][ T6121] bridge_slave_0: left promiscuous mode [ 92.279494][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.342129][ T6121] bond0: (slave bond_slave_0): Releasing backup interface [ 92.387834][ T6131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.440987][ T6121] bond0: (slave bond_slave_1): Releasing backup interface [ 92.519882][ T6121] team0: Port device team_slave_0 removed [ 92.569964][ T6121] team0: Port device team_slave_1 removed [ 92.585004][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 92.593229][ T6121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.616292][ T6121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.705162][ T6129] pimreg0: tun_chr_ioctl cmd 1074025677 [ 92.714922][ T6129] pimreg0: linktype set to 65534 [ 93.221001][ T6151] pim6reg: entered allmulticast mode [ 93.288934][ T6149] pim6reg: left allmulticast mode [ 93.787144][ T6165] veth0_to_bridge: entered promiscuous mode [ 94.023627][ T6169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.086407][ T6164] veth0_to_bridge: left promiscuous mode [ 94.204873][ T6169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.321835][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.58'. [ 94.346954][ T6169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.468459][ T6169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.699050][ T6169] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.754585][ T6169] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.811600][ T6169] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.864583][ T6169] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.123847][ T6181] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 95.496628][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.61'. [ 95.540516][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.61'. [ 95.588653][ T6203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.61'. [ 95.678906][ T6210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.62'. [ 95.746143][ T6207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.60'. [ 95.998575][ T6207] bridge0: entered promiscuous mode [ 96.110778][ T6207] bridge0: port 3(macsec1) entered blocking state [ 96.140841][ T6207] bridge0: port 3(macsec1) entered disabled state [ 96.244965][ T6207] macsec1: entered allmulticast mode [ 96.278439][ T6207] bridge0: entered allmulticast mode [ 96.320022][ T6207] macsec1: left allmulticast mode [ 96.365910][ T6207] bridge0: left allmulticast mode [ 96.425092][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 96.450902][ T6207] bridge0: left promiscuous mode [ 96.641481][ T6234] xt_CONNSECMARK: invalid mode: 0 [ 97.047143][ T6242] netlink: 40 bytes leftover after parsing attributes in process `syz.0.70'. [ 97.881219][ T6247] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 97.921504][ T6267] x_tables: duplicate underflow at hook 1 [ 97.967275][ T6267] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20003 [ 98.075359][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.3.75'. [ 98.120419][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.277132][ T6271] bridge_slave_1 (unregistering): left allmulticast mode [ 98.326602][ T6271] bridge_slave_1 (unregistering): left promiscuous mode [ 98.333717][ T6271] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.387195][ T6282] netlink: 40 bytes leftover after parsing attributes in process `syz.2.77'. [ 98.485222][ T6274] tipc: Started in network mode [ 98.493914][ T6274] tipc: Node identity ac14142f, cluster identity 4711 [ 98.517849][ T6274] tipc: New replicast peer: 0.0.0.0 [ 98.566226][ T6274] tipc: Enabled bearer , priority 10 [ 98.616096][ T6288] netlink: 32 bytes leftover after parsing attributes in process `syz.3.75'. [ 98.864492][ T6302] netlink: 'syz.3.81': attribute type 48 has an invalid length. [ 99.144951][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 99.152430][ T6287] Bluetooth: hci0: Opcode 0x0c20 failed: -110 [ 99.169241][ T6311] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.250938][ T6311] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.339887][ T6311] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.462362][ T6311] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.648796][ T6311] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.688177][ T6311] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.695604][ T5887] tipc: Node number set to 2886997039 [ 99.707673][ T6324] __nla_validate_parse: 1 callbacks suppressed [ 99.707691][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.708128][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 99.732334][ T6325] netlink: 8 bytes leftover after parsing attributes in process `syz.0.90'. [ 99.732446][ T6311] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.772830][ T6328] smc: net device bond0 applied user defined pnetid S [ 99.820295][ T6311] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.893996][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 100.072702][ T6338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.103698][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.194170][ T6338] bridge_slave_1 (unregistering): left allmulticast mode [ 100.206402][ T6338] bridge_slave_1 (unregistering): left promiscuous mode [ 100.213541][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.283114][ T6350] netlink: 332 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.297662][ T6350] netlink: 104 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.309118][ T6350] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 100.450197][ T6359] x_tables: duplicate underflow at hook 1 [ 100.615947][ T6367] netlink: 'syz.2.104': attribute type 10 has an invalid length. [ 100.687607][ T6367] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.707452][ T6367] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.806517][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.106'. [ 100.839907][ T6378] netlink: 'syz.2.107': attribute type 178 has an invalid length. [ 101.071645][ T6386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.111'. [ 101.078801][ T6388] x_tables: duplicate underflow at hook 1 [ 101.091251][ T6386] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 101.225078][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 101.280843][ T6395] Cannot find add_set index 0 as target [ 101.910514][ T6412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.050574][ T6415] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 102.338363][ T6412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.706134][ T6437] netlink: 'syz.3.125': attribute type 1 has an invalid length. [ 102.811422][ T6412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.980742][ T6428] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 103.133522][ T6412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.183588][ T6449] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 103.206508][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.213892][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.220852][ T6452] netlink: 'syz.4.129': attribute type 1 has an invalid length. [ 103.327042][ T6412] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.365344][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.378752][ T6449] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 103.392993][ T6412] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.429288][ T6449] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 103.487806][ T6412] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.536280][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.552267][ T6412] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.578885][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.593186][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.603674][ T6449] wg1 speed is unknown, defaulting to 1000 [ 103.625947][ T6449] wg1 speed is unknown, defaulting to 1000 [ 104.091623][ T6474] vlan2: entered allmulticast mode [ 104.114362][ T6474] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 104.162945][ T6474] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 104.258969][ T6475] wg1 speed is unknown, defaulting to 1000 [ 104.266296][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 104.470869][ T6489] pim6reg: entered allmulticast mode [ 104.487315][ T6486] pim6reg: left allmulticast mode [ 104.932890][ T6505] __nla_validate_parse: 11 callbacks suppressed [ 104.932914][ T6505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.148'. [ 104.968807][ T6505] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.086163][ T6512] netlink: 'syz.0.147': attribute type 10 has an invalid length. [ 105.152314][ T6512] netlink: 132 bytes leftover after parsing attributes in process `syz.0.147'. [ 105.644998][ T6478] netlink: 'syz.3.137': attribute type 1 has an invalid length. [ 105.653039][ T6478] netlink: 228 bytes leftover after parsing attributes in process `syz.3.137'. [ 105.689310][ T6475] wg1 speed is unknown, defaulting to 1000 [ 105.753603][ T6538] pim6reg: entered allmulticast mode [ 105.815411][ T6533] pim6reg: left allmulticast mode [ 105.985851][ T6545] wg1 speed is unknown, defaulting to 1000 [ 106.081619][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 106.111322][ T6555] netlink: 40 bytes leftover after parsing attributes in process `syz.1.161'. [ 106.132054][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.160'. [ 106.151664][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 106.160910][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 106.175652][ T6551] netlink: 36 bytes leftover after parsing attributes in process `syz.2.158'. [ 106.208991][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.271581][ T6556] bridge_slave_1 (unregistering): left allmulticast mode [ 106.290330][ T6556] bridge_slave_1 (unregistering): left promiscuous mode [ 106.298014][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.423058][ T6563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.162'. [ 106.752434][ T6572] netlink: 'syz.4.164': attribute type 12 has an invalid length. [ 107.209045][ T6558] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 107.492131][ T6589] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.590206][ T6589] netlink: zone id is out of range [ 107.714084][ T6598] netlink: 'syz.4.164': attribute type 2 has an invalid length. [ 107.955995][ T6607] pim6reg: entered allmulticast mode [ 108.040239][ T6598] Tq€!7: entered promiscuous mode [ 108.123009][ T6605] pim6reg: left allmulticast mode [ 108.185848][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 108.238208][ T6589] netlink: set zone limit has 4 unknown bytes [ 108.327526][ T6624] raw_sendmsg: syz.1.173 forgot to set AF_INET. Fix it! [ 108.452045][ T6625] tipc: Enabling of bearer rejected, already enabled [ 109.506511][ T6663] netlink: 'syz.1.183': attribute type 25 has an invalid length. [ 109.914159][ T6679] pim6reg: entered allmulticast mode [ 109.938442][ T6681] __nla_validate_parse: 10 callbacks suppressed [ 109.938461][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 109.963483][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'. [ 109.978472][ T6678] pim6reg: left allmulticast mode [ 109.995092][ T6684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.188'. [ 110.242505][ T6691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.189'. [ 110.367557][ T6694] wg1 speed is unknown, defaulting to 1000 [ 110.930522][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 111.472269][ T6745] pim6reg: entered allmulticast mode [ 111.577180][ T6743] pim6reg: left allmulticast mode [ 111.753319][ T6734] lo speed is unknown, defaulting to 1000 [ 111.779971][ T6734] lo speed is unknown, defaulting to 1000 [ 111.801216][ T6734] lo speed is unknown, defaulting to 1000 [ 111.863494][ T6734] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 111.938127][ T6760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.204'. [ 112.017019][ T6761] netlink: 'syz.2.202': attribute type 6 has an invalid length. [ 112.051314][ T6734] lo speed is unknown, defaulting to 1000 [ 112.119462][ T6734] lo speed is unknown, defaulting to 1000 [ 112.271476][ T6734] lo speed is unknown, defaulting to 1000 [ 112.281069][ T6770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.205'. [ 112.306116][ T6734] lo speed is unknown, defaulting to 1000 [ 112.313033][ T6734] lo speed is unknown, defaulting to 1000 [ 112.326497][ T6770] netlink: 52 bytes leftover after parsing attributes in process `syz.1.205'. [ 112.347233][ T6734] lo speed is unknown, defaulting to 1000 [ 112.425127][ T6775] netlink: 'syz.0.207': attribute type 2 has an invalid length. [ 112.448351][ T6775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.207'. [ 112.486544][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 112.605792][ T6785] netlink: 'syz.1.209': attribute type 29 has an invalid length. [ 113.107784][ T6799] netlink: 'syz.3.212': attribute type 10 has an invalid length. [ 113.161537][ T6803] netlink: 'syz.3.212': attribute type 10 has an invalid length. [ 113.186117][ T6799] batman_adv: batadv0: Adding interface: team0 [ 113.216100][ T6799] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.282686][ T6799] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 113.309247][ T6803] team0: entered promiscuous mode [ 113.314881][ T6803] team_slave_0: entered promiscuous mode [ 113.324725][ T6803] team_slave_1: entered promiscuous mode [ 113.333936][ T6803] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.341053][ T6803] batman_adv: batadv0: Interface activated: team0 [ 113.359358][ T6803] batman_adv: batadv0: Interface deactivated: team0 [ 113.384863][ T6803] batman_adv: batadv0: Removing interface: team0 [ 113.405960][ T6803] bridge0: port 2(team0) entered blocking state [ 113.426149][ T6803] bridge0: port 2(team0) entered disabled state [ 113.446474][ T6803] team0: entered allmulticast mode [ 113.460436][ T6803] team_slave_0: entered allmulticast mode [ 113.479389][ T6803] team_slave_1: entered allmulticast mode [ 113.501885][ T6803] bridge0: port 2(team0) entered blocking state [ 113.508353][ T6803] bridge0: port 2(team0) entered forwarding state [ 113.537180][ T6813] pim6reg: entered allmulticast mode [ 113.584559][ T6809] pim6reg: left allmulticast mode [ 114.571657][ T6855] FAULT_INJECTION: forcing a failure. [ 114.571657][ T6855] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 114.596533][ T6855] CPU: 1 UID: 0 PID: 6855 Comm: syz.0.221 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 114.596559][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 114.596574][ T6855] Call Trace: [ 114.596581][ T6855] [ 114.596588][ T6855] dump_stack_lvl+0x241/0x360 [ 114.596622][ T6855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.596642][ T6855] ? __pfx__printk+0x10/0x10 [ 114.596669][ T6855] should_fail_ex+0x40a/0x550 [ 114.596703][ T6855] prepare_alloc_pages+0x1da/0x5b0 [ 114.596745][ T6855] __alloc_frozen_pages_noprof+0x16f/0x710 [ 114.596770][ T6855] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 114.596820][ T6855] ? __pfx_lock_acquire+0x10/0x10 [ 114.596853][ T6855] alloc_pages_mpol+0x311/0x660 [ 114.596876][ T6855] ? __lock_acquire+0x1397/0x2100 [ 114.596906][ T6855] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 114.596942][ T6855] vma_alloc_folio_noprof+0x12b/0x260 [ 114.596972][ T6855] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 114.597012][ T6855] folio_prealloc+0x2e/0x170 [ 114.597034][ T6855] __handle_mm_fault+0x3e4b/0x70f0 [ 114.597092][ T6855] ? __pfx___handle_mm_fault+0x10/0x10 [ 114.597124][ T6855] ? lock_vma_under_rcu+0x34b/0x790 [ 114.597158][ T6855] ? __pfx_reacquire_held_locks+0x10/0x10 [ 114.597196][ T6855] ? mtree_range_walk+0x6fd/0x8e0 [ 114.597220][ T6855] ? lock_vma_under_rcu+0x1dd/0x790 [ 114.597239][ T6855] ? __pfx_lock_release+0x10/0x10 [ 114.597268][ T6855] ? lock_vma_under_rcu+0x34b/0x790 [ 114.597309][ T6855] ? lock_vma_under_rcu+0x1dd/0x790 [ 114.597330][ T6855] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 114.597349][ T6855] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.597395][ T6855] handle_mm_fault+0x3e5/0x8d0 [ 114.597438][ T6855] exc_page_fault+0x459/0x8b0 [ 114.597469][ T6855] asm_exc_page_fault+0x26/0x30 [ 114.597506][ T6855] RIP: 0033:0x7febea858b7b [ 114.597528][ T6855] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 4b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 114.597544][ T6855] RSP: 002b:00007febeb892fb0 EFLAGS: 00010202 [ 114.597562][ T6855] RAX: 0000000000000000 RBX: 00007febeaba5fa0 RCX: 0000000000000000 [ 114.597574][ T6855] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000400000000140 [ 114.597585][ T6855] RBP: 00007febeb894090 R08: 0000000000000000 R09: 0000000000000000 [ 114.597597][ T6855] R10: 0000400000000140 R11: 0000000000000000 R12: 0000000000000001 [ 114.597608][ T6855] R13: 0000000000000000 R14: 00007febeaba5fa0 R15: 00007ffe9590b0d8 [ 114.597637][ T6855] [ 114.597856][ T6855] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 115.055126][ T6866] __nla_validate_parse: 3 callbacks suppressed [ 115.055148][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.222'. [ 115.533014][ T6883] netlink: 'syz.2.225': attribute type 1 has an invalid length. [ 115.554324][ T6885] pim6reg: entered allmulticast mode [ 115.560168][ T6883] netlink: 'syz.2.225': attribute type 2 has an invalid length. [ 115.591993][ T6882] pim6reg: left allmulticast mode [ 115.846994][ T6892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 115.977904][ T6896] netlink: 'syz.2.229': attribute type 3 has an invalid length. [ 115.999825][ T6896] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.229'. [ 116.404422][ T6909] tls_set_device_offload_rx: netdev not found [ 116.932278][ T6933] wg1 speed is unknown, defaulting to 1000 [ 116.974330][ T6933] lo speed is unknown, defaulting to 1000 [ 117.012741][ T6939] pim6reg: entered allmulticast mode [ 117.082707][ T6938] pim6reg: left allmulticast mode [ 117.416760][ T6952] netlink: 'syz.1.244': attribute type 12 has an invalid length. [ 117.596824][ T6959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.608432][ T6959] netlink: zone id is out of range [ 117.801460][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'. [ 117.819859][ T6969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.248'. [ 118.224422][ T6959] netlink: set zone limit has 4 unknown bytes [ 118.241572][ T6974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 118.497395][ T6978] syz.0.249 uses old SIOCAX25GETINFO [ 119.221641][ T7002] pim6reg: entered allmulticast mode [ 119.274032][ T7001] pim6reg: left allmulticast mode [ 119.306832][ T7005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.255'. [ 119.506763][ T7014] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 119.514487][ T7014] netlink: 224 bytes leftover after parsing attributes in process `syz.0.257'. [ 119.640453][ T7007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.695386][ T7019] netlink: 'syz.3.259': attribute type 21 has an invalid length. [ 119.703246][ T7019] netlink: 132 bytes leftover after parsing attributes in process `syz.3.259'. [ 119.817098][ T7019] Cannot find add_set index 2 as target [ 119.869157][ T7019] netlink: 'syz.3.259': attribute type 10 has an invalid length. [ 119.907495][ T7019] netlink: 1252 bytes leftover after parsing attributes in process `syz.3.259'. [ 119.929237][ T7007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.963381][ T7019] openvswitch: netlink: Message has 5 unknown bytes. [ 120.006582][ T7022] netlink: set zone limit has 4 unknown bytes [ 120.012913][ T7027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 120.045399][ T7027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.219083][ T7007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.372090][ T7034] netlink: 'syz.3.261': attribute type 21 has an invalid length. [ 120.468968][ T7007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.567660][ T7034] netlink: 152 bytes leftover after parsing attributes in process `syz.3.261'. [ 120.604013][ T7041] netlink: 'syz.0.263': attribute type 12 has an invalid length. [ 120.778854][ T7048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.932019][ T7007] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.065703][ T7058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 121.190515][ T7007] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.281838][ T7007] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.313587][ T7007] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.451406][ T7066] netlink: del zone limit has 4 unknown bytes [ 121.860809][ T7070] syzkaller1: entered allmulticast mode [ 121.908104][ T7077] netlink: 48 bytes leftover after parsing attributes in process `syz.4.268'. [ 122.177599][ T7083] pim6reg: entered allmulticast mode [ 122.227784][ T7081] pim6reg: left allmulticast mode [ 122.556124][ T7092] netlink: 'syz.4.271': attribute type 1 has an invalid length. [ 122.563842][ T7092] netlink: 228 bytes leftover after parsing attributes in process `syz.4.271'. [ 122.595945][ T7092] netlink: 11 bytes leftover after parsing attributes in process `syz.4.271'. [ 122.643930][ T7095] sctp: [Deprecated]: syz.3.273 (pid 7095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.643930][ T7095] Use struct sctp_sack_info instead [ 122.767764][ T7095] sctp: [Deprecated]: syz.3.273 (pid 7095) Use of struct sctp_assoc_value in delayed_ack socket option. [ 122.767764][ T7095] Use struct sctp_sack_info instead [ 122.831367][ T7099] netlink: 52 bytes leftover after parsing attributes in process `syz.2.272'. [ 122.884906][ T7102] netlink: 'syz.4.274': attribute type 11 has an invalid length. [ 122.913227][ T7103] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 123.446408][ T7120] netlink: 48 bytes leftover after parsing attributes in process `syz.2.279'. [ 123.713674][ T7128] pim6reg: entered allmulticast mode [ 123.823431][ T7125] pim6reg: left allmulticast mode [ 124.868573][ T7156] netlink: 40 bytes leftover after parsing attributes in process `syz.3.285'. [ 125.369096][ T7167] netlink: 'syz.4.286': attribute type 1 has an invalid length. [ 125.938978][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.4.291'. [ 126.146291][ T7196] netlink: 100 bytes leftover after parsing attributes in process `syz.2.294'. [ 126.165600][ T7196] netlink: 100 bytes leftover after parsing attributes in process `syz.2.294'. [ 126.193401][ T7198] netlink: 100 bytes leftover after parsing attributes in process `syz.2.294'. [ 126.217856][ T7198] netlink: 100 bytes leftover after parsing attributes in process `syz.2.294'. [ 127.317742][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz.2.305'. [ 127.891537][ T7272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.311'. [ 127.913236][ T7275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.312'. [ 127.954783][ T7272] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 128.078889][ T7280] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.133338][ T7272] xt_TPROXY: Can be used only with -p tcp or -p udp [ 128.189406][ T7273] IPv6: NLM_F_REPLACE set, but no existing node found! [ 128.379438][ T7293] wg1 speed is unknown, defaulting to 1000 [ 128.437078][ T7293] lo speed is unknown, defaulting to 1000 [ 129.121732][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.4.320'. [ 129.123250][ T7318] tipc: Started in network mode [ 129.149750][ T7318] tipc: Node identity ac14142f, cluster identity 4711 [ 129.164346][ T7318] tipc: New replicast peer: 0.0.0.0 [ 129.181374][ T7318] tipc: Enabled bearer , priority 10 [ 129.200396][ T7316] netlink: 332 bytes leftover after parsing attributes in process `syz.0.319'. [ 129.435847][ T7335] FAULT_INJECTION: forcing a failure. [ 129.435847][ T7335] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.453960][ T7333] wg1 speed is unknown, defaulting to 1000 [ 129.474910][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.4.324 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 129.474940][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.474952][ T7335] Call Trace: [ 129.474958][ T7335] [ 129.474966][ T7335] dump_stack_lvl+0x241/0x360 [ 129.474996][ T7335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.475018][ T7335] ? __pfx__printk+0x10/0x10 [ 129.475042][ T7335] ? do_vfs_ioctl+0xf18/0x2770 [ 129.475075][ T7335] should_fail_ex+0x40a/0x550 [ 129.475110][ T7335] _copy_from_user+0x2d/0xb0 [ 129.475138][ T7335] get_user_ifreq+0xc3/0x200 [ 129.475166][ T7335] inet_ioctl+0x33b/0x4f0 [ 129.475192][ T7335] ? __pfx_inet_ioctl+0x10/0x10 [ 129.475218][ T7335] ? tomoyo_path_number_perm+0x5dd/0x770 [ 129.475254][ T7335] ? __lock_acquire+0x1397/0x2100 [ 129.475295][ T7335] sock_do_ioctl+0x158/0x460 [ 129.475327][ T7335] ? __pfx_sock_do_ioctl+0x10/0x10 [ 129.475372][ T7335] sock_ioctl+0x626/0x8e0 [ 129.475400][ T7335] ? __pfx_sock_ioctl+0x10/0x10 [ 129.475426][ T7335] ? __fget_files+0x2a/0x410 [ 129.475458][ T7335] ? __fget_files+0x2a/0x410 [ 129.475492][ T7335] ? __pfx_sock_ioctl+0x10/0x10 [ 129.475520][ T7335] __se_sys_ioctl+0xf5/0x170 [ 129.475545][ T7335] do_syscall_64+0xf3/0x230 [ 129.475571][ T7335] ? clear_bhb_loop+0x35/0x90 [ 129.475602][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.475629][ T7335] RIP: 0033:0x7fcbfdb8d169 [ 129.475646][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.475661][ T7335] RSP: 002b:00007fcbfea11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.475682][ T7335] RAX: ffffffffffffffda RBX: 00007fcbfdda5fa0 RCX: 00007fcbfdb8d169 [ 129.475696][ T7335] RDX: 0000400000000040 RSI: 000000000000891b RDI: 0000000000000003 [ 129.475709][ T7335] RBP: 00007fcbfea11090 R08: 0000000000000000 R09: 0000000000000000 [ 129.475721][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.475732][ T7335] R13: 0000000000000000 R14: 00007fcbfdda5fa0 R15: 00007ffee8afcec8 [ 129.475761][ T7335] [ 129.478523][ T7333] lo speed is unknown, defaulting to 1000 [ 130.080536][ T7353] tap0: tun_chr_ioctl cmd 1074025673 [ 130.086469][ T7346] tap0: tun_chr_ioctl cmd 1074025677 [ 130.091979][ T7346] tap0: linktype set to 1 [ 130.295680][ T10] tipc: Node number set to 2886997039 [ 130.397787][ T7362] tipc: Enabling of bearer rejected, already enabled [ 130.628661][ T7371] FAULT_INJECTION: forcing a failure. [ 130.628661][ T7371] name failslab, interval 1, probability 0, space 0, times 1 [ 130.664822][ T7371] CPU: 1 UID: 0 PID: 7371 Comm: syz.1.337 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 130.664851][ T7371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.664862][ T7371] Call Trace: [ 130.664869][ T7371] [ 130.664877][ T7371] dump_stack_lvl+0x241/0x360 [ 130.664919][ T7371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.664941][ T7371] ? __pfx__printk+0x10/0x10 [ 130.664963][ T7371] ? __kmalloc_cache_noprof+0x48/0x390 [ 130.664994][ T7371] ? __pfx___might_resched+0x10/0x10 [ 130.665025][ T7371] should_fail_ex+0x40a/0x550 [ 130.665060][ T7371] should_failslab+0xac/0x100 [ 130.665088][ T7371] __kmalloc_cache_noprof+0x70/0x390 [ 130.665116][ T7371] ? __request_module+0x2b9/0x640 [ 130.665139][ T7371] __request_module+0x2b9/0x640 [ 130.665161][ T7371] ? capable+0x79/0xe0 [ 130.665185][ T7371] ? __pfx___request_module+0x10/0x10 [ 130.665207][ T7371] ? rcu_is_watching+0x15/0xb0 [ 130.665237][ T7371] ? bpf_lsm_capable+0x9/0x10 [ 130.665266][ T7371] ? security_capable+0x7e/0x2d0 [ 130.665301][ T7371] ? dev_load+0x21/0x1f0 [ 130.665328][ T7371] dev_load+0x18f/0x1f0 [ 130.665358][ T7371] devinet_ioctl+0x114/0x1d80 [ 130.665396][ T7371] ? __might_fault+0xaa/0x120 [ 130.665417][ T7371] ? __pfx_devinet_ioctl+0x10/0x10 [ 130.665451][ T7371] ? get_user_ifreq+0x1bb/0x200 [ 130.665480][ T7371] inet_ioctl+0x36e/0x4f0 [ 130.665506][ T7371] ? __pfx_inet_ioctl+0x10/0x10 [ 130.665532][ T7371] ? tomoyo_path_number_perm+0x5dd/0x770 [ 130.665570][ T7371] ? __lock_acquire+0x1397/0x2100 [ 130.665614][ T7371] sock_do_ioctl+0x158/0x460 [ 130.665647][ T7371] ? __pfx_sock_do_ioctl+0x10/0x10 [ 130.665689][ T7371] sock_ioctl+0x626/0x8e0 [ 130.665717][ T7371] ? __pfx_sock_ioctl+0x10/0x10 [ 130.665744][ T7371] ? __fget_files+0x2a/0x410 [ 130.665776][ T7371] ? __fget_files+0x2a/0x410 [ 130.665809][ T7371] ? __pfx_sock_ioctl+0x10/0x10 [ 130.665849][ T7371] __se_sys_ioctl+0xf5/0x170 [ 130.665870][ T7371] do_syscall_64+0xf3/0x230 [ 130.665900][ T7371] ? clear_bhb_loop+0x35/0x90 [ 130.665929][ T7371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.665952][ T7371] RIP: 0033:0x7fd9c518d169 [ 130.665968][ T7371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.665982][ T7371] RSP: 002b:00007fd9c6056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.666002][ T7371] RAX: ffffffffffffffda RBX: 00007fd9c53a5fa0 RCX: 00007fd9c518d169 [ 130.666016][ T7371] RDX: 0000400000000040 RSI: 000000000000891b RDI: 0000000000000003 [ 130.666028][ T7371] RBP: 00007fd9c6056090 R08: 0000000000000000 R09: 0000000000000000 [ 130.666039][ T7371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.666049][ T7371] R13: 0000000000000000 R14: 00007fd9c53a5fa0 R15: 00007ffe06342618 [ 130.666075][ T7371] [ 131.703542][ T7409] tipc: Enabling of bearer rejected, already enabled [ 131.746352][ T7412] __nla_validate_parse: 9 callbacks suppressed [ 131.746375][ T7412] netlink: 332 bytes leftover after parsing attributes in process `syz.0.349'. [ 131.790238][ T7412] netlink: 104 bytes leftover after parsing attributes in process `syz.0.349'. [ 131.844956][ T7412] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 131.875902][ T7400] netlink: 32 bytes leftover after parsing attributes in process `syz.0.349'. [ 131.920691][ T7422] netlink: 'syz.4.353': attribute type 4 has an invalid length. [ 131.959971][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.353'. [ 132.118644][ T7429] FAULT_INJECTION: forcing a failure. [ 132.118644][ T7429] name failslab, interval 1, probability 0, space 0, times 0 [ 132.162282][ T7429] CPU: 1 UID: 0 PID: 7429 Comm: syz.0.355 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 132.162313][ T7429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.162326][ T7429] Call Trace: [ 132.162333][ T7429] [ 132.162341][ T7429] dump_stack_lvl+0x241/0x360 [ 132.162371][ T7429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 132.162394][ T7429] ? __pfx__printk+0x10/0x10 [ 132.162416][ T7429] ? __kmalloc_node_track_caller_noprof+0xb4/0x4c0 [ 132.162449][ T7429] ? __pfx___might_resched+0x10/0x10 [ 132.162482][ T7429] should_fail_ex+0x40a/0x550 [ 132.162526][ T7429] should_failslab+0xac/0x100 [ 132.162555][ T7429] __kmalloc_node_track_caller_noprof+0xdc/0x4c0 [ 132.162585][ T7429] ? __request_module+0x2d5/0x640 [ 132.162603][ T7429] ? __kasan_kmalloc+0x98/0xb0 [ 132.162632][ T7429] kstrdup+0x42/0x100 [ 132.162664][ T7429] __request_module+0x2d5/0x640 [ 132.162686][ T7429] ? capable+0x79/0xe0 [ 132.162709][ T7429] ? __pfx___request_module+0x10/0x10 [ 132.162731][ T7429] ? rcu_is_watching+0x15/0xb0 [ 132.162761][ T7429] ? bpf_lsm_capable+0x9/0x10 [ 132.162791][ T7429] ? security_capable+0x7e/0x2d0 [ 132.162826][ T7429] ? dev_load+0x21/0x1f0 [ 132.162854][ T7429] dev_load+0x18f/0x1f0 [ 132.162883][ T7429] devinet_ioctl+0x114/0x1d80 [ 132.162922][ T7429] ? __might_fault+0xaa/0x120 [ 132.162942][ T7429] ? __pfx_devinet_ioctl+0x10/0x10 [ 132.162976][ T7429] ? get_user_ifreq+0x1bb/0x200 [ 132.163004][ T7429] inet_ioctl+0x36e/0x4f0 [ 132.163031][ T7429] ? __pfx_inet_ioctl+0x10/0x10 [ 132.163058][ T7429] ? tomoyo_path_number_perm+0x5dd/0x770 [ 132.163096][ T7429] ? __lock_acquire+0x1397/0x2100 [ 132.163135][ T7429] sock_do_ioctl+0x158/0x460 [ 132.163168][ T7429] ? __pfx_sock_do_ioctl+0x10/0x10 [ 132.163212][ T7429] sock_ioctl+0x626/0x8e0 [ 132.163239][ T7429] ? __pfx_sock_ioctl+0x10/0x10 [ 132.163265][ T7429] ? __fget_files+0x2a/0x410 [ 132.163297][ T7429] ? __fget_files+0x2a/0x410 [ 132.163327][ T7429] ? __pfx_sock_ioctl+0x10/0x10 [ 132.163353][ T7429] __se_sys_ioctl+0xf5/0x170 [ 132.163376][ T7429] do_syscall_64+0xf3/0x230 [ 132.163403][ T7429] ? clear_bhb_loop+0x35/0x90 [ 132.163433][ T7429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.163470][ T7429] RIP: 0033:0x7febea98d169 [ 132.163485][ T7429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.163506][ T7429] RSP: 002b:00007febeb894038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.163526][ T7429] RAX: ffffffffffffffda RBX: 00007febeaba5fa0 RCX: 00007febea98d169 [ 132.163539][ T7429] RDX: 0000400000000040 RSI: 000000000000891b RDI: 0000000000000003 [ 132.163550][ T7429] RBP: 00007febeb894090 R08: 0000000000000000 R09: 0000000000000000 [ 132.163561][ T7429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.163571][ T7429] R13: 0000000000000000 R14: 00007febeaba5fa0 R15: 00007ffe9590b0d8 [ 132.163597][ T7429] [ 132.784159][ T7433] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 132.844179][ T7433] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 133.056660][ T7466] netlink: 36 bytes leftover after parsing attributes in process `syz.0.363'. [ 133.076958][ T7465] vlan0: entered promiscuous mode [ 133.127932][ T7465] team0: Port device vlan0 added [ 133.150632][ T7473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 133.161247][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.168000][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418315][ T7481] netlink: 44 bytes leftover after parsing attributes in process `syz.4.367'. [ 133.452772][ T7491] FAULT_INJECTION: forcing a failure. [ 133.452772][ T7491] name failslab, interval 1, probability 0, space 0, times 0 [ 133.504186][ T7491] CPU: 1 UID: 0 PID: 7491 Comm: syz.3.370 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 133.504217][ T7491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 133.504230][ T7491] Call Trace: [ 133.504237][ T7491] [ 133.504246][ T7491] dump_stack_lvl+0x241/0x360 [ 133.504278][ T7491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.504301][ T7491] ? __pfx__printk+0x10/0x10 [ 133.504324][ T7491] ? __kmalloc_cache_noprof+0x48/0x390 [ 133.504355][ T7491] ? __pfx___might_resched+0x10/0x10 [ 133.504399][ T7491] should_fail_ex+0x40a/0x550 [ 133.504436][ T7491] should_failslab+0xac/0x100 [ 133.504466][ T7491] __kmalloc_cache_noprof+0x70/0x390 [ 133.504495][ T7491] ? call_usermodehelper_setup+0x8e/0x270 [ 133.504520][ T7491] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 133.504556][ T7491] call_usermodehelper_setup+0x8e/0x270 [ 133.504582][ T7491] ? __pfx_free_modprobe_argv+0x10/0x10 [ 133.504606][ T7491] __request_module+0x3cd/0x640 [ 133.504630][ T7491] ? capable+0x79/0xe0 [ 133.504657][ T7491] ? __pfx___request_module+0x10/0x10 [ 133.504678][ T7491] ? rcu_is_watching+0x15/0xb0 [ 133.504709][ T7491] ? bpf_lsm_capable+0x9/0x10 [ 133.504739][ T7491] ? security_capable+0x7e/0x2d0 [ 133.504774][ T7491] ? dev_load+0x21/0x1f0 [ 133.504801][ T7491] dev_load+0x18f/0x1f0 [ 133.504830][ T7491] devinet_ioctl+0x114/0x1d80 [ 133.504871][ T7491] ? __might_fault+0xaa/0x120 [ 133.504892][ T7491] ? __pfx_devinet_ioctl+0x10/0x10 [ 133.504929][ T7491] ? get_user_ifreq+0x1bb/0x200 [ 133.504959][ T7491] inet_ioctl+0x36e/0x4f0 [ 133.504986][ T7491] ? __pfx_inet_ioctl+0x10/0x10 [ 133.505015][ T7491] ? tomoyo_path_number_perm+0x5dd/0x770 [ 133.505057][ T7491] ? __lock_acquire+0x1397/0x2100 [ 133.505101][ T7491] sock_do_ioctl+0x158/0x460 [ 133.505135][ T7491] ? __pfx_sock_do_ioctl+0x10/0x10 [ 133.505184][ T7491] sock_ioctl+0x626/0x8e0 [ 133.505215][ T7491] ? __pfx_sock_ioctl+0x10/0x10 [ 133.505243][ T7491] ? __fget_files+0x2a/0x410 [ 133.505277][ T7491] ? __fget_files+0x2a/0x410 [ 133.505313][ T7491] ? __pfx_sock_ioctl+0x10/0x10 [ 133.505342][ T7491] __se_sys_ioctl+0xf5/0x170 [ 133.505376][ T7491] do_syscall_64+0xf3/0x230 [ 133.505404][ T7491] ? clear_bhb_loop+0x35/0x90 [ 133.505437][ T7491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.505465][ T7491] RIP: 0033:0x7f5346b8d169 [ 133.505483][ T7491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.505500][ T7491] RSP: 002b:00007f53479ef038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 133.505522][ T7491] RAX: ffffffffffffffda RBX: 00007f5346da5fa0 RCX: 00007f5346b8d169 [ 133.505538][ T7491] RDX: 0000400000000040 RSI: 000000000000891b RDI: 0000000000000003 [ 133.505551][ T7491] RBP: 00007f53479ef090 R08: 0000000000000000 R09: 0000000000000000 [ 133.505564][ T7491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.505576][ T7491] R13: 0000000000000000 R14: 00007f5346da5fa0 R15: 00007fff6435aa98 [ 133.505606][ T7491] [ 134.085913][ T7506] netlink: 40 bytes leftover after parsing attributes in process `syz.4.373'. [ 134.321864][ T7519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.378'. [ 134.431325][ T7522] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 134.580612][ T7530] netlink: 'syz.2.382': attribute type 5 has an invalid length. [ 134.604125][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.670986][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.759414][ T7531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.804101][ T7531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.861291][ T7506] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 135.045664][ T7549] pim6reg: entered allmulticast mode [ 135.071191][ T7548] pim6reg: left allmulticast mode [ 135.294409][ T7559] wg1 speed is unknown, defaulting to 1000 [ 135.366123][ T7559] lo speed is unknown, defaulting to 1000 [ 135.692891][ T7575] bridge_slave_0: left allmulticast mode [ 135.707740][ T7575] bridge_slave_0: left promiscuous mode [ 135.723935][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.788219][ T7575] bond0: (slave bond_slave_0): Releasing backup interface [ 135.818576][ T7575] bond0: (slave bond_slave_1): Releasing backup interface [ 135.856542][ T7575] team0: Port device team_slave_0 removed [ 135.873741][ T7575] team0: Port device team_slave_1 removed [ 135.883846][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.900226][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.910912][ T7575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.930730][ T7575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.962057][ T7575] bridge0: port 2(batadv1) entered disabled state [ 136.006242][ T7578] team0: Mode changed to "loadbalance" [ 136.193172][ T7597] pim6reg: entered allmulticast mode [ 136.202337][ T5838] Bluetooth: hci0: command 0x0c20 tx timeout [ 136.238128][ T7596] pim6reg: left allmulticast mode [ 136.584239][ T7616] netlink: 'syz.3.408': attribute type 28 has an invalid length. [ 136.846931][ T7627] netlink: 'syz.1.412': attribute type 3 has an invalid length. [ 136.885892][ T7627] __nla_validate_parse: 4 callbacks suppressed [ 136.885910][ T7627] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.412'. [ 136.956506][ T7632] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 136.968028][ T7632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.175950][ T7637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.416'. [ 137.310793][ T7639] pim6reg: entered allmulticast mode [ 137.333658][ T7638] pim6reg: left allmulticast mode [ 137.620219][ T7654] tipc: Started in network mode [ 137.639668][ T7654] tipc: Node identity ac14142f, cluster identity 4711 [ 137.682533][ T7654] tipc: New replicast peer: 0.0.0.0 [ 137.729943][ T7654] tipc: Enabled bearer , priority 10 [ 137.789858][ T7647] netlink: 32 bytes leftover after parsing attributes in process `syz.1.420'. [ 137.906655][ T7665] syzkaller1: entered promiscuous mode [ 137.912198][ T7665] syzkaller1: entered allmulticast mode [ 138.064898][ T7676] netlink: 8 bytes leftover after parsing attributes in process `syz.4.427'. [ 138.094104][ T7680] tap0: tun_chr_ioctl cmd 2147767506 [ 138.302016][ T7687] netlink: 24 bytes leftover after parsing attributes in process `syz.4.429'. [ 138.491865][ T7693] pim6reg: entered allmulticast mode [ 138.523144][ T7692] pim6reg: left allmulticast mode [ 138.770322][ T7699] FAULT_INJECTION: forcing a failure. [ 138.770322][ T7699] name failslab, interval 1, probability 0, space 0, times 0 [ 138.800986][ T7699] CPU: 0 UID: 0 PID: 7699 Comm: syz.1.435 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 138.801019][ T7699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.801032][ T7699] Call Trace: [ 138.801040][ T7699] [ 138.801048][ T7699] dump_stack_lvl+0x241/0x360 [ 138.801081][ T7699] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.801104][ T7699] ? __pfx__printk+0x10/0x10 [ 138.801127][ T7699] ? __kmalloc_cache_noprof+0x48/0x390 [ 138.801159][ T7699] ? __pfx___might_resched+0x10/0x10 [ 138.801190][ T7699] should_fail_ex+0x40a/0x550 [ 138.801228][ T7699] should_failslab+0xac/0x100 [ 138.801257][ T7699] __kmalloc_cache_noprof+0x70/0x390 [ 138.801285][ T7699] ? call_usermodehelper_setup+0x8e/0x270 [ 138.801310][ T7699] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 138.801346][ T7699] call_usermodehelper_setup+0x8e/0x270 [ 138.801372][ T7699] ? __pfx_free_modprobe_argv+0x10/0x10 [ 138.801397][ T7699] __request_module+0x3cd/0x640 [ 138.801418][ T7699] ? __pfx_aa_get_newest_label+0x10/0x10 [ 138.801451][ T7699] ? capable+0x79/0xe0 [ 138.801475][ T7699] ? __pfx___request_module+0x10/0x10 [ 138.801505][ T7699] ? security_capable+0x7e/0x2d0 [ 138.801539][ T7699] ? capable+0x89/0xe0 [ 138.801562][ T7699] ? dev_load+0x21/0x1f0 [ 138.801594][ T7699] devinet_ioctl+0x114/0x1d80 [ 138.801634][ T7699] ? __might_fault+0xaa/0x120 [ 138.801656][ T7699] ? __pfx_devinet_ioctl+0x10/0x10 [ 138.801691][ T7699] ? get_user_ifreq+0x1bb/0x200 [ 138.801720][ T7699] inet_ioctl+0x36e/0x4f0 [ 138.801747][ T7699] ? __pfx_inet_ioctl+0x10/0x10 [ 138.801775][ T7699] ? tomoyo_path_number_perm+0x5dd/0x770 [ 138.801817][ T7699] ? __lock_acquire+0x1397/0x2100 [ 138.801860][ T7699] sock_do_ioctl+0x158/0x460 [ 138.801902][ T7699] ? __pfx_sock_do_ioctl+0x10/0x10 [ 138.801950][ T7699] sock_ioctl+0x626/0x8e0 [ 138.801984][ T7699] ? __pfx_sock_ioctl+0x10/0x10 [ 138.802013][ T7699] ? __fget_files+0x2a/0x410 [ 138.802047][ T7699] ? __fget_files+0x2a/0x410 [ 138.802082][ T7699] ? __pfx_sock_ioctl+0x10/0x10 [ 138.802112][ T7699] __se_sys_ioctl+0xf5/0x170 [ 138.802137][ T7699] do_syscall_64+0xf3/0x230 [ 138.802166][ T7699] ? clear_bhb_loop+0x35/0x90 [ 138.802198][ T7699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.802227][ T7699] RIP: 0033:0x7fd9c518d169 [ 138.802244][ T7699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.802261][ T7699] RSP: 002b:00007fd9c6056038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.802284][ T7699] RAX: ffffffffffffffda RBX: 00007fd9c53a5fa0 RCX: 00007fd9c518d169 [ 138.802299][ T7699] RDX: 0000400000000040 RSI: 000000000000891b RDI: 0000000000000003 [ 138.802311][ T7699] RBP: 00007fd9c6056090 R08: 0000000000000000 R09: 0000000000000000 [ 138.802324][ T7699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.802336][ T7699] R13: 0000000000000000 R14: 00007fd9c53a5fa0 R15: 00007ffe06342618 [ 138.802364][ T7699] [ 139.120075][ T5839] tipc: Node number set to 2886997039 [ 139.280982][ T7710] netlink: 24 bytes leftover after parsing attributes in process `syz.3.442'. [ 139.535691][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 139.567255][ T7706] bridge_slave_0: left allmulticast mode [ 139.587660][ T7706] bridge_slave_0: left promiscuous mode [ 139.621112][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.262364][ T52] IPVS: starting estimator thread 0... [ 140.281562][ T7752] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 140.386628][ T7760] IPVS: using max 18 ests per chain, 43200 per kthread [ 140.719951][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 140.771302][ T7781] openvswitch: netlink: Key type 31 is not supported [ 140.938871][ T7791] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.980649][ T7791] batadv_slave_0: entered promiscuous mode [ 141.014526][ T7791] batadv_slave_0: entered allmulticast mode [ 141.054116][ T7791] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 141.288604][ T7809] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 141.432547][ T7809] [ 141.434944][ T7809] ====================================================== [ 141.441982][ T7809] WARNING: possible circular locking dependency detected [ 141.449014][ T7809] 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 Not tainted [ 141.456126][ T7809] ------------------------------------------------------ [ 141.463142][ T7809] syz.2.470/7809 is trying to acquire lock: [ 141.469028][ T7809] ffff888079ef8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_change_mac+0xc6/0x1160 [ 141.478795][ T7809] [ 141.478795][ T7809] but task is already holding lock: [ 141.486161][ T7809] ffff88802fb44d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 141.495150][ T7809] [ 141.495150][ T7809] which lock already depends on the new lock. [ 141.495150][ T7809] [ 141.505559][ T7809] [ 141.505559][ T7809] the existing dependency chain (in reverse order) is: [ 141.514578][ T7809] [ 141.514578][ T7809] -> #1 (&dev->lock){+.+.}-{4:4}: [ 141.521829][ T7809] lock_acquire+0x1ed/0x550 [ 141.526901][ T7809] __mutex_lock+0x19c/0x1010 [ 141.532022][ T7809] register_netdevice+0x12d8/0x1b70 [ 141.537752][ T7809] cfg80211_register_netdevice+0x149/0x2f0 [ 141.544092][ T7809] ieee80211_if_add+0x119d/0x1780 [ 141.549689][ T7809] ieee80211_register_hw+0x3708/0x42e0 [ 141.555706][ T7809] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 141.561962][ T7809] init_mac80211_hwsim+0x87a/0xb00 [ 141.567604][ T7809] do_one_initcall+0x248/0x930 [ 141.572918][ T7809] do_initcall_level+0x157/0x210 [ 141.578385][ T7809] do_initcalls+0x71/0xd0 [ 141.583239][ T7809] kernel_init_freeable+0x435/0x5d0 [ 141.588964][ T7809] kernel_init+0x1d/0x2b0 [ 141.593827][ T7809] ret_from_fork+0x4b/0x80 [ 141.598773][ T7809] ret_from_fork_asm+0x1a/0x30 [ 141.604059][ T7809] [ 141.604059][ T7809] -> #0 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 141.611799][ T7809] validate_chain+0x18ef/0x5920 [ 141.617193][ T7809] __lock_acquire+0x1397/0x2100 [ 141.622575][ T7809] lock_acquire+0x1ed/0x550 [ 141.627633][ T7809] __mutex_lock+0x19c/0x1010 [ 141.632754][ T7809] ieee80211_change_mac+0xc6/0x1160 [ 141.638478][ T7809] netif_set_mac_address+0x327/0x510 [ 141.644286][ T7809] dev_set_mac_address+0x38/0x50 [ 141.649747][ T7809] bond_enslave+0xff3/0x3910 [ 141.654859][ T7809] do_set_master+0x579/0x730 [ 141.659968][ T7809] do_setlink+0xfee/0x40f0 [ 141.664901][ T7809] rtnl_newlink+0x15a6/0x1d90 [ 141.670105][ T7809] rtnetlink_rcv_msg+0x791/0xcf0 [ 141.675567][ T7809] netlink_rcv_skb+0x206/0x480 [ 141.680859][ T7809] netlink_unicast+0x7f6/0x990 [ 141.686149][ T7809] netlink_sendmsg+0x8de/0xcb0 [ 141.691439][ T7809] __sock_sendmsg+0x221/0x270 [ 141.696646][ T7809] ____sys_sendmsg+0x53a/0x860 [ 141.701931][ T7809] __sys_sendmsg+0x269/0x350 [ 141.707048][ T7809] do_syscall_64+0xf3/0x230 [ 141.712078][ T7809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.718496][ T7809] [ 141.718496][ T7809] other info that might help us debug this: [ 141.718496][ T7809] [ 141.728732][ T7809] Possible unsafe locking scenario: [ 141.728732][ T7809] [ 141.736213][ T7809] CPU0 CPU1 [ 141.741572][ T7809] ---- ---- [ 141.746938][ T7809] lock(&dev->lock); [ 141.750924][ T7809] lock(&rdev->wiphy.mtx); [ 141.757952][ T7809] lock(&dev->lock); [ 141.764461][ T7809] lock(&rdev->wiphy.mtx); [ 141.768978][ T7809] [ 141.768978][ T7809] *** DEADLOCK *** [ 141.768978][ T7809] [ 141.777120][ T7809] 2 locks held by syz.2.470/7809: [ 141.782139][ T7809] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 141.791224][ T7809] #1: ffff88802fb44d28 (&dev->lock){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 141.800637][ T7809] [ 141.800637][ T7809] stack backtrace: [ 141.806532][ T7809] CPU: 0 UID: 0 PID: 7809 Comm: syz.2.470 Not tainted 6.14.0-rc6-syzkaller-01216-gbfc6c67ec2d6 #0 [ 141.806553][ T7809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.806563][ T7809] Call Trace: [ 141.806570][ T7809] [ 141.806576][ T7809] dump_stack_lvl+0x241/0x360 [ 141.806609][ T7809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.806627][ T7809] ? __pfx__printk+0x10/0x10 [ 141.806646][ T7809] print_circular_bug+0x13a/0x1b0 [ 141.806668][ T7809] check_noncircular+0x36a/0x4a0 [ 141.806688][ T7809] ? __pfx_check_noncircular+0x10/0x10 [ 141.806706][ T7809] ? lockdep_lock+0x123/0x2b0 [ 141.806730][ T7809] ? radix_tree_node_alloc+0x19a/0x3c0 [ 141.806749][ T7809] ? idr_get_free+0x296/0xab0 [ 141.806766][ T7809] ? idr_alloc_u32+0x195/0x330 [ 141.806784][ T7809] ? idr_alloc_cyclic+0x106/0x300 [ 141.806802][ T7809] ? __kernfs_new_node+0x12d/0x870 [ 141.806826][ T7809] ? kernfs_create_dir_ns+0x43/0x120 [ 141.806851][ T7809] ? sysfs_create_dir_ns+0x189/0x3a0 [ 141.806871][ T7809] ? kobject_add_internal+0x435/0x8d0 [ 141.806896][ T7809] validate_chain+0x18ef/0x5920 [ 141.806922][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.806942][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.806978][ T7809] ? kmem_cache_alloc_noprof+0x22d/0x380 [ 141.807003][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.807021][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.807039][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.807059][ T7809] ? idr_get_free+0x91c/0xab0 [ 141.807077][ T7809] ? __pfx_validate_chain+0x10/0x10 [ 141.807096][ T7809] ? mark_lock+0x9a/0x360 [ 141.807112][ T7809] __lock_acquire+0x1397/0x2100 [ 141.807144][ T7809] lock_acquire+0x1ed/0x550 [ 141.807168][ T7809] ? ieee80211_change_mac+0xc6/0x1160 [ 141.807193][ T7809] ? __pfx_lock_acquire+0x10/0x10 [ 141.807219][ T7809] ? __pfx___might_resched+0x10/0x10 [ 141.807247][ T7809] __mutex_lock+0x19c/0x1010 [ 141.807268][ T7809] ? ieee80211_change_mac+0xc6/0x1160 [ 141.807290][ T7809] ? __pfx_lock_release+0x10/0x10 [ 141.807317][ T7809] ? ieee80211_change_mac+0xc6/0x1160 [ 141.807339][ T7809] ? __pfx___mutex_lock+0x10/0x10 [ 141.807363][ T7809] ? ib_device_get_by_netdev+0x85/0x5e0 [ 141.807390][ T7809] ? __pfx_ib_device_get_by_netdev+0x10/0x10 [ 141.807415][ T7809] ? hsr_netdev_notify+0x295/0xb50 [ 141.807440][ T7809] ieee80211_change_mac+0xc6/0x1160 [ 141.807462][ T7809] ? ip6_route_dev_notify+0x99/0x600 [ 141.807482][ T7809] ? notifier_call_chain+0x15a/0x3f0 [ 141.807507][ T7809] ? notifier_call_chain+0x3cc/0x3f0 [ 141.807532][ T7809] netif_set_mac_address+0x327/0x510 [ 141.807554][ T7809] ? __pfx_netif_set_mac_address+0x10/0x10 [ 141.807578][ T7809] dev_set_mac_address+0x38/0x50 [ 141.807605][ T7809] bond_enslave+0xff3/0x3910 [ 141.807630][ T7809] ? __pfx_fib6_run_gc+0x10/0x10 [ 141.807664][ T7809] ? ip6_route_dev_notify+0x99/0x600 [ 141.807683][ T7809] ? notifier_call_chain+0x15a/0x3f0 [ 141.807709][ T7809] ? __pfx_bond_enslave+0x10/0x10 [ 141.807732][ T7809] ? __pfx___dev_change_flags+0x10/0x10 [ 141.807749][ T7809] ? validate_linkmsg+0x828/0xa40 [ 141.807772][ T7809] ? mutex_is_locked+0x17/0x50 [ 141.807790][ T7809] do_set_master+0x579/0x730 [ 141.807810][ T7809] do_setlink+0xfee/0x40f0 [ 141.807835][ T7809] ? __pfx_do_setlink+0x10/0x10 [ 141.807857][ T7809] ? __pfx___might_resched+0x10/0x10 [ 141.807880][ T7809] ? __pfx___mutex_trylock_common+0x10/0x10 [ 141.807901][ T7809] ? rcu_is_watching+0x15/0xb0 [ 141.807919][ T7809] ? trace_contention_end+0x3c/0x120 [ 141.807938][ T7809] ? __mutex_lock+0x397/0x1010 [ 141.807960][ T7809] ? __pfx_aa_get_newest_label+0x10/0x10 [ 141.807989][ T7809] ? rtnl_newlink+0xc4c/0x1d90 [ 141.808015][ T7809] ? __pfx___mutex_lock+0x10/0x10 [ 141.808039][ T7809] ? ns_capable+0x8a/0xf0 [ 141.808058][ T7809] ? rtnl_link_get_net_capable+0x168/0x340 [ 141.808077][ T7809] rtnl_newlink+0x15a6/0x1d90 [ 141.808108][ T7809] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.808137][ T7809] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 141.808164][ T7809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.808191][ T7809] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 141.808210][ T7809] ? lockdep_hardirqs_on+0x99/0x150 [ 141.808230][ T7809] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 141.808249][ T7809] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 141.808271][ T7809] ? rcu_preempt_deferred_qs_irqrestore+0x8c4/0xca0 [ 141.808303][ T7809] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 141.808333][ T7809] ? rcu_is_watching+0x15/0xb0 [ 141.808352][ T7809] ? rcu_read_unlock_special+0x497/0x570 [ 141.808378][ T7809] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 141.808408][ T7809] ? __rcu_read_unlock+0xa1/0x110 [ 141.808431][ T7809] ? __pfx_rtnl_newlink+0x10/0x10 [ 141.808457][ T7809] rtnetlink_rcv_msg+0x791/0xcf0 [ 141.808483][ T7809] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 141.808510][ T7809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.808538][ T7809] ? ref_tracker_free+0x643/0x7e0 [ 141.808557][ T7809] netlink_rcv_skb+0x206/0x480 [ 141.808583][ T7809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 141.808615][ T7809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 141.808647][ T7809] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.808673][ T7809] netlink_unicast+0x7f6/0x990 [ 141.808699][ T7809] ? __pfx_netlink_unicast+0x10/0x10 [ 141.808720][ T7809] ? __virt_addr_valid+0x45f/0x530 [ 141.808736][ T7809] ? __phys_addr_symbol+0x2f/0x70 [ 141.808751][ T7809] ? __check_object_size+0x47a/0x730 [ 141.808776][ T7809] netlink_sendmsg+0x8de/0xcb0 [ 141.808806][ T7809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.808833][ T7809] ? aa_sock_msg_perm+0x91/0x160 [ 141.808861][ T7809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.808888][ T7809] __sock_sendmsg+0x221/0x270 [ 141.808914][ T7809] ____sys_sendmsg+0x53a/0x860 [ 141.808936][ T7809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.808955][ T7809] ? __fget_files+0x2a/0x410 [ 141.808981][ T7809] ? __fget_files+0x2a/0x410 [ 141.809008][ T7809] __sys_sendmsg+0x269/0x350 [ 141.809029][ T7809] ? __pfx___sys_sendmsg+0x10/0x10 [ 141.809064][ T7809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 141.809090][ T7809] ? do_syscall_64+0x100/0x230 [ 141.809113][ T7809] ? do_syscall_64+0xb6/0x230 [ 141.809135][ T7809] do_syscall_64+0xf3/0x230 [ 141.809157][ T7809] ? clear_bhb_loop+0x35/0x90 [ 141.809182][ T7809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.809207][ T7809] RIP: 0033:0x7f2acb98d169 [ 141.809222][ T7809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.809241][ T7809] RSP: 002b:00007f2acc857038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.809259][ T7809] RAX: ffffffffffffffda RBX: 00007f2acbba5fa0 RCX: 00007f2acb98d169 [ 141.809272][ T7809] RDX: 0000000000000000 RSI: 0000400000000600 RDI: 0000000000000004 [ 141.809282][ T7809] RBP: 00007f2acba0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.809292][ T7809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.809302][ T7809] R13: 0000000000000000 R14: 00007f2acbba5fa0 R15: 00007ffc4303f728 [ 141.809319][ T7809] [ 142.533593][ T7809] bond0: (slave wlan1): Enslaving as an active interface with an up link